INFORMATION FOR THE PROCESSING OF PERSONAL DATA 

BONI SIMONA , in the person of the legal representative, with registered office in P.zza del Duomo - Pisa-.  -, P. IVA 01203200504, P.E.C. bonisimona@pec.cgn.it, as the data controller, informs you in accordance with Article 13 Legislative Decree no. 196 of 30.6.2003 (hereinafter, "Privacy Code") and Article 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the following manner and for the following purposes: 

1. Introduction

The owner is committed to ensuring the protection of your personal data.

With this policy, we wish to provide you with a clear and transparent view of what information we collect and process regarding our clients as part of the contractual relationship.

In the following paragraphs we will explain how we use your personal data, for what purposes and for how long, and also remind you how we guarantee your rights and compliance with data protection regulations.

2. Object of Treatment 

The Controller processes personal, identifying data (e.g., first name, last name, company name, address, telephone, e-mail, bank and payment references) hereafter, "personal data" or also "data," communicated by you in connection with the conclusion of contracts for the Controller's services. 

3. Purpose of processing 

Your personal data are processed: 

A) without your express consent (art. 24 lett. a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following Service Purposes: 

- Conclude contracts for the Holder's services; 

- Fulfill pre-contractual, contractual and tax obligations arising from existing relationships with you; 

- Fulfilling obligations required by law, regulation, EU legislation or an order of the Authority (such as in the area of anti-money laundering); 

- Exercise the rights of the Owner, such as the right of defense in court; 

B) Only with your specific and separate consent (Articles 23 and 130 Privacy Code and Art. 7 GDPR), for all data referred to in Art. 9 of the aforementioned GDPR.

4. Mode of treatment  

The processing of your personal data is carried out by means of the operations indicated in Art. 4 Privacy Code and Art. 4 No. 2) GDPR and namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data are subject to both paper and electronic processing, including by means of data acquired through the website. The Data Controller will process personal data for as long as necessary to fulfill the above purposes and in any case for no longer than 10 years after the termination of the relationship.

5. Data access 

Your data may be made accessible for the purposes mentioned in Art. 2: 

- to employees and collaborators of the Data Controller, in their capacity as appointees and/or internal data processors and/or system administrators; 

- to third-party companies or other entities (by way of example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that perform outsourcing activities on behalf of the Controller, in their capacity as external data processors. 

6. Disclosure of data 

Without the need for your express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes of art. 2.A) to Supervisory Bodies (such as IVASS), Judicial Authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the fulfillment of the said purposes. These subjects will process the data in their capacity as autonomous data controllers. Your data will not be disseminated. 

7. Data transfer abroad

Currently not planned.

8. Rights of the data subject 

- Right of access - you have the right to obtain confirmation as to whether or not processing concerning your data exists, as well as the right to receive any information concerning the same processing. - Right to rectification - you have the right to have your data rectified if it is incomplete or inaccurate. - Right to erasure (so called "right to be forgotten") - under certain circumstances, you have the right to obtain the deletion of your data present within our archives if it is not relevant to the continuation of the contractual relationship or

necessary due to legal obligation. - Right to restriction of processing - upon the occurrence of certain conditions, you have the right to obtain the restriction of processing if it is not relevant to the continuation of the contractual relationship or necessary due to legal obligation. - Right to portability - you have the right to obtain the transfer of your data to a different data controller. - Right to object - you have the right to object, at any time for reasons related to your particular situation, to the processing of data about you based on the lawful condition of legitimate interest or performance of a task of public interest or exercise of public authority, including profiling. - Right to revoke consent - you have the right to revoke your consent - where provided - to the processing of your data at any time, without prejudice to the lawfulness of the processing based on consent prior to revocation. - Right to propose complaints to the Supervisory Authority - at any time, you have the right to promote requests to exercise your rights. In any case, if you wish to propose a complaint regarding the manner in which your data is processed, or regarding the handling of a complaint you have proposed, you have the right to file a claim directly with the Control Authority.

1. Ways of exercising rights 

You may exercise your rights at any time by sending: a registered letter with return receipt or an e-mail to the owner at the contact details indicated in the narrative. 

2. Owner, manager, and appointees 

The Data Controller is BONI SIMONA in the person of the legal representative, with headquarters in P.zza del Duomo- Pisa - , P. IVA 01203200504, P.E.C. bonisimona@pec.cgn.it

The updated list of data processors is kept at the registered office of the Data Controller.

ALSO DECLARES

■ that I have read the privacy policy and give my consent for the performance of direct marketing activities, such as the sending - including by e-mail, SMS and MMS, telephone calls, mailing communications - of advertising material and communications having informative and/or promotional content in relation to the activities carried out by the Owner or its partners.