privacy policy
of micaelascapin.it

PREMESSA

Your privacy is important to Micaela Scapin.

Micaela Scapin, Via Carlo Goldoni 76, 30174 Mestre (VE), as data controller, has drawn up this document regarding the processing of your personal data, how and why we collect it and how we manage it.

We remind you that "processing of personal data" means any operation or set of operations, carried out with or without the aid of electronic means, concerning the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if not recorded in a database.

This notice applies when you visit our website or our social media channels; when you request information; or when you are a supplier, partner, consultant or any other party who has a business relationship with Micaela Scapin.

The information and data you provide will be processed in compliance with current applicable laws and regulations (including, by way of example but not limitation, the General Data Protection Regulation - EU Regulation 2016/679 - "GDPR").

The processing of data carried out by Micaela Scapin will be guided by the principles of fairness, lawfulness, transparency, accuracy, integrity, confidentiality, purpose and storage limitation, and data minimisation.

THE LEGAL BASES FOR OUR PROCESSING OF YOUR PERSONAL DATA

Micaela Scapin bases the processing of your personal data on various legal grounds:

  • your consent (only where necessary or permitted by law). In such cases, you will still have the right to withdraw it;
  • the need to establish a contractual relationship and fulfil the obligations arising from it;
  • the need to comply with applicable laws and to establish, exercise or defend against legal claims;
  • the need to pursue its legitimate interests: ensuring that information is secure, preventing or investigating suspected or actual violations of the law, commercial contracts, or non-compliance with its corporate policies;
  • the need to respond to your requests;
  • any other legal basis permitted by applicable law.

WHAT TYPE OF PERSONAL DATA WE PROCESS, FOR WHAT PURPOSES AND FOR HOW LONG WE RETAIN IT

a) Browsing data
The proper functioning of Micaela Scapin's website and the services provided requires certain IT systems and software procedures which, in the course of their normal operation, acquire some personal data whose transmission is implicit in the use of internet communication protocols. This is data that is not collected in order to be linked to identified individuals, but which, by its very nature, could — through processing and association with data held by third parties — allow users to be identified (e.g. IP addresses). This data is used solely for anonymous statistical information relating to the use of the service and to verify its correct functioning, and is retained for the period strictly necessary and, in any case, in compliance with current legislation.

b) Cookies
Accessing the website www.micaelascapin.it may involve our servers sending so-called "cookies" to the user's computer, i.e. files that make it possible to obtain information on the pages visited in order to speed up the use of the various services. You can choose to disable cookies at any time by simply changing your browser settings; please note, however, that disabling cookies may slow down or prevent access to certain sections of the site. You can find more information in the cookie policy available on the website.

c) Traffic data
Micaela Scapin informs you of the existence of the connection log (LOG), in which data relating to electronic traffic is retained, within the terms and timeframes provided for by law. Once the retention period established by law has elapsed, and unless otherwise indicated by the relevant Authority through an administrative or judicial measure, the above-mentioned data will be destroyed and it will no longer be possible to obtain a copy of it.

HOW WE MANAGE YOUR DATA FOR PROMOTIONAL PURPOSES

Micaela Scapin may send you marketing communications relating to its activities or events via e-mail, telephone, and other parties' social networks.

Before starting any marketing activity, and where required by applicable law, we will ask you to give your consent, which you may in any case withdraw by sending a request e-mail to info@micaelascapin.it. Even if you withdraw your consent to receive marketing communications, you may still receive other types of communications (for example, important notices of a technical or administrative nature).

WHO IS THE DATA CONTROLLER FOR THE PROCESSING OF PERSONAL DATA

The Controller for the processing carried out through the website is Micaela Scapin - Via Carlo Goldoni 76, 30174 Mestre (VE).

The controller and processor of personal data can be contacted at the following address, info@micaelascapin.it, for all information relating to the processing of personal data and to obtain the list of all data processors involved in the management thereof.

