Information pursuant to and for the purposes of art. 13-14, EU Reg. 2016/679

(European regulation on the protection of personal data)

Rox Pay S.r.l. with registered office in Poggibonsi (SI) in Via G. Marconi, 67 / A CF and VAT number 01524770524 (hereinafter, “Owner”), as data controller, informs you that the EU Reg. 2016/679 (“European regulation on the protection of personal data”) provides for the protection of persons and other subjects and respect for the processing of personal data.

Pursuant to articles 13 and 14, therefore, we provide you with the following information:

1. Purpose, legal basis of the processing for which the data are intended
The processing of the personal data you provide is aimed solely at fulfilling contractual obligations and fulfilling your specific requests, as well as fulfilling obligations regulations, in particular the accounting and tax ones.
For the purposes of the indicated treatment, the owner may become aware of data defined as “sensitive” pursuant to EU Reg. 2016/679, such as those suitable for revealing racial origin or ethnic, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, health status and sexual life.

2. Processing methods
In relation to the indicated purposes, your data are subject to computer and paper processing. The processing operations are implemented in such a way as to guarantee the logical, physical security and confidentiality of your personal data.

3. Nature of personal data
Your personal, sensitive and judicial data, relating to the performance of the service requested by you, constitute the object of processing.
During the provision of the service it may be necessary to acquire and carry out processing operations of your sensitive and judicial personal data, in this case you will be asked to express your consent in writing.

4. Mandatory or optional nature of the provision
The provision of your personal and sensitive data is not mandatory, but any refusal could make it impossible or extremely difficult to provide the services you requested.

5. Retention of personal data
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 15 years from the termination of the relationship for the purposes of service.

6. Identification details of the owner, manager and appointees.
The Data Controller is Società Rox Pay Srl with registered office in Poggibonsi (SI) in Via G. Marconi, 67 / A – E-mail: info@roxlab.eu.
The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.

7. Scope of communication, dissemination of data and purpose of processing
Your data may also be used to:
Send periodic documentation on initiatives and offers to your e-mail address. < br /> Communicate any events or offers and carry out market surveys and statistics, marketing and preferences on services by telephone.

Your data may be communicated to:
all subjects whose right of access to such data is recognized by virtue of regulatory provisions; our collaborators, employees, as part of their duties; to all those natural and / or legal persons, public and / or private when the communication is necessary or functional to the performance of our business and in the manner and for the purposes illustrated above.

8. Rights of the interested party

8.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679
The interested party has the right to obtain from the data controller confirmation that he or she is in processing of personal data concerning him and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients of third countries or international organizations;
d) the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority;
h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.

8.2 Right pursuant to art. 17 of EU Reg. 2016/679 – right to cancellation (“right to be forgotten”)
The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay and the data controller is obliged to delete the personal data without undue delay, if one of the following reasons exists:
a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing;
c) the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2;
d) personal data such have been unlawfully processed;
e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the data controller is subject;
f) personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of EU Reg. 2016/679.

8.3 Right referred to in art. 18 Right to limitation of treatment
The interested party has the right to obtain from the data controller the limitation of treatment when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the deletion of personal data and instead requests that it be limited the use;
c) although the data controller no longer needs it for processing purposes, the personal data are necessary for the interested party to ascertain, exercise or defend a right in court ;
d) the interested party opposed the processing pursuant to article 21, paragraph 1, EU Reg. 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

8.4 Right referred to in Article 20 Right to data portability
The interested party has the right to receive the personal data concerning him provided in a structured, commonly used and machine-readable format to a data controller and has the right to transmit such data to another data controller without impediments by the data controller.

9. Transfer of personal data to a third country
Personal data are stored on the server located at the registered office of the data controller, within the European Union. In any case, it is understood that the owner, if necessary, will have the right to move the servers even outside the EU. In this case, the owner ensures from now on that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

10. Withdrawal of consent to processing
You are entitled to withdraw consent to the processing of your personal data by sending a registered letter with return receipt to the following address: Via G. Marconi, 67 / A – 53036 Poggibonsi (SI), or a PEC to the following certified e-mail address: roxlab.srl@legalmail.it accompanied by a photocopy of your identity document, with the following text: “withdrawal of consent to the processing of all my personal data “. At the end of this operation, your personal data will be removed from the archives as soon as possible.
If you wish to have more information on the processing of your personal data, or to exercise the rights referred to in point 8 above, you can send a registered letter A / R to the following address: Via G. Marconi, 67 / A – 53036 Poggibonsi (SI), or a PEC to the following certified e-mail address: roxlab.srl@legalmail.it. Before we can provide you, or change any information, you may need to verify your identity and answer some questions. An answer will be provided as soon as possible.
The interested party, in light of the above, authorizes the processing of their data for the purposes described above.