Privacy
Reference is made to articles 7 and 13 of the consolidated privacy law
Article 7
(Right of access to personal data and other rights)
1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
2. The interested party has the right to obtain the indication:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) of the logic applied in case of processing carried out with the aid of electronic instruments;
d) the identification details of the owner, managers and representative designated pursuant to article 5, paragraph 2;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representatives in the territory of the State, managers or agents.
3. The interested party has the right to obtain:
a) the updating, rectification or, when interested, integration of the data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this requirement is proves impossible or involves a manifestly disproportionate use of means compared to the protected right.
4. The interested party has the right to object, in whole or in part:
a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning him for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.
Article 13
(Information)
1. The interested party or the person from whom the personal data are collected are previously informed orally or in writing about:
a) the purposes and methods of processing for which the data are intended;
b) the mandatory or optional nature of the provision of data;
c) the consequences of a possible refusal to respond;
d) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as managers or agents, and the scope of dissemination of the data themselves;
e) the rights referred to in Article 7;
f) the identification details of the owner and, if designated, of the representative in the territory of the State pursuant to article 5 and of the person in charge. When the owner has designated multiple managers, at least one of them is indicated, indicating the site of the communication network or the methods through which the updated list of managers can be easily found. When a person responsible for replying to the interested party in the event of exercise of the rights referred to in Article 7 has been designated, this person is indicated.
2. The information referred to in paragraph 1 also contains the elements provided for by specific provisions of this code and may not include the elements already known to the person providing the data or the knowledge of which may concretely hinder the completion, by a public entity, of inspection or control functions carried out for the purposes of defense or security of the State or of prevention, detection or repression of crimes.
3. The Guarantor may identify with its own provision simplified methods for the information provided in particular by telephone assistance and information services to the public.
4. If the personal data are not collected from the interested party, the information referred to in paragraph 1, including the categories of data processed, is given to the same interested party upon registration of the data or, when the their communication, no later than the first communication.
5. The provision referred to in paragraph 4 does not apply when:
a) the data are processed on the basis of an obligation established by law, by a regulation or by community legislation;
b) the data are processed for the purposes of carrying out defensive investigations pursuant to law 7 December 2000, n. 397, or, in any case, to assert or defend a right in court, provided that the data are processed exclusively for these purposes and for the period strictly necessary for their pursuit;
c) the information to the interested party involves the use of means that the Guarantor, prescribing any appropriate measures. declares manifestly disproportionate to the protected right, or proves, in the opinion of the Guarantor, impossible.
