PRIVACY POLICY

In accordance with the Regulation on the protection of individuals with regard to the processing of personal data and rules relating to the free movement of personal data, namely Regulation (EU) 2016/679 of the European Parliament, and current Italian legislation, RIO ITC Solution srl, as personal data controller, takes appropriate measures to protect its own employees, its customer's employees and its provider's employees. Personal data held by RIO ITC Solution are collected exclusively from the subjects above. Personal data are processed according to the following principles: lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy. RIO ITC Solution, where necessary, keeps data up to date and ensures that personal data are erased or rectified without delay.

Type of processsing

RIO ITC Solution carries out its own processing in electronic and paper form, not carrying out any kind of monitoring on its data traffic relating to the website, nor does it implement any profiling of personal data (eg browsing habits, or other data collection and processing activities), does not transfer personal data to countries outside the EU and does not process personal data relating to children.

Processings, purposes and legal basis

The personal data are processed for the following purposes:

• Administrative management of relations with customers and suppliers.
• Subject: employees of our customers and our suppliers;
• Type of data: Personal data, e-mail and telephone contact;
• Purpose: Administrative management;
• Legal Basis: Administrative and accounting compliance with specific obligations deriving from national and EU legislation;
• Storage period: 10 years.
• Contract management:
• Subject: employees of our customers and our suppliers;
• Type of data: Personal data, e-mail and telephone number;
• Purpose: related to the provision of services and sales;
• Legal Basis: legitimate interests pursued by the controller
• Storage period: 3 years from the end of contract.
• Cookies management:
• Subject: website visitors (www.rioitc.it);
• Type of data: technical cookies;
• Purpose: to allow browsing our websites and use their functionalities;
• Legal Basis: Italian Data Protection Authority Decision n.22/2014;
• Storage period: 3 years/ until the visitors deleted them;

Rights of the data subject

According to the European Regulation 679/2016 (GDPR) and national legislation, subjcets may at any time exercise their rights by contacting the data controller at privacy@rioitc.it. Subjects have the right to:

• obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data;
• know the source of his/her data;
• have information about the logic, methods and purposes of the processing;
• request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;
• in the case of consent-based processing, to receive his/her own data hel by the processor, in a format commonly used by an electronic device;
• to lodge a complaint with a supervisory authority.

Exercising subject rights

Subjects can exercise any of the abovementioned rights sending a written communication:

• via email at address: privacy[at]rioitc.it
• via recommended letter to:
  RIO ITC Solution srl
  Viale Dell'Aeronautica,11 - 00144 Roma Italy
• via phone at 335-8496183