Privacy Policy
Art.13 of Regulation EU no.679/2016
Updated February 2023
Introduction
Under European Regulation no.679/2016 (hereinafter referred to as the “Regulation”) and national law on Personal data protection (hereinafter referred to as “Privacy Law”), S.T.A.DATA Srl invites you to carefully read the present Privacy Notice, which lays down important information on the protection of your Personal Data.
The processing of your Personal Data will be based on the principles of correctness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, integrity and confidentiality, in accordance with the provisions set out in the Regulation.
****
1. DATA CONTROLLER
The Data Controller is S.T.A.DATA Srl with registered office in Turin – Via Saluzzo 71, in the person of its legal representative pro tempore.
2. DATA PROTECTION OFFICER – DPO
In accordance with the provisions set out in the Regulation, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and who will act as the contact person for data subjects, as well as for the Italian Data Protection Authority. The DPO can be contacted by writing to the following email address: info@stadata.com.
3. PERSONAL DATA PROCESSED
- Personal details (name and surname) and contact information (email, address, telephone number)
4. PURPOSES AND LEGAL BASIS OF DATA PROCESSING
The Personal data you provided will be exclusively processed for the purposes indicated below:
- Communications purposes: to send you as a client information related to new initiatives we launch (such as delivery services). If you are not willing to receive such kinds of information you can make us aware of that by writing to us.
The legal basis for such processing is the legitimate interest of the Data Controller.
5. NATURE OF THE PROCESSING
The provision of your Personal Data is optional in nature. However, the provision of some data is needed to enable you to avail of some services. The either mandatory or optional nature of the provision will be marked by some symbols (i.e., “*”) placed next to the information provided. Such symbol means that your Personal data are necessarily needed for the achievement of the purposes indicated.
6. PROCESSING METHODS
Your Personal Data will be processed in compliance with the provisions of the applicable Privacy Law, by resorting to electronic or automated means and to manual methods that ensure the highest level of confidentiality, and only by people trained and authorised to process them.
7. DATA RECIPIENTS
Your Personal Data may be made accessible, for the purposes stated above, to employees and partners of LEA and to other companies which, in the capacity of Data Processors, perform Personal Data processing activities on behalf of the Data Controller. The Data Controller has drawn up a list of Data Processors, which is constantly updated, and which is made available to you by contacting it to the addresses indicated at point 9 of the present Privacy Notice.
8. DATA RETENTION PERIOD
In order to ensure the compliance with the necessity and proportionality principles of the processing, the Personal Data related to the reservations and to the invoicing details will be retained for a period of time that guarantees the correct management of the reservation and the successful execution of the order, and overall for further 10 years in order to fulfil administrative and fiscal obligations. The Personal Data related to food intolerances will be retained for a week from the date the service has been provided except for special needs.
9. METHODS FOR EXERCISING YOUR RIGHTS
Data subjects are entitled to exercise the rights laid down by Arts. 15-22 of the Regulation. If you wish to exercise the aforesaid rights, or you wish to have more information on the processing of your Personal Data, please write an email to: info@stadata.com or write to the registered office of the Data Controller in Via Saluzzo 71, 10126, Turin (TO).
