Information on the processing of personal data

Information on the processing of personal data [Article 13 of Regulation (EU) No 679/2016]

Dear Customer,

In accordance with Article 13 of Regulation (EU) No. 679/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data – hereinafter, Regulation (EU) – we provide you with the following information on the processing of your personal data:

 

Contact details of the data controller of your personal data:

The data controller of your personal data is PGK DESIGN SRL Unipersonale, with the registered office at Via G. Uberti, 12 20129 Milano MI and can be contacted by phone on +39 339 2336368 or at the e-mail address ‘info@pgkart.com‘.

Decision to appoint the personal data protection officer:

The data controller has decided not to appoint a personal data protection officer, as PGK DESIGN SRL Unipersonale, besides not being obliged to do so according to the provisions of Article 37, pp. 1 and 4 of Regulation (EU), has considered such appointment as currently unnecessary.

Purposes and related legal bases of the processing of your personal data:

Your personal data, adequate, relevant and limited to what is necessary, will be processed by PGK DESIGN SRL Unipersonale in a lawful, correct and transparent manner towards you and in such a way as to guarantee adequate security for the following purposes:

  • execution of the contract concluded between you and PGK DESIGN SRL Unipersonale, including your registration for use of the attraction: the condition of lawfulness is the need to execute a contract to which the interested party is a party, pursuant to art. 6, p. 1, l. b) of the Regulation (EU);
  • execution of the contract concluded between you and PGK DESIGN SRL Unipersonale, including the sending by e-mail or to your APP account of the results and the ranking of the race: the condition of lawfulness is the need to execute a contract to which the interested party is a party, pursuant to art. 6, p. 1, l. b) of Regulation (EU);
  • fulfilment of a legal and fiscal obligation by the data controller: the fulfilment of a legal and fiscal obligation by the data controller: the condition of lawfulness is the need to fulfil a legal obligation which the data controller is subject to, pursuant to art. 6, p. 1, l. c) of Regulation (EU);
  • fulfilment of an obligation in respect of the protection of personal data and any other obligation imposed by a legal provision to which the controller is subject: the condition of lawfulness is the need to fulfil a legal obligation which the data controller is subject to, pursuant to art. 6, p. 1, l. c) of Regulation (EU);
  • possible exercise of the right of defence against you by the data controller: the condition of lawfulness is the need to pursue the legitimate interest (legal protection) of the data controller, pursuant to art. 6, p. 1, l. f) of the Regulation (EU);
  • protection of company assets by the data controller, including hardware maintenance, software maintenance and e-mail maintenance: the condition of lawfulness is the need to pursue the legitimate interest (protection of company assets) of the data controller, pursuant to art. 6, p. 1, l. f) of Regulation (EU);
  • protection of company assets by the data controller, including the registration of races attended: the condition for lawfulness is the need to pursue the legitimate interest (protection of company assets) of the data controller, pursuant to art. 6, p. 1, l. f) of Regulation (EU);
  • carrying out of promotional activities concerning initiatives relating to the attraction, by means of SMS, e-mails, post and applications: the condition of lawfulness is the consent to the processing of your personal data for this specific purpose given by the interested party, pursuant to art. 6, p. 1, l. a) of the Regulation (EU);
  • carrying out of promotional and/or advertising activities inherent to the economic activity carried out by the data controller concerning the publication of your images/videos on PGK Design Srl Unipersonale’s website or social networks: the condition of lawfulness is the consent to the processing of your personal data for this specific purpose given by the data subject, pursuant to art. 6, p. 1, l. a) of the Regulation (EU);
  • carrying out of promotional and/or advertising activities inherent to the economic activity carried out by the data controller: the condition of lawfulness is the consent to the processing of your personal data for this specific purpose given by the data subject, pursuant to art. 6, p. 1, l. a) of the Regulation (EU).

Possible categories of recipients of your personal data:

With regard to the processing of your personal data carried out by PGK DESIGN SRL Unipersonale for the purposes listed above, possible categories of recipients of your personal data may be:

  • staff, collaborators, trainees and administrators of the data controller, in their capacity as persons in charge of the processing of your personal data, for the purpose of performing the contract entered into between you and the data controller, fulfilling a civil and fiscal obligation, fulfilling an obligation relating to the protection of personal data and any other obligation laid down in a legal provision to which the data controller is subject, possibly providing legal protection for you and carrying out promotional and/or advertising activities: it should be noted that all such persons are duly trained in the appropriate measures to be taken in order to protect your personal data, pursuant to art. 29 of the Regulation (EU);
  • subjects external to our organisational structure, in their capacity as persons responsible for processing your personal data, in order to execute the contract concluded with you (e.g.: banking brokers, technical consultants);
  • subjects external to our organisational structure, in their capacity as persons responsible for processing your personal data, in order to fulfil civil and fiscal obligations (e.g.: accountants, accounting experts, data processing centres);
  • subjects external to our organisational structure in their capacity as persons responsible for processing your personal data, in order to comply with any obligation regarding the protection of personal data and any other obligation laid down by a legal provision to which the data controller is subject (e.g. companies and consultants);
  • subjects external to our organisational structure, in order to be able to legally protect the company against you (lawyers and law firms);
  • subjects external to our organisational structure as persons responsible for processing your personal data in order to protect the company’s assets (e.g. hardware, software, network and e-mail IT staff);
  • subjects external to our organisational structure, in their capacity as persons responsible for processing your personal data, in order to carry out promotional and/or advertising activities inherent to the economic activity carried out by the data controller.

