Information on the processing of personal data pursuant to articles. 13-14 EU Reg. 2016/679

As Data Controller of your personal data, pursuant to Regulation (EU) 2017/79, Indicom eDocument Care Srl intends to inform you, hereby, of everything inherent to the processing of your personal data.

We remind you that “processing” of personal data means any type of operation of collection, recording, storage, modification, communication, cancellation and dissemination of personal data. Data is to be considered personal if it contains information referable to a specific or determinable natural person.

This processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligations set out therein.

Rights of the interested party.

As an interested party, you have the right to obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, their communication in an intelligible form and the possibility of making a complaint to the Supervisory Authority.

Pursuant to the GDPR, your rights (so-called “Data Subject Rights”) can be found among:

Right to access your data (Art. 15);
Right of rectification (Art. 16);
Right to cancellation (Art. 17);
Right to limit processing (Art. 18);
Right to data portability (Art. 20);
Right of opposition (Art. 21).

Subject to the provisions of the aforementioned articles, you have the right to obtain the following information:

• Source of personal data;
  Purpose and methods of processing;
  Logic applied in case of processing carried out with the aid of electronic instruments;
  Identification details of the owner, managers and representative designated pursuant to article 5, paragraph 2;
  Subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the state, managers or agents;
  The updating, rectification or, when interested, integration of data;
  The cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
  The certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means that are manifestly disproportionate to the protected right;
  Data portability.

You have the right to object, in whole or in part:

For legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
To the processing of personal data concerning him for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.

You can assert your rights at any time by writing to privacy@indicom.it

Purpose and legal basis of the processing.

Your data will be used for the following purposes:

Statistical and analysis purposes of user navigation

Your personal data may also, subject to your consent, be used for the following purposes:

To satisfy market and statistical surveys and to send promotional and advertising information material with electronic systems (CRM, e-mail, other types of electronic communications) and with traditional systems (call centre, paper mail)

The provision of data is optional for you with regard to the aforementioned purposes, and your refusal to the processing does not compromise the continuation of the relationship or the adequacy of the processing itself.

You may revoke your consent at any time by writing to marketing@indicom.it.

Treatment methods.

The data will be processed mainly with electronic and IT tools and stored both on IT media and on paper media and on any other type of suitable media. Only designated personnel can access the data, in compliance with minimum security measures.

All processing takes place in compliance with the methods set out in the articles. 6, 32 of the GDPR and through the adoption of the appropriate security measures envisaged.

Your data will be processed only by personnel expressly authorized by the Data Controller and, in particular, by the following categories of employees:

YES Infrastructure and Systems
Commercial office
Marketing office

Communication.

Your data may be communicated to:

Collaborators, employees, suppliers and consultants of Indicom eDocument Care Srl within the scope of their duties and/or any contractual obligations, including Data Processors and Persons in Charge, appointed pursuant to Regulation 679/2016/EU;
Personnel external to this company as data processing managers for the management of particular services requested such as preparation of salaries, budgets and related operations;
Financial Administration, to Tax Police bodies, Financial Police, Labor Inspectorate, and in general to all bodies responsible for checks and controls regarding the regularity of the obligations referred to in the purposes indicated above;
Any other organization provided for by the current legal system;
Personnel external to this company as data processing managers for the management of particular services requested;
Natural and/or legal persons, public and/or private, when the communication is necessary or functional for carrying out the activity of Indicom eDocument Care Srl in the ways and for the purposes illustrated above;
Natural and/or legal persons, public and/or private, when the communication is necessary or functional for carrying out the activity of IDC – Indicom Document Care Srl in the ways and for the purposes illustrated above;
Credit institutions for the management of collections and payments;
Business partners (if relevant consent is given).

Your data may be recovered and managed through the following services:

Email marketing tools (MailChimp), landing pages (Instapage) and CRM;
Google Analytics: for analysis, measurement, optimization of the user’s User Experience on the site and definition and management of the advertising target;
Google AdWords: for the generation and optimization of online advertising campaigns (Search and Display);
LinkedIn and LinkedIn Ads: for the generation and optimization of online advertising campaigns;
Twitter;
YouTube;
Facebook and Facebook Ads: for the generation and optimization of online advertising campaigns.

Retention period.

We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of personal data is:

Two years

How to contact the company in case of information.

Data Controller: the Data Controller, pursuant to the Law, is IDC – Indicom Document Care Srl (Via Carnevali 39, 20158 Milan (MI); VAT number: 08806580968) in the person of its legal representative pro tempore.

You have the right to obtain from the owner the cancellation (right to be forgotten), limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, and in general you can exercise all the rights provided for from the articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.

You can revoke your consent by writing to marketing@indicom.it.

For any requests or questions relating to the information on the use of cookies or the privacy information, contact our staff at the email: privacy@indicom.it; marketing@indicom.it.

Last update of this information: 5 November 2020