RIGHTS OF THE DATA SUBJECT

a) Right of confirmation

Every interested party has the right conferred by the European legislator to obtain from the data controller confirmation of the existence or not of personal data concerning him. If an interested party wishes to make use of this right of confirmation, you can, at any time, directly contact the Data Controller

b) Right of access

Each interested party has the right conferred by the European legislator to obtain from the data controller free information on their personal data stored at any time and a copy of such information. Furthermore, the European directives and regulations grant the data subject access to the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
• where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine this period;
• the existence of the right to request the controller to correct or delete personal data, or limit the processing of personal data relating to the data subject, or to oppose such treatment;
• the existence of the right to lodge a complaint with the supervisory authority;
• if personal data are not collected by the interested party, any information available on their origin;
• the existence of automated decision-making processes, including profiling, referred to in Article 22, paragraphs 1 and 4, of the GDPR and, at least in such cases, significant information on the logic in question, as well as on the significance and expected consequences of such processing for the data subject.

Furthermore, the interested party has the right to obtain information on the transfer of personal data to a third country or an international organization. In this case, the data subject has the right to be informed of the appropriate guarantees relating to the transfer.

If an interested party wishes to make use of this right of access, he can, at any time, contact the Data Controller and Data Processor

c) Right of rectification

Every interested party has the right conferred by the European legislator to obtain from the data controller without undue delay the correction of inaccurate personal data concerning him. Taking into account the purposes of the processing, the interested party has the right to complete incomplete personal data, including by submitting an additional declaration.

If an interested party wishes to exercise this right of rectification, he can, at any time, contact the Data Controller and Data Processor

d) Right to erasure (right to be forgotten)

Each data subject has the right conferred by the European legislator to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller is obliged to delete personal data without undue delay if one of the following reasons applies, provided that the processing is not necessary: ​​

Personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

The interested party withdraws the consent to which the treatment is based in accordance with article 6, paragraph 1, letter a), of the GDPR, or article 9, paragraph 2, letter a), of the GDPR, and where there is no other legal basis for processing.

The interested party opposes the treatment pursuant to Article 21, paragraph 1, of the GDPR and there is no legitimate legitimate reason for the treatment or the interested party opposes to the processing pursuant to article 21, paragraph 2, of the GDPR.

• The personal data has been unlawfully processed.
• Personal data must be deleted for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• Personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, of the GDPR.

If one of the aforementioned reasons applies and the interested party wishes to request the deletion of personal data stored by Essemoto.it, he can, at any time, contact the Owner and Manager of the Data Processing which will promptly satisfy the cancellation request.

e) Right to restriction of processing

Each interested party has the right, granted by the European legislator, to obtain from the controller the limitation of the processing if one of the following conditions applies:

• The accuracy of the personal data is contested by the data subject, for a period that allows the data controller to verify the accuracy of the personal data. < / li>
• The processing is illegal and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
• The data controller no longer needs the personal data for the purposes of the processing, but is required by the data subject for the establishment, exercise or defense of claims legal.
• The interested party contested the treatment pursuant to Article 21, paragraph 1, of the GDPR pending verification that the legitimate reasons of the manager prevail over those of the interested party .

If one of the aforementioned conditions is met and the interested party wishes to request the limitation of the processing of personal data stored by Essemoto.it, he can at any time contact the Owner and Manager of the Data processing that will restrict the processing.

f) Right to data portability

Every interested party has the right, recognized by the European legislator, to receive personal data concerning him, provided to a data controller, in a structured format, commonly used and machine readable. He has the right to transmit such data to another controller without hindrance to the controller to whom the personal data were provided, provided that the processing is based on the consent referred to in Article 6 (1) (a) , of the GDPR or point (a) of article 9 (2) of the GDPR, or a contract pursuant to article 6, paragraph 1, letter b), of the GDPR, and the processing is carried out by automated means, to provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of public authority conferred on the controller.

Furthermore, in exercising his right to data portability pursuant to Article 20 (1) of the GDPR, the data subject has the right to transmit personal data directly from one controller to another, where technically feasible and in doing so does not adversely affect the rights and freedoms of others.

To assert the right to data portability, the interested party can at any time contact the Data Controller and Data Processing Manager

g) Right to object

Every interested party has the right, recognized by the European legislator to oppose, for reasons relating to his particular situation, at any time, to the processing of personal data concerning him, which is based on point (e) or (f)) of Article 6 (1) of the GDPR. This also applies to profiling based on these provisions.

Essemoto.it will no longer process personal data in the event of opposition, unless we are able to demonstrate valid legitimate reasons for the processing that override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

If Essemoto.it processes personal data for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him for this marketing activities. This applies to profiling insofar as it is related to such direct marketing. If the data subject objects to Essemoto.it to the processing for direct marketing purposes, Essemoto.it will no longer process the personal data for these purposes.

Furthermore, the interested party has the right, for reasons relating to his particular situation, to oppose the processing of personal data concerning him by Essemoto di Sanfratello Andrea to scientific or historical research purposes, or for statistical purposes pursuant to art. Article 89 (1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

To exercise the right to object, the interested party can contact the Data Controller and Data Processor. Furthermore, the interested party is free in the context of the use of the services of the information society and, by way of derogation from Directive 2002/58 / EC, to exercise its right to object by means of automated tools using technical specifications.

h) automated individual decision making, including profiling

Each data subject has the right, granted by the European legislator, not to be subjected to a decision based exclusively on automated processing, including profiling, which produces legal effects on him or her, or significantly affects him, provided that the decision is not necessary to enter into or perform a contract between the data subject and a data controller, or is not authorized by Union or Member State to which the controller is subject and which also establishes adequate measures to safeguard the rights and freedoms of the data subject and legitimate interests, or does not rely on the explicit consent of the data subject.

If the decision is necessary to enter into, or execute a contract between the data subject and a data controller, or is based on the explicit consent of the data subject, Essemoto .it must implement suitable measures aimed at safeguarding the rights and freedoms of the data subject and the legitimate interests of the data subject, at least the right to obtain human intervention by the controller, to express his / her point of view and challenge the decision.

If the interested party wishes to exercise the rights relating to the automated individual decision-making process, he can, at any time, contact the Data Controller and Data Processor < / p>

i) Right to withdraw consent to data protection

Every interested party has the right, granted by the European legislator, to withdraw his consent to the processing of his personal data at any time.

If the interested party wishes to exercise the right to withdraw the consent, he or she can, at any time, contact the Data Controller and Data Processor

If the interested party wishes to exercise any type of right, he or she may, at any time, contact the Data Controller and Data Processor at the following email address: amministrazione@essemoto.it