CLIENTS PRIVACY NOTICE

NOTICE PURSUANT TO ART. 12 OF REGULATION (EU) 2016/679

In accordance with Regulation (EU) 2016/679 on “General Data Protection Regulation” (hereinafter “Regulation EU/679/2016”), Sound Public Relations (hereinafter “the Company”), as Data Holder, is required to provide you notice on use of your personal data.

 

This notice also refers to processing carried out by subjects which perform services of a technical and organisational nature, described in paragraph 1, on behalf of our Company.

 

1. Purposes of processing and methods. Nature of providing data.

The personal data in possession of our Company are supplied directly by the persons the personal data refer to (“Data Subject”). Our Company can also obtain personal data while carrying on its business or from third parties.

 

Personal data are processed during normal activities of the Company for the following purposes:

1. purposes strictly connected with and instrumental to handling its operations and the consequent management of relations with customers (for example: acquisition of preliminary information on the conclusion of a contract, execution of activities on the basis of obligations arising from the contract concluded with customers, etc.).

Providing personal data necessary for such purposes is not obligatory, but refusing to provide them can make it impossible for our Company to perform the service due to the relationship between the data and the requested service. Your consent is not required for processing them;

1. fulfilment of obligations imposed by law, regulations or community provisions.

Providing personal data necessary for such purposes is obligatory and your consent is not required for processing;

 

In relation to the purposes described, personal data shall also be processed by using manual or electronic or automated instruments, with logics strictly connected to the above purposes and in a manner guaranteeing the privacy and security of the personal data (with particular regard to the case of using remote communication techniques).

 

For some services, the Company uses trustworthy companies which, as Data Processing Officers, perform tasks of a technical and organisational nature such as:

• the performance of printing, envelop stuffing, transmission, transport and message sorting services;
• the performance of IT services related to supply, development and maintenance of software and hardware systems which are necessary or functional to carrying out the services provided by our company
• survey of the degree of customer satisfaction and requirements;
• accounting processing, accounting audit and financial statement certification;
• legal activities, etc.

 

2. Categories of data transferred.

In relation to the purposes described in paragraph 1 above, our Company and other subjects that carry out the tasks described in paragraph 1 on our behalf process personal your data related to: first name, last name, business and business function, e-mail; phone number.

For supplying the services and tasks specified in this notice, our Company does not need to process personal data Art. 9 of the above Regulation defines as “sensitive” (such as personal data likely to reveal state of health, political and trade union opinions, religious beliefs, etc.).

For these reasons, we invite you not to communicate this type of data to the Company. However, in the event that the Company, for its operations, needs to process data of a “particular” nature, it will take care to send you a new and specific information together with the request for a specific consent to the processing of such data.

 

3. Categories of subjects whom personal data may be disclosed to or who may learn them in their capacity as processing officers or delegates.

For pursuing the aims described in paragraph 1, our Company needs to disclose your personal data to third parties belonging to the following categories:

• subjects which perform tasks of a technical and organisational nature, specified in paragraph 1, on behalf of our Company, the firm providing accounting services included;
• external companies and/or professionals our Company uses for assistance and consulting services;
• third party companies for processing intended for promotional actions, when the Data Subject has given his or her consent;
• banks, etc.

 

Addressees of the messages described in this notice work independently as distinct data holders or in some cases are designated by our Company as data processing officers. Their list is constantly updated and is available at our Company.

Some categories of persons, designated as data processing delegates, can gain access to the personal data of customers while carrying out their duties. Our Company has designated our employees, system administrators included, as data processing delegates of customer data for carrying out their duties, temporary workers used by our Company and interns.

Subjects designated by our Company as Data Processing Officers can also know the personal data while carrying out the tasks given to them. You can find out the identities of the data processing officers designated by our Company in the manners specified in paragraph 5.

The personal data processed by our Company and by subjects which perform tasks of a technical and organisational nature, described in paragraph 1, on behalf of our Company will not be diffused.

 

 

4. Storage deadlines for personal data.

 

Personal data will be processed for the duration of established contractual relationships and thereafter for fulfilment of all legal obligations for a time not exceeding 10 years from termination of the contractual relationship or longer in cases specifically required by law.

 

5. Rights of the Data Subject set out in Articles 15 et seq. of Regulation (EU) 2016/679.

 

You should know that the data protection regulation gives Data Subjects the possibility to exercise certain rights. In particular, each data subject has:

 

1. the right to access i.e. the possibility of gaining access to his or her personal information, specifically provided by Art. 15 of Regulation 679/2016;
2. the right to correct, i.e. the possibility of obtaining update of inaccurate personal data without unjustified delay, specifically provided by Art. 16 of Regulation 679/2016;
3. the right to oblivion consisting of the right of the data subject to ask for deletion of his or her personal data, specifically provided by Art. 17 of Regulation 679/2016;
4. the right to restrict processing when one of the conditions provided by Art. 18 of the above Regulation are met;
5. the right to portability of data, i.e. the right of the data subject to obtain his or her data in an interoperable format and/or the right to have the data sent to another data holder without impediments by this Company, specifically provided by Art. 20 of the above Regulation;
6. the right to withdraw consent at any time, specifically provided by Art. 7 of Regulation 679/2016;
7. the right to file a complaint to the Data Protection Authority in case of a violation in the way the data were processed pursuant to Art. 77 of Regulation 679/2016;
8. the right to file an appeal in the concerned jurisdiction in case of unlawful data processing, even against acts assumed by the Data Protection Authority in accordance with Art.78 of Regulation 679/2016;
9. the right at all times to oppose processing for sending commercial and direct sales messages and advertising material by sending an email to the address privacy@soundpr.it, asking for deletion of your name from the advertising list.

 

6. Data Holder and Processing Officer.

 

The Data Holder of your personal data referred to in this notice is Sound Public Relations, with head office at Via Stradivari, 7 Milan – Italy – Phone: +39 022056951

 

Requests for exercising the rights provided in Art. 7 of the Act can be forwarded in writing by electronic mail message to this address privacy@soundpr.it to the attention of the Data Holder.

 

Requests concerning the identity of the other Data Processing Officers designated by the Sound Public Relations and requests referred to in paragraph 5 may be made orally. You can also ask for a complete list of Data Processing Officers appointed by our Company by sending an electronic mail message to the address privacy@soundpr.it.