Privacy Notice to the Data Subject Pursuant to Article 13 of Regulation (EU) 2016/679
Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data (hereinafter the “Regulation” or “GDPR”), regarding the processing of your personal data, AVERAU CAPITAL PARTNERS SCF SRL SEMPLIFICATA UNIPERSONALE (hereinafter also referred to as the “Data Controller”), whose identity and contact details are provided below, informs you as follows:
1) Identity and Contact Details of the Data Controller
The Data Controller pursuant to Articles 4 and 24 of the Regulation is AVERAU CAPITAL PARTNERS SCF SRL SEMPLIFICATA UNIPERSONALE, with registered office at Via Bonaldo Stringher No. 25 – 33100 Udine, Italy, email: info@averaucapital.it, PEC: averaucapital@pec.it. You may contact the Data Controller by writing to the above address or sending an email to the indicated address.
2) Purpose and Legal Basis of the Processing
Personal data provided directly by you or otherwise collected by the Data Controller will be processed exclusively for:
a) Responding to requests for information and/or contact from the user;
b) Compliance with a legal obligation to which the Data Controller is subject.
The legal basis for processing personal data for the purpose under point a) is Article 6(1)(b) of the Regulation (“processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract”).
The legal basis for processing personal data for the purpose under point b) is compliance with a legal obligation under Article 6(1)(c) of the GDPR (“processing is necessary for compliance with a legal obligation to which the controller is subject”).
3) Methods of Data Processing
Your personal data may be processed using electronic or automated means, in a manner strictly necessary to achieve the purposes described above. The processing will involve manual, IT, and telematic tools solely for achieving these purposes, ensuring security and confidentiality. Data will be stored, managed, and transmitted using systems appropriate for the stated purposes, based on the data in our possession, and you are asked to promptly communicate any corrections, additions, or updates.
4) Recipients or Categories of Recipients of Personal Data
Personal data may be communicated, for the purposes specified above, to entities that perform activities necessary for providing the services offered by the Website (for example, analysis of website functionality). These entities will process data as data processors (Article 28 of the Regulation) and/or as authorized personnel acting under the authority of the Data Controller or Processor (Article 29 of the Regulation), or as entities explicitly designated to process data in accordance with GDPR and national implementing legislation (Legislative Decree no. 101/2018), such as IT service providers, storage providers, or other technical/organizational service providers, as well as employees and collaborators of the Data Controller.
5) Transfer of Personal Data to a Third Country or International Organization
No personal data of the User will be transferred to countries outside the European Union or to international organizations.
6) Retention Period of Personal Data
Personal data will be retained in compliance with Article 5(1)(e) of the Regulation in a form that allows identification of data subjects for no longer than necessary to achieve the purposes outlined in point 2 or as strictly required by law. At the end of the retention period, the data you provided will be deleted or anonymized.
7) Rights of the Data Subject
Pursuant to Articles 15 et seq. of the Regulation, the data subject has the right to request from the Data Controller:
Access to their personal data;
Rectification or deletion of personal data, or restriction of processing;
Objection to the processing;
Data portability under Article 20;
Where processing is based on consent (Article 6(1)(a) or Article 9(2)(a)), withdrawal of consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Without prejudice to other administrative or judicial remedies, a data subject who believes that the processing of their data violates the GDPR has the right to lodge a complaint with a supervisory authority, in particular in the Member State where they habitually reside, work, or where the alleged violation occurred (the Italian supervisory authority is the Garante per la Protezione dei Dati Personali). To exercise the above rights, the data subject may contact the Data Controller using the contact details provided in point 1.
8) Mandatory or Optional Data Provision
Provision of your personal data is mandatory in order to respond to your information or contact request. Failure to provide the requested data will prevent the Data Controller from responding to your inquiry.
9) Existence of Automated Decision-Making, Including Profiling
Pursuant to Article 13(2)(f) of the GDPR, your personal data will not be subject to automated decision-making, including profiling under Article 22(1) and (4).
10) Processing for a Purpose Other than the One for Which the Data Were Collected
Should the Data Controller intend to further process your personal data for a purpose other than that for which it was originally collected, you will be provided with information regarding the new purpose and any other relevant information pursuant to Article 13(2) before such further processing.
11) Updates
This privacy policy may be amended and/or supplemented due to subsequent legislative changes, updates or provision of new services, or technological innovations.