Please note that all the aforementioned persons are bound to the data controller by a specific contract providing for appropriate measures to be taken to ensure the protection of your personal data, pursuant to Article 28 of the Regulation (EU).

Decision to transfer your personal data to a third country or to an international organisation:

The data controller has decided not to transfer your personal data to a third country or to an international organisation, as this has been considered unnecessary for the moment.

Storage period of your personal data:

PGK DESIGN SRL Unipersonale will store your personal data processed by the company for the purposes of performing the contract concluded between you and the company, protecting the company’s assets, the fulfilment of any civil and fiscal obligations and the fulfilment of any obligations regarding the protection of personal data and any other obligations established by a legal provision to which the data controller is subject, in a form that allows your identification, for a period of time equal to the execution of the contract between you and the data controller and for a further period of time equal to 10 years for the purposes of any further processing within the ordinary limitation period. Your data will then be destroyed or deleted.

PGK DESIGN SRL Unipersonale will store your personal data processed by the company for the purposes of exercising its right of defence against you in a form that allows your identification only for the period of time necessary for any legal defence against you, and will then destroy or delete the data.

PGK DESIGN SRL Unipersonale will store your personal data processed by the company for the purpose of carrying out promotional and/or advertising activities related to the economic activity performed by the data controller in a form that allows your identification only for as long as you have given your consent to the processing of your personal data for this specific purpose, and will then destroy or delete the data.

Your rights:

You, as a Data Subject, may exercise the following rights by sending an e-mail to ‘info@pgkart.com‘:

  • access your personal data, pursuant to Art. 15 of the Regualtion (EU), in order to verify the processing of your personal data and, if applicable:
    • obtain information on the purposes of the processing of your personal data;
    • obtain information on the categories of your processed personal data;
    • obtain information on the possible categories of recipients of your personal data;
    • obtain information on the storage period of your personal data;
    • obtain information on your right to rectify or delete your personal data or on your right to limit the processing of your personal data;
    • obtain information on your right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority);
    • obtain information on whether or not an automated decision-making process is used in the processing of your personal data, including the methods used and the consequences for you of such processing;
  • rectify your personal data, pursuant to Art. 16 of the Regulation (EU), in the event that the accuracy of your personal data is contested;
  • supplement your personal data, pursuant to art. 16 of the Regulation (EU), in the event that the completeness of the data is contested;
  • delete, pursuant to Art. 17 of EU Reg., your personal data, unless it is necessary to comply with a legal obligation, or verify, exercise or defend a right in court, in the following cases:
  • the processing of such personal data is no longer necessary for the stated purposes;
  • the exercise of your right to object the processing has taken place, except where the legitimate interests of the data controller prevail over your interests or fundamental rights and freedoms;
  • the unlawfulness of the processing of your personal data has been established;
  • the existence of a legal obligation requiring the deletion of such personal data has been established;
  • limit the processing of your personal data, pursuant to Art. 18 of the Regulation (EU), in the following cases:
  • the accuracy of such personal data is contested, even if only for the period of time necessary for the data controller to verify it;
  • the unlawfulness of the processing of your personal data has been established, together with your subsequent objection to delete such data;
  • there is no longer any need to process such personal data for the stated purposes, together with the simultaneous need to process them in order to verify, exercise or defend a legal claim;
  • the fact that you have exercised your right to object to the processing of your personal data, even if only for the period of time necessary for the data controller to verify it;
  • receive in a structured, commonly used and electronically readable format and, if necessary, have your personal data processed by the data controller by automated means transmitted to another data controller, pursuant to Article 20 of the Regulation (EU);
  • object to the processing of your personal data, pursuant to Art. 21 of the Regulation (EU), if the legitimate interests of the data controller prevail over your interests or fundamental rights and freedoms.

 

PGK DESIGN SRL Unipersonale shall comply with any possible exercise of your rights listed above without undue delay.

Your right to lodge a complaint:

As a data subject, you may exercise your right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), in the event of a dispute about compliance of the processing of your personal data by the data controller with the EU regulation, pursuant to art. 77 of the EU Regulation, by sending the appropriate form to the e-mail address ‘protocollo@pec.gpdp.it <mailto:protocollo@pec.gpdp.it>’.

Nature of the communication of your personal data:

Your communication of your personal data to the data controller is a contractual obligation in order to carry out activities prior to the conclusion of a contract and the possible execution of a contract concluded between you and the data controller, to fulfil a civil and fiscal obligation, to fulfil a personal data protection obligation and any other obligations laid down in a legal provision to which the data controller is subject.

Please note that your refusal to provide such personal data would make it impossible for the data controller to fulfil the above-mentioned purpose.

Your communication of your personal data to the data controller is neither a contractual nor a legal obligation as regards the performance of promotional and/or advertising activities.

However, please note that your refusal to communicate such personal data would make it impossible for the data controller to fulfil the above-mentioned purpose.

 

Decision to use an automated decision-making system in the processing of your personal data:

The data controller has decided not to employ an automated decision-making system in the processing of your personal data, as this is not currently necessary.

DOWNLOAD INFORMATIVE