Privacy

Privacy Regulation
Treatment in line with 2016/679 GDPR

Regulation

Data Controller and Reference legislationativa
Titolare of the treatment is Anthilla Srl with headquarters in Corso della Vittoria 147, Caronno Pertusella, Varese (Italy), hereinafter “Anthilla”, for brevity. Anthilla processes personal data in compliance with the law European Commission on the Protection of Personal Data (hereinafter “GDPR”, for brevity). Pursuant to art. 12, 13 and 14 of the GDPR, the Data Controller provides this information on the processing of personal data from it carried out.

Scope
This information applies to Anthilla and to its website and data personal data relating to natural persons. Anthilla cannot be and is not in no responsible way of the treatments of independent third parties and of third-party sites accessible from any links on the site of Anthilla. Taking into account that Anthilla is a “Business-to-Business” company (B2B):

  • as Data Controller, Anthilla systematically and mainly processes data of legal or public persons,
  • the European legislation (GDPR) applies to the personal data of natural persons only,

any personal data of natural persons will be processed by the Data Controller Anthilla, electronically or manually, in full compliance with the GDPR e subjected to adequate security measures as required by law and according to the best industry standards (ISO27002, ISO 29134, NIST 800-123). However, data and information of legal persons are treated confidentially and subjected to the same security measures and of adequacy to the same standards.

Purpose of processing without express consent
All the personal information that you provide to us without expressing explicit consent, via web or email or otherwise, are optional and the result of your free choice. This information will be processed solely by Anthilla for the purposes of: (a) responding and satisfying your requests, (b) fulfill any contractual obligations we have, (c) pursue legitimate interests of the Data Controller [example: defend oneself in registered office], (d) fulfill legal and tax obligations.

Purpose of processing with express consent
Only subject to express consent by the interested party, Anthilla will process personal data of natural persons for purposes promotional and commercial: for example to inform you of new offers of products or services.

Retention period of personal data
Anthilla will keep personal data for the necessary and sufficient period for the purposes declared or envisaged by legal and tax regulations or up to when the interested party does not request its cancellation (see also Rights of the interested party).

Rights of the interested party
The natural person to whom the data refers (“interested”), has the following rights:

  • revoke the owner’s consent at any time *
  • propose a complaint to the Supervisory Authority (Guarantor),
  • ask the Owner for access to the data to verify its accuracy and, if necessary, request its correction,
  • ask the Data Controller for the portability of their data in an intelligible format (.csv),
  • chiedere al Titolare la cancellazione** dei propri dati personali

* this does not affect the lawfulness of the processing before the revocation

** the cancellation request will be satisfied if there are no others legal bases that oblige you to keep data: for example data necessary for the execution of our contractual or regulatory obligation.

Categories of personal data
Self not otherwise provided freely by the interested party, Anthilla treats only “common” personal data. Systematic treatment is excluded and continuation of “particular data” (that is: sensitive, medical, judicial, etc.).

Sources of personal data
Anthilla can receive your personal data from yourself for your free choice (via email, website, telephone, fax, etc.) or from public sources (public registers, social networks, etc.). Whatever the source, Anthilla doesn’t will process the personal data of natural persons for purposes promotional or commercial without their explicit consent.

Contact/Questions
contact the Data Controller to exercise your rights or to ask for clarification.