WHO ARE THE RECIPIENTS OF THE PERSONAL DATA

The recipients of the personal data collected are:

  • individuals, companies and professional firms that provide accounting, administrative, tax or legal consultancy services to Micaela Scapin;
  • parties with whom Micaela Scapin interacts in order to provide its services;
  • parties that provide services related to payment collection (for example bank transfer, credit card);
  • any parties that carry out maintenance activities on network equipment and communication networks;
  • other bodies or authorities to which it is necessary to disclose your personal data for legal reasons or obligations;
  • persons authorised by Micaela Scapin to carry out activities necessary for the provision of services (subject to a legal obligation of confidentiality).

Third parties may have access to personal data through widgets (such as social buttons) or integrations (such as Facebook connect); the list is available on the Cookie Policy page of our site.

The complete list of data processors can be requested by sending an e-mail to info@micaelascapin.it.

WHAT RIGHTS YOU CAN EXERCISE

As a data subject, you may exercise the rights set out in Articles 16 to 22 of EU Regulation 679/16:

Art. 16 – Right to rectification
You have the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Art. 17 – Right to erasure ('right to be forgotten')
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; 4.5.2016 EN Official Journal of the European Union L 119/43
  • you withdraw the consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a), and where there is no other legal ground for the processing;
  • you object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2);
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject;
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for the establishment, exercise or defence of legal claims.

Art. 18 – Right to restriction of processing
You have the right to obtain from the controller restriction of processing where one of the following applies:

  • you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims.
  • you have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3.

You shall be informed by the controller before the restriction of processing is lifted, if you have obtained restriction of processing pursuant to paragraph 1.

Art. 19 – Right to notification regarding rectification or erasure of personal data or restriction of processing
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform you about those recipients if you request it.

Art. 20 – Right to data portability
You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

  • the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b); and
  • the processing is carried out by automated means.

In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17.

The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

Art. 21 – Right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. 4.5.2016 EN Official Journal of the European Union L 119/45 4. At the latest at the time of the first communication with you, the right referred to in paragraphs 1 and 2 shall be explicitly brought to your attention and shall be presented clearly and separately from any other information. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications. Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), you, on grounds relating to your particular situation, have the right to object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Art. 22 – Right to object to automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Paragraph 1 shall not apply if the decision:

  • is necessary for entering into, or the performance of, a contract between you and a controller;
  • is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights, freedoms and legitimate interests;
  • is based on your explicit consent.

In the cases referred to in points (a) and (c) of paragraph 2, the controller shall implement suitable measures to safeguard your rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

Decisions referred to in paragraph 2 shall not be based on special categories of personal data referred to in Article 9(1), unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights, freedoms and legitimate interests are in place.

In this respect, you may access your data in order to:

  • Verify their accuracy
  • Modify them if they become inaccurate
  • Supplement them, including by means of an additional statement
  • Request their erasure
  • Restrict their processing
  • Object to their processing

The controller is obliged to respond without undue delay.

Art. 23 – Minors
The Data Controller's services are not intended for children under the age of 14, and the Data Controller does not knowingly collect personal information about minors. Should information about minors be inadvertently recorded, the Data Controller will delete it promptly upon users' request. Where processing of minors' data is required, specific consent and authorisation will be requested from whoever exercises parental responsibility and/or holds parental authority (as provided for by Art. 8 of Regulation 679/16).

DATA ERASURE

In compliance with the corresponding right of access of the data subject, Micaela Scapin has put in place procedures allowing you to request the erasure of your personal data without undue delay, or the restriction of the processing of the personal data concerning you, for the following reasons:

  • Because the data are no longer necessary for the purposes for which they were collected
  • Because you have withdrawn your consent
  • Because you object to the processing
  • Because the data are processed unlawfully.

You can exercise the above rights by writing to us at the e-mail address info@micaelascapin.it

CHANGES TO THIS PRIVACY POLICY

This privacy policy has been in effect since 24.05.2018 and Micaela Scapin may amend or update its content.

This Policy may change over time. We therefore recommend that you check this Policy regularly and refer to the most up-to-date version.