Information on the processing of personal data related to the completion of the "download E-book" form

This policy supplements the website's navigation policy, with the aim of illustrating how the Data Controller will specifically process the data entered in this form: we therefore invite you to readthe navigation policy.

Identity and contact details of the Data Controller

Increso S.R.L., hereinafter also referred to as "Increso" or "data controller," with registered office in Via Monte Asolone, 8, 00195 Rome, Italy, and contactable at the certified email address increso@legalmail.it or by telephone at 06 9823 2222.

Data Protection Officer

The Data Controller has appointed a Data Protection Officer (DPO), whom the Data Subject may contact by writing to the following address: dpo@increso.it

Purpose and legal basis

  1. User registration management: personal data is processed to enable the download of the requested e-book.

  2. Defensive purposes: the Data Controller may need to process personal data for the management of disputes and extrajudicial or judicial litigation.

Purpose

Legal basis (common data)

Legal basis (specific data)

A.              

Performance of the contract

/

B.              

Legitimate interest of the Data Controller in establishing, exercising, or defending a legal claim.

Establish, exercise, or defend a right.

Retention period

Purpose

Storage time

A.     

24 months since last interaction with the user  

B.     

10 years from the final resolution of the dispute.

Nature of the transfer and consequences in case of refusal

Purpose

Nature

Consequences

A.              

Necessary

Inability to register an account and receive the additional services provided to registered users.

B.              

Necessary

Inability to manage the dispute.

    

Scope of communication

The data is processed by internal staff authorized for specific tasks and is communicated externally according to the following rules

Purpose

Categories of external recipients

A.              

External consultants, companies offering hosting/management services for technological platforms, companies providing authentication tools.

B.              

Law firms; debt collection or credit transfer companies; judicial authorities.

Since the data is also processed using IT tools, it may also be visible to those who provide assistance/maintenance on these systems.

Transfer of data to a third country or international organization

The Data Controller does not transfer personal data outside the European Economic Area.

Rights of Data Subjects

The subject to whom the personal data refer is granted the following rights:

Access: you have the right to know whether your personal data is being processed and, if so, to access it and request a copy.

Correction: you may request that your personal data be updated, corrected (if inaccurate), or supplemented if incomplete.

Deletion: you may request the deletion of your personal data under certain circumstances (for more information, contact the Data Controller).

Restriction: you may request that your data be marked so that its processing is restricted in the future, under certain conditions (for more information, contact the Data Controller).

Opposition: it is possible to oppose the processing of personal data, for reasons related to one's particular situation, where the processing is based on legitimate interest or is necessary for the performance of a task carried out in the public interest or in connection with the exercise of public powers vested in the Data Controller;

Portability: you may receive the personal data you have provided to the Data Controller in a structured format and request that it be transferred to another data controller if the processing is based on consent or a contract and is carried out by automated means.

Withdrawal of consent: you may withdraw your consent for the purposes for which it was requested, without prejudice to the lawfulness of the processing carried out up to that point.

The specific rights that can be exercised with regard to the processing activities carried out are:

Purpose

Exercisable right

 

Access

Correction

Deletion

Limitation

Opposition

Portability

Withdraw consent

A.               

X

X

X

X

 

X

 

B.               

X

X

X

X

X

  

To exercise the above rights, you can use the form available at the link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: privacy@increso.it The data subject may request further details regarding the above information (e.g., legitimate interest balancing test or list of data processors) at the same address.

You may lodge a complaint with a supervisory authority: for Italy, the Italian Data Protection Authority (www.garanteprivacy.it).