Privacy policy

Privacy Statement

INFORMATION GIVEN IS COMPLIANT WITH ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 - GDPR

 

  1. Sources of personal data
    Personal data processed by Valtellina Labs s.r.l. is collected directly from the data subject or from the offices of Valtellina Labs s.r.l..

  2. Data controller
    The data controller is Valtellina Labs s.r.l., with registered offices at Via Nazionale 4, 23010 Postalesio (SO) Italy

  3. Purposes of data processing
    Personal data is processed as part of the normal activity of sending and handling payments and collection (in addition to instrumental and related processes) and for the following purposes:
    1. purposes closely linked with and instrumental to the handling of the relationship with the data subject (e.g. the acquisition of information prior to agreeing a contract, the execution of operations on the basis of obligations arising from the contract agreed with the data subject, etc);
    2. purposes connected with obligations imposed by laws, regulations and European legislation, in addition to stipulations made by bodies with legal authority to that effect, and monitoring and supervisory bodies;
      Automated decision-making processes are not used, including profiling, as described in Article 22 of GDPR.

  4. Recipients of personal data - Communication
    1. Valtellina Labs s.r.l. uses external personnel for the execution of some of its work. For this reason, personal data concerning the data subject may be communicated to the following categories of individuals:
      Individuals who carry out the processing necessary for fulfilling existing relations with the data subject;
      Individuals involved in the checking and optimisation of the work of Valtellina Labs s.r.l. (e.g. oversight bodies and consultants) for protection against financial risk and fraud, or for the recovery of debts.
    2. Individuals who carry out the types of work mentioned above, to whom data may be disclosed, will use such data in a "responsible" capacity, in accordance with article 28 of the GDPR. Naturally, all measures geared to protecting the confidentiality of personal data will remain in place. A list of these individuals is available at the Valtellina Labs s.r.l. headquarters.
    3. in order to respond to and meet all requests by clients and any technical-organisational communications;
    4. for the organisation and implementation of events and gatherings, including promotional events;
    5. for the sending of information or advertising, including commercial material and/or offers and services by post, fax, internet, telephone, email or sms by Valtellina Labs s.r.l. or by physical/legal entities working in partnership with Valtellina Labs s.r.l. and/or their parent companies, subsidiaries and associates;
    6. marketing purposes to which the user has freely and specifically consented (article 7 of GDPR).

  5. Circulation of personal data
    Personal data are not circulated.

  6. Categories of data processed
    Data processed by Valtellina Labs s.r.l. are personal (names and addresses, tax information, contact details).

  7. Transfer of data to a third country
    Data processed for the purposes described above may be transferred to other countries within the European Union.

  8. Period of data storage
    Data processed will be stored for the minimum period necessary for the fulfilment of the purposes indicated above. In particular, data pertaining to finance will be stored for the period stipulated by Italian law (currently 10 years). At the end of this period, data will be anonymised or deleted where technically possible.

  9. Lawfulness, nature of provision and consequences of refusal to provide data
    The provision of data is a contractual obligation, and essential to fulfil the purposes of data processing indicated in points III A, B and C above. Failure to provide data would make it impossible to carry out the obligations arising from the contract and from legal requirements. In accordance with article 6 of the GDPR, processing is used for the fulfilment of a contract to which the data subject is party, or for the fulfilment of pre-contractual measures taken on the request of the data subject; or in order to meet a legal requirement to which the data controller is subject.
    The provision of personal data is optional for the purposes described in points III D, E and F, and the refusal to provide them has no consequences.

  10. Methods of data processing
    Regarding the purposes outlined, the processing of personal data in accordance with the law and data protection regulations is carried out manually and using automated and telematic means in a way which is strictly limited to the purposes and, in any case, which guarantees the security and confidentiality of said data (including in the case of remote communication methods).

  11. Rights of the data subject
    The data subject has the right at any time to exercise the rights accorded to them by GDPR article 15 (access), 16 (rectification), 17 (erasure), 18 (restriction), 19 (notification obligation), 20 (portability), 21 (objection) and 22 (automated decision-making), by contacting the data controller directly. Requests should be addressed to:
    Valtellina Labs s.r.l.
    Via Nazionale 4, 23010 Postalesio (SO) Italy
    tel. +39 342 490380
    This email address is being protected from spambots. You need JavaScript enabled to view it.

 

Data subjects may also lodge a complaint with the data protection supervisory authority.