Data Protection
The European Regulation – Regulation (EU) 2016/679 – GDPR concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data was published in the Official Journal of the European Union on May 4, 2016, and became fully effective on May 25, 2018.
This new regulation, which defines the right to personal data protection as a fundamental right, imposes a series of obligations on Data Controllers, expressed through the concepts of privacy by design and privacy by default, to ensure safeguards and guarantees for the data processed in accordance with the principle of accountability.
Setek S.r.l., in order to ensure an adequate level of data protection, is committed to processing data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.
Data Controller
The Data Controller of the personal data held by Setek S.r.l., whether collected in automated or paper-based databases or not, is the Administrator.
Contacts
Setek S.r.l. has appointed a Data Protection Officer (DPO) with the following designation.
Privacy Notices
The GDPR provides, among other things, that data subjects have the right to be informed of the existence of data processing and its purposes. The tool used to fulfill this right is the privacy notice.
Each notice, in accordance with the GDPR, includes:
-
The data and contact details of the Data Controller and the Data Protection Officer
-
The purposes and legal basis of the processing
-
The nature of the data provision
-
The processing methods
-
The categories of data recipients and any data transfers
-
The data retention period
-
The rights of the data subjects
Exercising Data Subject Rights
In accordance with Regulation (EU) 2016/679, individuals whose personal data is processed, in their capacity as Data Subjects, may at any time exercise:
-
The right to access their data
-
The right to request rectification, erasure, or restriction of processing
-
The right to object to processing
-
The right to data portability
Additionally, under Article 7, paragraph 3 of Regulation (EU) 679/2016, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, the data subject may contact the Data Protection Officer at Setek S.r.l., whose contact details are provided in the aforementioned appointment.
Main Notices