Privacy Policy ~ Processing of personal data

The following document is an English translation of the original Privacy Policy written in Italian.
In the event of any discrepancies or inconsistencies between the English and Italian versions,
the Italian version shall prevail and be deemed legally binding.

EUROPE MEDIA S.R.L., with its registered office in Milan, Via Monte Napoleone, 8, registered with the Companies Register of Milan Monza Brianza Lodi, Tax Code and VAT No. 09156800964, email:
info@europemediagroup.eu, PEC: europemediasrl@legalmail.it, as the Data Controller, hereby informs that, in accordance with applicable data protection laws, all personal data processing operations will be carried out based on the principles of fairness, lawfulness and transparency.

Pursuant to Article 13 of the European Regulation No. 679/2016 (GDPR), the following information notice is provided.

The processing will concern the data directly provided by the data subject when completing the “Contact” form, specifically: name, surname, telephone number, email address, user IP (as well as any additional data voluntarily provided by the data subject through the form). Such data will be processed electronically in order to respond to requests for information and/or quotations submitted by the data subject.

With the explicit consent of the data subject, personal data may also be processed for sending discounts, promotions, and other advertising material (so-called direct marketing) relating to the Controller’s services through newsletters.

The legal basis legitimising the processing necessary to respond to information requests is the performance of pre-contractual measures at the request of the data subject.

Subscription to the newsletter shall take place only upon explicit consent provided by the data subject.

Providing personal data for the above purposes is optional. Failure to provide such data will make it impossible to respond to the requests made or to send commercial communications, without affecting the proper performance of any existing contractual relationship.

Processing will be carried out exclusively by the Data Controller or by personnel duly authorised and specifically trained for such purposes. Where necessary or instrumental to the fulfilment of the purposes indicated above, data may be processed by third parties appointed as external Data Processors, including companies providing services related to the execution of the aforementioned purposes (such as website hosting and newsletter management providers).

The updated list of external Data Processors may be obtained by contacting the Data Controller at
info@europemediagroup.eu.

The collected data will not be transferred outside the European Union.

Personal data will be stored only for the time necessary to respond to the submitted information requests.

Data processed for direct marketing purposes will be processed until the withdrawal of consent and, considering the nature of the goods offered by the Controller, for a maximum period of two years from the date of collection (this being the presumed period during which interest in receiving promotional communications remains) and/or from the renewal of consent if the data subject expresses the wish to continue receiving such communications beyond that period.

Except in cases provided under Article 23 concerning legal obligations, public interest, or the exercise of official authority, the Data Subject may exercise the rights set out in Articles 15–22 of the GDPR against the Data Controller.

– To obtain confirmation as to whether or not personal data concerning them are being processed, and if so, access such data (right of access, Art. 15);

– To obtain the rectification of inaccurate personal data or the completion of incomplete data (right to rectification, Art. 16);

– To obtain the erasure of personal data where one of the grounds provided for by the Regulation applies (right to erasure, Art. 17);

– To obtain restriction of processing where one of the cases provided for by the Regulation applies (right to restriction, Art. 18);

– To receive personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller (right to data portability, Art. 20);

– To object to the processing of personal data (right to object, Art. 21);

– To not be subject to a decision based solely on automated processing, including profiling (automated individual decision-making, Art. 22).

The exercise of these rights is free of charge and not subject to any formal constraint.

In case of a request by the Data Subject for information regarding their personal data, to be submitted via email to the contacts provided above, the Data Controller shall act without undue delay—unless impossible or requiring disproportionate effort—and, in any event, no later than one month from receipt of the request. This period may be extended up to three months, if necessary, taking into account the complexity and number of requests received by the Controller. In such cases, the Controller shall inform the Data Subject within one month of receipt of the request and communicate the reasons for the delay.