1. Data controller and scope of processing

This Information on the processing of personal data (the “Information”) is provided by Spazio Multiservices S.p.A. a socio unico to users of this Website pursuant to Article 13 of EU Regulation 2016/679.

Spazio Multiservices S.p.A. a socio unico, based in Milan, Viale Toscana 1 / A, as “Data Controller”, is responsible for the processing of your personal data and other information concerning you (such as cookies) and controls their use in accordance with this Information.

Types of data processed

Personal data concerning you may be collected or used in connection with the use of our website. In particular, we may collect the following categories of personal data and other user information:

• Electronic identification data and information collected from communication systems, IT applications and the website browser, such as the use of information technologies (access to the system, use of IT and the Internet), the device identifier (ID of the mobile device, IP address, browser type, browser settings, time and URL consulted, Cookies), registration and access credentials, access data and log files, analytical ID, searches.
• Identification data and company contact information that users share with us, also for the purpose of registering an account, such as name, surname, job / role / title, company e-mail address, company address, telephone number, mobile number, fax number, private telephone number, gender, date of birth, access credentials.

To receive information on a specific personal data processing activity, please send a message to amministrazione@spaziomultiservices.it.

3. Purpose of the processing

We may use your personal data and other information as above indicated exclusively for the following purposes:

• allow and manage any registration / account creation for this Website;
• allow users to use the services provided through this Website;
• following the specific consent of the User, allow Spazio Multiservices S.p.A. a socio unico, as well as to natural or legal persons contractually linked to the same, the sending of information and commercial communications, including of a promotional nature, including any newsletters, as well as advertising material;
• only after any specific consent of users, for profiling activities, or to allow the processing and completion of statistical and market studies and research, as well as for the analysis of tastes, preferences, habits, needs and consumption choices and to receive personalized offers based on purchase preferences.

We only collect the personal data that we need for the above purposes. For statistical purposes, improvement of our services and testing of our IT systems we use, as far as reasonably possible, anonymized data. This means that this data cannot directly or indirectly identify you personally.

4. Mandatory or optional nature of providing data

Apart from what is specified for navigation data and technical cookies, the provision of data is optional, although however, in some cases, failure to provide it could make it impossible to use some of the offered services.

5. The legal basis of the processing

Your personal data and other information concerning you may be used for the purposes described in this statement based on one of the following legal bases, as appropriate:

• We may process your personal data for the fulfillment of contractual obligations arising from contracts with you or your company, or as part of the pre-contractual information we need;
• We will ask for your consent for the activities described in this Privacy Policy when required by applicable law, such as in the event of possible use of your data to carry out analyses through the use of first- and third-party cookies.

6. Methods of processing personal data

We treat user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data. We are committed to protecting the security of your personal data when sending them. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

7. Parties with whom we share your personal data

Within the limits relevant to the processing purposes indicated, any data collected may be disclosed to other subjects involved in the organization of the website (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies), also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller. The data will not be disseminated in any way.

The management and storage of any personal data collected through this Website will take place on servers located within the European Union of the Data Controller and / or third-party companies appointed and duly appointed as Data Processors. The data will not be transferred outside the European Union.

8. Personal data storing period

The collected data will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“conservation limitation principle”, Article 5, GDPR) or on the basis of the deadlines set by law. Subsequently, the data will be deleted or anonymized. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

For more information on the specific retention periods that apply to your personal data, please send a request to amministrazione@spaziomultiservices.it.

9. Your data privacy rights

The subjects to whom the personal data refer have the right at any time to obtain from the Data Controller confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration, the updating, limitation or rectification and cancellation, in accordance with the provisions of art. 7 of the Code regarding the protection of personal data (Legislative Decree 196/2003 as supplemented by Legislative Decree no. 101/2018) and by EU Regulation 2016/679:

The Data Subject has the right to obtain confirmation of the existence or not of personal data concerning him/her, even if not yet registered, and their communication in an intelligible form.
The Data Subject has the right to obtain the indication:

1. the origin of personal data;
2. the purposes and methods of the processing;
3. the logic applied in case of processing carried out with the aid of electronic tools;
4. the identification details of the owner, of the managers;
5. of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State or abroad in the EU or even in third countries where the data are processed for account of the Controller.

The Data Subject has the right to obtain:

1. updating, rectification or, when interested, integration of data, limitation of processing;
2. the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
3. the attestation that the operations referred to in letters a) e b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves the use of means that are manifestly disproportionate to the protected right.

The Data Subject has the right to object, in whole or in part:

1. for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection;
2. to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;
3. to revoke the consent without prejudice to the lawfulness of the processing carried out based on the consent already given;
4. lodge a complaint with the national Supervisory Authority.

Requests relating to the exercise of the right of access by the Data Subject must be sent to the Data Controller in the following ways:

– by email at amministrazione@spaziomultiservices.it;

– by ordinary mail to Spazio Multiservices S.p.A. a socio unico, 20136 Milano, Viale Toscana 1/A;

– by certified email: spaziomultiservices@legalmail.it.

10. Link

Any external sites to which the Spazio Multiservices S.p.A. a socio unico website can refer via links are developed by people on whom Spazio Multiservices S.p.A. a socio unico has no control. These sites can place their own cookies on your computer, collect data or request personal information. Please refer to the privacy policy of each site for more information.