The personal data that you provide will be used for the following purposes:

• a) the stipulation and execution of the contract and of all related activities, including, for example, invoicing, debt recovery, administration, operational purposes, organisation, and other purposes necessary to fulfil the contract;
• b) compliance with the applicable laws, regulations, rules and instructions given by authorities which are legally empowered to do so by law and by supervisory and control bodies.
  The processing of the personal data for the above purposes does not require your consent pursuant to Article 6 paragraphs b), c), d) and e) of the GDPR.
• c) Sending of commercial communications by email or telephone, including updates or invitations relating to events, satisfaction questionnaires and informative communications (“Newsletters”) from the company.

The processing of your personal data for the above purposes requires your express consent (art. 7 of the GDPR). This consent concerns both the automated and traditional methods of communication described above. You will always have the right to object easily and free of charge, in whole or in part, to the processing of your data for these purposes, for example opting out of automated contact methods and expressing your willingness to receive commercial and promotional communications exclusively through traditional contact methods.

The data requested for the purposes indicated in paragraphs a) and b) above must be provided in order to comply with legal obligations and/or for the conclusion and execution of the contractual relationship and the provision of the requested services. Your refusal to provide all or part of the requested data will mean that the Supplier is unable to establish or manage the contractual relationship or provide the requested service.
The provision of the data necessary for the purpose indicated in paragraph c) is optional; therefore your refusal to provide it will mean that the activities described therein cannot be provided.

The personal data is processed via the operations indicated in Article 4(2) GDPR, for the above purposes. It may be processed on paper or electronically, using electronic or automated tools, in accordance with current legislation, with particular regard to laws on confidentiality and security, and in accordance with the principles of fairness, legality, transparency and protection of the Customer’s rights. The data is processed directly by the organisation of the Data Controller, its data processors and/or other authorised persons.

Your personal data may be communicated to the following categories of person, within the limits strictly relevant to the obligations, duties and purposes indicated above, and in accordance with the current provisions of law:

• Persons to whom the management of the customer/potential customer has been delegated in order to ensure a better commercial service;
• Persons who need to receive the data in order to fulfil specific obligations provided for by law, regulations and/or EC legislation, or to request the fulfilment of such obligations;
• Companies in the Group of the Data Controller, or parent companies, subsidiaries or affiliates as defined in Article 2359 of the Italian Civil Code, who act as data processors, or administration or accounting purposes (purposes related to internal organisation, administration, financial or accounting matters, and in particular relating to the fulfilment of contractual and pre-contractual obligations);
• natural or legal persons external to the Company who provide services which are instrumental to the activities of the Data Controller, for the purposes indicated above. (e.g. call centres, suppliers, advisors, companies, entities and independent professional partnerships). Such parties will process the data in their capacity as data processors.

Your personal data will not be disseminated in any way.

Your personal data will be stored for the entire duration of the contract made with the Data Controller, after which time the data will be kept in order to comply with the legal conservation period for administrative documents, and will then be erased.

The personal data are stored on servers located within the European Union. It is to be understood that, if necessary, the Controller shall have the right to move the servers outside the EU. In that case, the Data Controller hereby assures that the transfer of data outside the EU shall take place in compliance with applicable legal provisions, subject to stipulating the standard contract clauses envisaged by the European Commission,

As the data subject, you have the rights indicated in the GDPR, and specifically, the right:

1. to obtain confirmation of the existence of any personal data that relates to you, even if not yet registered, and its communication in an intelligible form;
2. to obtain details of: a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in the case of processing by electronic instruments; d) the identification details of the data controller, the data processors and the person authorised pursuant to Article 3 paragraph 1) of the GDPR; e) the persons or categories of person to whom the personal data may be reported or who may be informed of the data in their capacity as designated representative for the State, managers or appointees;
3. to obtain: a) the updating, rectification or, when of interest, completion of data; b) the erasure, the transformation into anonymous form, the blocking of data processed against the law, including those for which storage is not necessary in relation to the aims for which the data were collected or subsequently processed; c) certification of the fact that the operations under points (a) and (b) were brought to the awareness, also in terms of their contents, of those to whom the data were communicated, except for the case in which such action is impossible or implies use of means that are clearly disproportionate with respect to the protected right;
4. to object, in full or in part: a) for legitimate reasons, to the processing of your personal data, even if relevant to the purpose for which it was collected; b) to the processing of your personal data for the purpose of sending advertising or direct sales material, or for performing market research or commercial communication using automated call systems, by email and/or through traditional marketing methods, such as by telephone and/or post. The data subject’s right to object to direct marketing using automated methods, as indicated in point b) above, extends to traditional marketing methods; the data subject may also exercise the right of objection only in part. Therefore the data subject may decide to receive only marketing communications via traditional methods, or only automated communications, or neither type. Where applicable, the data subject also has the rights indicated in Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability and right to object), and the right to complain to the Data Protection Authority

To exercise the above rights, or if you have any queries or would like information about the processing of your data and the security measures adopted by the Company, you can contact us at: info@roboqbo.com.