Ecco la traduzione professionale in inglese dell'informativa sulla privacy completata con i dati societari:

PRIVACY NOTICE PURSUANT TO ART. 13 OF LEGISLATIVE DECREE 196/03

PRIVACY NOTICE PURSUANT TO ARTS. 13 AND 14 OF REGULATION (EU) 679/2016 (GDPR)

We wish to inform you that Legislative Decree no. 196 of June 30, 2003, as well as the information notice pursuant to Articles 13 and 14 of Regulation 679/2016, provide for the protection of individuals and other subjects regarding the processing of personal data. According to the indicated legislation, such processing will be based on the principles of correctness, lawfulness, transparency, and the protection of your confidentiality and your rights. In addition to and/or to complete the assignments and relationships already held and/or in the process of being established, in accordance with the provisions of the Law on the processing of personal data in force pursuant to Article 13 of Legislative Decree no. 196/2003,

Are the data collected from the data subject or from a third party? Camala s.r.l. acquires only two categories of data: general data and data linked to the provision of the service, specifically the data that the user enters independently into the company's portal. This second category of data falls within the category relating to billing, economic solvency, and the like; therefore, this processing was previously subject to notification to the Privacy Guarantor by consulting the specific section dedicated on the online Guarantor website and available to everyone. The source of such data and information occurs following acceptance of this information notice at the time of entering the customer's data on the portal. The entered data are not made public in any way as they are not accessible even by the system technician, since the service actually consists of making the tool and useful instruments available to the sole customer using the service; therefore, the data will not be subject to processing, acquisition, or profiling. Information regarding the mandatory or optional nature of the communication of personal data is omitted because, in this case, the data are not collected from the data subject. In the case of data collection from a third party, the information notice is given to the data subject upon acquisition of the services provided and upon acceptance of this Privacy Policy and Terms of Service of the company.

Purposes of data processing: The personal data provided by you to the company, which will come into its possession as a result of the acceptance of the services provided by the company, will be intended to be used exclusively for the performance of the services conferred. The data may be processed internally through authorized employees and/or trusted collaborators, and be transmitted to all financial and administrative offices, public bodies and offices, banks, Ministries, and/or subjects to whom communication is deemed necessary, always and only to correctly fulfill the assignment conferred and/or to comply with contractual or legal obligations;

Methods of data processing: The processing will be carried out through the use of electronic and/or otherwise automated IT tools. All IT media are correctly prepared in accordance with the provisions of the current legislative decree;

Provision of data and mandatory nature and/or possible refusal: The provision of personal data is strictly necessary for the purpose of carrying out the assignment, and any refusal to provide such data has no further consequence other than the impossibility of correctly fulfilling the professional service conferred, effectively resulting in the impossibility of executing the service in whole or in part, determining the non-continuation of the relationship;

Communication of data: Employees, internal/external collaborators, and in general all those public and/or private entities to whom communication is necessary for the correct fulfillment of the purposes indicated in point a) may come to know the personal data;

The Data Controller is: Camal s.r.l., herein represented by its Sole Director and legal representative pro tempore, Mr. Piscitelli Sabatino.

Transfer of data abroad: Personal data will not be transferred to European Union countries or to third countries within the scope of the purposes referred to in point a).

Article 13

Information to be provided where personal data are collected from the data subject

a) Camal s.r.l., with registered office in Camerota (SA), Via Bolivar 86, CAP 84059, Frazione Marina di Camerota, PEC email address: camal.camerota@pec.it

b) Legal representative of the company Camal s.r.l., contactable via email at the PEC address camal.camerota@pec.it entering "Privacy" as the subject.

c) The personal data provided by you to the company, which will come into its possession as a result of the acceptance of the services provided by the company, will be intended to be used exclusively for the performance of the services conferred. The data may be processed internally through authorized employees and/or trusted collaborators, and be transmitted to all financial and administrative offices, public bodies and offices, banks, Ministries, and/or subjects to whom communication is deemed necessary, always and only to correctly fulfill the assignment conferred and/or to comply with contractual or legal obligations;

d) The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, where the processing is based on Article 6(1)(f). The provision of personal data is strictly necessary for the purpose of carrying out the assignment, and any refusal to provide such data has no further consequence other than the impossibility of correctly fulfilling the professional service conferred, effectively resulting in the impossibility of executing the service in whole or in part, determining the non-continuation of the relationship;

e) Employees, internal/external collaborators, and in general all those public and/or private entities to whom communication is necessary for the correct fulfillment of the purposes indicated in point a) may come to know the personal data;

f) Personal data will not be transferred to European Union countries or to third countries within the scope of the purposes referred to in point a). Alternatively, in the event that processing should occur, the company will take steps to notify the Guarantor of this different company policy, committing, where applicable, in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49, to specify reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.

2. In addition to the information referred to in paragraph 1, at the time when personal data are obtained, the data controller shall provide the data subject with the following further information necessary to ensure fair and transparent processing:

a) Camal s.r.l. undertakes to retain the data of the data subjects for a maximum period of 365 days from the date on which the provision of the service ceases.

b) The data subject has the right to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing, as well as the right to data portability;

c) Where the processing is based on Article 6(1)(a) or Article 9(2)(a), the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

d) The data subject has the right to lodge a complaint with a supervisory authority;

e) The sending of data by the data subject to the data controller will be a necessary requirement for the conclusion of a contract; therefore, the data subject is obliged to provide the personal data correctly and to independently take care of updating them for the correct provision of the service itself.

f) The company Camala s.r.l. does not initiate, either internally or on behalf of third parties, automated decision-making processes, including profiling as referred to in Article 22(1) and (4), and, at least in those cases, meaningful information about the logic involved; therefore, the company does not profile its customers and does not communicate any data at its disposal to third parties.

3. Where the data controller intends to further process the personal data for a purpose other than that for which the personal data were collected, the data controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2. Camala s.r.l. undertakes not to acquire further information beyond what is strictly necessary for the provision of the service itself.

4. Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.

Article 15

Right of access by the data subject

1. The data subject shall have the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

2. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.

3. The data controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.

4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

Article 16

Right to rectification

The data subject shall have the right to obtain from the data controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Article 17

Right to erasure («right to be forgotten»)

1. The data subject shall have the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay and the data controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing; c) the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2); d) the personal data have been unlawfully processed; e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject; f) the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

2. Where the data controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the data controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform data controllers which are processing the personal data that the data subject has requested the erasure by such data controllers of any links to, or copy or replication of, those personal data.

3. Paragraphs 1 and 2 shall not apply to the extent that processing is necessary: a) for exercising the right of freedom of expression and information; b) for compliance with a legal obligation which requires processing by Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller; c) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3); d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or e) for the establishment, exercise or defense of legal claims.

Article 18

Right to restriction of processing

1. The data subject shall have the right to obtain from the data controller restriction of processing where one of the following applies: a) the accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) the data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims; d) the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the data controller override those of the data subject.

2. Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

3. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the data controller before the restriction of processing is lifted.