As the Controller of Treatment, under Article 13, Reg. EU 2016/679 (GDPR), We inform You that the processing of personal data (personal data, contact and billing data), as well as the data You provided here suitable to reveal the state of health, that the law defines as “particular” under Article 9 GDPR, will be based on the principles of fairness, lawfulness and openness and protection of Your rights.
1. PURPOSE AND LEGAL BASIS OF THE TREATMENT
The processing of the data collected here is aimed:
(a) at the supply, by Inbox S.r.l., of the electric scooter rental service You chose. We inform You, therefore, that in the absence of such consent it will not be possible to provide such services; b) to allow Inbox S.r.l. to profile Users, in order to know how to use the Devices, based on the following criteria: age, gender, average distance traveled, peak times of Device usage, place of use; (c) to allow Inbox S.r.l. to inform You if Inbox S.r.l. receives, from the relevant authorities, sanctioning measures relating to infringements and/or violations committed by You during the Period of Use; d) sending, with Your consent, promotional offers on our services as well as greetings by post or e-mail.
2. MODE OF TREATMENT
The data You provide will be treated with electronic and non-electronic instruments. The data will be processed in accordance with the rules mentioned above, safeguarded in order to ensure its confidentiality, avoid destruction, prevent unauthorized access or accidental leaks. The processing of the collected data will be carried out at the Inbox S.r.l. headquarters and for a period of time no longer than is strictly necessary to achieve the objectives mentioned in paragraph 1. The data referred to in paragraph 1.a), 1.b) and 1.c) will be retained for the time prescribed by civil and tax rules. The data in step 1.d) will be retained for no more than 24 months. Your data will not be the subject of automated decision-making, including profiling.
3. NATURE OF DATA DELIVERY AND CONSEQUENCES OF A POSSIBLE REFUSAL TO PROVIDE DATA
The provision of Your data is a prerequisite for the pursuit of the purposes of 1 a), 1 b) and 1.c): any refusal to provide such data will involve a missed or partial completion of the services You require and will make it impossible for us to fulfil exactly our contractual obligations.
4. KNOWLEDGE, COMMUNICATION AND DIFFUSION
The personal data processed may be known by our expressly authorized employees and consultants.
Your personal data will not be “disclosed”, by that term meaning to give knowledge to indeterminate persons in any way, including through their provision or consultation. Your personal data may instead be “communicated”, with that term meaning to give knowledge to one or more determined entities, in the following terms:
- to persons who can access the data under the provision of law, regulation or EU legislation, within the limits of those rules;
- to persons who need access to Your data for auxiliary purposes to the contractual relationship between You and us, within the limits strictly necessary to carry out the auxiliary tasks entrusted to them (for example: persons who carry out maintenance / assistance / repair / replacement / upgrade of Devices and/or electrical / electronic equipment);
- to our consultants and collaborators, as far as necessary to carry out their
5. DETAILS OF THE CONTROLLER AND THE CONTROLLER
Treatment owner: Inbox S.r.l., c.f. and p.i. 03754660243, registered with the Vicenza Business Register, number REA VI-351108, social capital i.v. 60,000, with legal headquarters in Vicenza, via Cattaneo 41, in person of the Sole Administrator and Legal Representative, Andrea Vignaga, PEC email@example.com who is also responsible for the treatment.
6. RIGHTS OF THE DATA SUBJECT
You may request that You no longer receive the newsletter and in any case You may withdraw Your consent (the withdrawal of consent does not affect the legality of the consent-based treatment prior to revocation). EU Regulation 679 of 2016 recognizes certain rights to You (Art. 15-22 of EU Regulation 679 of 2016, the text of which is fully available on website https://eur-lex.europa.eu/) including:
- right of access: You have the right to obtain confirmation from the controller of the existence (or not) of a personal data processing relating to You and if so to obtain access and the information relating to this processing (Article 15 EU 2016/679);
- right of rectification of inaccurate data and right of completion of incomplete data (Article 16 EU 2016/679);
- the right to delete personal data (“right to be forgotten”), in the presence of one of the reasons given in art. 17 EU 2016/679;
- the right to restrict treatment: when the conditions of 18 EU Reg. 2016/679 are met, You may obtain that Your data is processed, except for data storage, only with Your consent or for establishment of entitlement assessment, exercise or defence of a right in court, or to protect the rights of another individual or legal entity or for reasons of relevant public interest of the EU or a Member State (Art. 18 Reg. 2016/679);
- the right of data portability: You have the right to receive in a structured, common and machine-readable format the personal data relating to You provided to a data controller and You have the right to transmit these personal data to another data controller without hindrance by the data controller to which You provided these personal data (Art. 20 EU 2016/679);
- right of opposition: You have the right to object, for reasons related to Your particular situation, to the processing of personal data concerning You; In this case, the data controller refrains from further processing personal data unless he proves that there are legitimate grounds for proceeding with treatment that overrides Your rights or for establishment of entitlement assessment, exercise or defence of a right in court (Article 21, par 1 EU 2016/679); You are also entitled to object to Your personal data processing for direct marketing purposes (article 21, 2 EU 2016/679).
For the exercise of Your rights, You may send a letter with return receipt or a certified e- mail message to the data controller. You are also entitled to file a complaint with the Data Protection Authority.