IN CONFORMITY WITH THE EU REGULATION 679/2016 (“GDPR”) ART 13 AND FOLLOWING ADJUSTMENT NATIONAL LAWS

This document (“informative report”) gives information about the treatment of data, as specified here after, which You will give us, or which are available at our headquarter, and that will be used by us or third parts in charge of the aims reported in this document. The informative report, in particular, is given according to the EU regulation 679/2016 (“GDPR”) and following adjustment national laws (together with GDPR, here as “Executive Regulation”).

1. Owner of the treatment’s identity and contact data

The owner of the treatment, according to articles 4 and 24 of the EU reg. 2016/679, is ARAN WORLD srl, Unipersonale, Zona Industriale . Casoli, 64032 Atri (TE)Italy. VAT 01444880676 Tel.+390858794400, email: privacy@aranworld.it , egally represented by the pro tempore person in charge.

2. Contact data of the person in charge of the Protection of data

The owner of the treatment doesn’t carry out any activities which foresee the nomination of the Person in charge of protection of personal data.

3. Purposes and legal foundation of the treatment

All personal data will be treated according to legality ex art.6 (legit interest) EU regulation 2016/679 for the following purposes:

Purposes

Legal Foundation

Data collecting (through form filling) to send newsletter or promotional communications, usually via e-mail

Your consent

4. Receivers and categories of receivers of data

Personal data provided will be transferred to receivers who will treat in quality of administrators (art 28 of UE Reg. 2016/679) and/or in quality of persons or companies who work under the authority of the Owner and the administrator (art 29 of UE Reg. 2016/679), for purposes above listed at point 3. Specifically, data will be spread to:

  • a) subjects providing IT and telecommunication services , including e-mail, newsletter, and Internet websites management;
  • b) assistance companies, consulting agencies;
  • c) authorities in charge of law accomplishments and /or public dispositions, upon request.

All subjects belonging to the above mentioned categories carry out the role of Administrators of Treatment of Data, or they work autonomously as separated Owners of treatment. The list of the Administrators is constantly up-to-date and available writing to privacy@aranworld.it, or at the Owner’s headquarter.

5. Overseas transfer of data

Data won’t be transferred outside European Union.

6. Duration of data storage (parameters of storage setting)

According to what established on the art.5, par 1 lett.e) of the EU reg. 2016/679 personal data will be stored in a way that they can be viewed by the interested parts for a period of time long enough to fulfil all purposes personal data are treated for:

Purpose

Storage time

Data collecting (through form filling) to send newsletter or promotional communications, usually via e-mail

2 years starting form the collection, with the option for the users of change and/or breach the agreement.

7. Modality of data treatment

Personal data treatment will be carried out through the use of manual, informatic or telematic instruments, able to guarantee safety and privacy, and will be executed by properly trained staff in conformity with the Executive Regulations. There is no computer-based decisional process.

8. Acknowledged rights

We inform you that you can exert your rights according to the Executive Regulation, among which are the rights of:

  • a) access Your Personal Data and know the source, the purpose and the aims of their treatment, data belonging to the parts they are spread to, the duration of their storage, and the parameters of storage durations (art 15); 
  • b) asking for an adjustment (art 16); 
  • c) cancelation (“oblivion”), if not needed anymore, if incomplete, wrong, or collected against the law (art 17); 
  • d) asking for the treatment to be limited to a part of information concerning Yourself (art.18);
  • e) within the limits of possibility, receiving in a structural way or to send to You, or persons communicated by You all information concerning Yourself, or the ones provided willingly from You; 
  • f) to set yourself against their treatment based on legit interest (art.21);
  • g) revoke Your consent at any time, in case this constitute the foundation of the treatment (the revocation doesn’t prejudice the legality of the treatment carried out before the revocation itself).

All mentioned rights can be exerted through written request, sent to the co-owner (DPO), to the contacts on points 1 and 2.

The Owner at this point must proceed without any delay or the latest within one month after receiving the request. This expiration can be postponed of 2 months if necessary, considering the complexity and the number of the requests received by the Owner. In these cases the Owner, within one month after receiving your request, will inform You and let You know about the reason they postponed.

We remind you that, should your request not be fulfilled, you can address and send a complain to the Authority warrant for the protection of personal data (https://www.garanteprivacy.it/) in the ways established by the Executive Regulation. 

Revision May 2018