Ai sensi e per gli effetti di cui agli artt. 13 e 14, reg. UE 679/2016 (Regolamento generale sulla protezione dei dati o “GDPR”)
Dear Customer,
This document serves as a privacy notice provided in accordance with the European Regulation on personal data protection REG. EU No. 679/2016 of April 27, 2016, which came into effect on May 25, 2018 (General Data Protection Regulation or GDPR), concerning the use of the data you have provided.
We kindly invite you to read this notice and express your consent to the processing of your data by signing and returning the attached form.
1. Identifying Details of the Data Controller
The Data Controller of your personal data is SPAZIOINNOVA DI ROSSI GIUSEPPE, located at Via Messina 55 – 20154 Milano (MI), VAT No. 13220040961, registered with the Milan Chamber of Commerce, phone: +39 3756486387, email: spazioinnova@pec.it (hereinafter referred to as the “Data Controller”).
2. Purpose of the Processing
The data you have provided will be used by the Data Controller for the following purposes:
a. to execute the contracts you have entered into with the Data Controller and fulfill related commitments and obligations;
b. compliance with legal obligations related to the contractual relationship;
c. contract management, such as relations with agents, representatives, clients, and/or contractors;
d. external professional collaborations for the fulfillment of legal obligations;
e. protection of contractual rights;
f. internal statistical analyses;
g. marketing activities through the sending of promotional and advertising materials.
The legal basis for the processing is the contract as well as explicit consent.
3. Communication of Data to Third Parties
Your data will be communicated only where strictly necessary to execute contractual obligations or legal requirements (point 2).
Your data, in particular, will be communicated to the following parties:
– our suppliers of goods and services;
– banking institutions for the management of payments and collections;
– our accounting consultants regarding your data contained in accounting documentation;
– our legal consultants in cases where, due to non-compliance or disputes, it becomes necessary to communicate your data to enable them to carry out their assigned tasks.
4. Data Retention Period
Your data will be retained for a period of 11 years, after which, in the absence of disputes, the data will be deleted.
5. Rights of the Data Subject
You may, at any time and under the applicable conditions, exercise the following rights:
1) Access: request confirmation from the Data Controller as to whether or not personal data concerning you is being processed, and if so, request a copy of the personal data being processed;
2) Rectification and Integration: request the correction of inaccurate personal data and the completion of incomplete personal data by providing an additional statement;
3) Erasure: request the deletion of personal data concerning you if one of the grounds under GDPR is met;
4) Restriction: request restriction of processing when one of the conditions set out in the GDPR is met;
5) Objection: object at any time to the processing of your data in cases provided for by Article 21 of the GDPR;
6) Profiling: not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you in a similar way;
7) Portability: you have the right, where the conditions set out in Article 20 of the GDPR are met, to receive in a structured, commonly used, and machine-readable format the personal data you have provided to the Data Controller.
Consequences of Failure to Provide Data
The provision of your personal data is a necessary requirement for concluding the contract with SPAZIOINNOVA DI ROSSI GIUSEPPE. Therefore, refusal to provide such data will prevent the contract from being finalized.
EN 
IT