INFORMATION ON DATA PROCESSING - GDPR 2016/679
This information is provided pursuant to the GENERAL REGULATION ON DATA PROTECTION Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
Owner and manager of the treatment
The owner and manager of the treatment is Giuseppe Sciabica, C.F. SCBGPP78S06G273L, (also Data Controller or Data Controller) who, to exercise rights or communications regarding privacy, provides the email address: info@multipliedart.com.
Personal data collected
The Data Controller processes, in accordance with this information, the data provided, including;
a) data, including personal and contact details, tax data, images of documents useful for registering on the site and for participating in any auctions published on the site;
b) the data provided in the event of a request for information and assistance;
c) the navigation data that the computer systems and software procedures used to operate this website automatically acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes, among others: IP addresses, the type of browser used, the operating system, the domain name and the addresses of websites from which access was made, information on the pages visited by users within the site, the access time, the stay on the single page, the analysis of the internal path and other parameters relating to the operating system and the user's IT environment.
Purpose of the processing
Personal data are processed without explicit consent for:
- manage access to the site and related functions;
- keep the data in our archives;
- carry out administrative, accounting, tax and legal obligations;
- comply with any legal and regulatory obligations;
- in any case fulfill any obligation required by law, by community regulations or by an order of the Authority;
- exercise the rights of the owner, for example the right to defense in court;
- detect the experience of using the site, the products and services that are offered and ensure the proper functioning of the web pages and their contents.
Personal data are processed only with the specific and distinct consent of the interested party (Articles 23 and 130 of the Privacy Code and Article 7 of the GDPR) for:
- the purpose of sending commercial information via e-mail, sms, mms, telephone contacts, social networks, instant messages, mobile applications, fax, mail and telephone;
- the promotion and / or sale of products and / or services;
- subscription to informative and commercial newsletters;
- carry out profiling activities, i.e. analysis and processing of information relating to the user, his preferences, habits, consumption choices and / or browsing experiences. This activity is also carried out through the use of technologies such as cookies.
The treatments put in place for these purposes are carried out with the specific consent provided by the interested party, with the exception of an analysis of elementary information relating to his consumption preferences.
Processing methods
Data processing is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2 GDPR and more precisely: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, use, blocking, communication, cancellation and destruction of data. Personal data are subjected to both paper and electronic processing.
The Data Controller takes all necessary precautions, including administrative, technical,
organizational as well as physical, in order to protect personal data in order to prevent the risk of any loss, theft or fraudulent theft, as well as any unauthorized access, disclosure, alteration or destruction.
Although all security measures deemed reasonably necessary are applied, the transmission of data over the Internet (as well as via e-mail) is never completely secure. The Data Controller undertakes to protect the personal data in its possession, but is not able to guarantee the security of the communication of the data transmitted and / or received.
Principles applicable to the processing of personal data
The Data Controller undertakes to ensure that the personal data in its possession are:
- collected for specific, explicit and legitimate purposes and not further processed in a way that is not in line with these purposes;
- processed in a lawful, correct and transparent way towards the interested party;
- adequate, relevant and limited to what is necessary with respect to the purposes for which they are processed;
- accurate and, if necessary, updated;
- kept in a form that allows the identification of the data subjects for a span of time not
superior to the achievement of the purposes for which they are processed;
- processed in a manner that guarantees adequate security;
Communication of personal data
Without the need for express consent (pursuant to Article 24 letter a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate the data for the purposes referred to in art. 2.A) to Supervisory Bodies, Judicial Authorities, as well as to those subjects to whom communication is mandatory by law for the accomplishment of the aforementioned purposes.
The data, which is the subject of this information, may be disclosed to professionals and / or collaborators of the Data Controller for the performance of the assigned task.
Transfer of personal data
The Data Controller ensures that the transfer of data outside the EU will not take place in any case unless the transfer is required by law in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
Redirect to external sites
The website can use the so-called social plug-in. Social plug-ins are special tools that allow you to incorporate the functions of the social network directly into the website (eg the "like" function of Facebook).
All social plug-ins on the site are marked with the respective logo owned by the social network platform (eg. Facebook, Google, Twitter, Linkedin).
When you visit a page of the site and interact with the plug-in (eg by clicking the "Like" button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform and from this stored. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as for the methods by which to exercise their rights, please consult the privacy policy adopted by the individual. social network.
Rights of interested parties
The subjects to whom the aforementioned personal data refer (so-called "Interested"), have the right to exercise their rights in the manner and within the limits established by current privacy legislation.
In relation to the processing of personal data, the interested party has the right to ask the Data Controller:
- access; may request confirmation as to whether or not data is being processed concerning him, as well as further clarifications regarding the information referred to in this Notice, as well as to receive the data, within the limits of reasonableness;
- rectification; may request to rectify or supplement the data provided, if inaccurate;
- cancellation; may request that the data acquired or processed be deleted, if they are no longer necessary for the purposes for which they were provided, or where there are no disputes or disputes in place, in case of revocation of the consent or opposition of the interested party to the treatment, in case of unlawful processing, or if there is a legal obligation of cancellation;
- the limitation; may request the limitation of the processing of personal data, when one of the conditions referred to in art. 18 of the GDPR; in this case, the data will not be processed, except for storage, without the consent of the interested party except as specified in the same article in paragraph 2.
- the opposition; may object to the processing of data at any time unless there are legitimate reasons of the Data Controller to proceed with the processing that prevail over those of the interested party, for example for the exercise or defense in court; the opposition of the interested party will always prevail over our legitimate interest in processing data for marketing purposes;
- portability; may request to receive the data, or to have them transmitted to another Data Controller indicated by the Data Subject, in a structured format, commonly used and readable by an automatic device.
Furthermore, pursuant to art. 7, par. 3, GDPR, the interested party is informed that he can exercise the right to withdraw consent at any time, without prejudice to the lawfulness of the processing based on the consent given previously. Finally, we inform the interested party that he has the right to lodge a complaint with the Supervisory Authority, which in Italy is the Guarantor for the Protection of Personal Data.
To exercise these rights, report problems or ask for clarification on the processing of personal data, send an email to info@multipliedart.com
Changes to the Information
The possible entry into force of new sector regulations, as well as the constant examination and updating of user services, may result in the need to change the methods and terms described in this Notice. It is therefore possible that this document may undergo changes over time. He invites you therefore, we periodically consult this page.
We will publish any changes to this Notice on this page and, if the changes are relevant, we will notify you with a more visible notification.
Previous versions of this information will, in any case, be archived to allow consultation.
Duration of treatment
The Data Controller will process personal data for the duration necessary to fulfill the aforementioned purposes which in any case:
will be exclusively stored and not processed for 10 years from the termination of the relationship due to the mandatory retention of tax data associated with invoices;
will not be processed upon express request by the interested party to block, cancel or cancel;
they will not be processed after 10 years from the last contact.
