Global Shipping S.p.A., a Company with legal office at Via Roma 2 – 31020 Lancenigo di Villorba (Treviso), Italy (hereinafter referred to as ‘Controller’), represented by its interim legal representative, hereby informs you in its capacity of Data Controller that your data shall be processed in the manner and for the purposes described as follows, pursuant to Art. 13 of the Regulation (EU) 2016/679 (hereinafter referred to as ‘GDPR’).
The Controller processes personal data, i.e. identification data such as first and last name, tax ID number, date and place of birth, home address, phone number, email address, bank account details, and other payment information (hereinafter also referred to as ‘data’), communicated by you within a business transaction or in order to subscribe to specific services (including signing up for newsletters, filling out contact forms, or requesting a call-back option). Browsing data, i.e. information collected but not associated with identified data subjects, are also processed. These data are used for the sole purpose of obtaining anonymous site traffic statistics and checking the proper functioning of the website.
The personal data communicated shall be processed:
1. To execute any contractual obligations, as well as to comply with any legal obligations which the Controller is subject to. This kind of processing is necessary to fulfil the obligations taken by the Controller and originating from any agreement ongoing between you andGlobal Shipping S.p.A.as well as to comply to the relative statutory obligations.
2. To meet specific requests submitted by filling out the contact formsprovided.
3. For advertising purposes, whichmightinvolve sending out informative and promotional newsletters by email, including commercial communications and/or advertising material about product or services provided by the Controller. The submission of data for the purposes described in clauses 1. and 2. is necessary, otherwise neither the contract can be executed nor the required information can be provided. However, the submission of data and the consent to their processing for the purposes described in clause 3. is to be deemed optional and therefore requires your consent, which may be withdrawn at any time. However, in case you do not give your consent or withdraw it at a later time, the relative service cannot be provided.
The processing of your personal data is carried out by means of the operations described in Art. 4, paragraph 2) GDPR and more precisely: collection, recording, organization, storage, consultation, adaptation, alteration, selection, retrieval, use, restriction, disclosure, erasure and destruction of data. Your personal data are processed in both printed and electronic/digital format.
The Controller shall process the personal data:
(i) For the time required to fulfil the purposes stated above under clauses 1. and 2. of the previous paragraph, without prejudice to the Controller’s need to store data for longer periods in order to establish, exercise or defend a legal claim, or whenever judicial authorities perform their own functions.
(ii) In the case of data submitted for advertising purposes under clause 3., until you submit an opt-out notice.
In any case according to the restrictions and purposes set forth in paragraph 2), for their specific execution and for their relative functional reasons, your personal data may be disclosed not only to the Data Processors and/or Sub-processors appointed (if any) and to individuals acting under the Controller’s, Processors’ and Sub-processors’ authority (i.e. properly trained employees and internal partners). Personal data may also be submitted to public agencies, institutions, and entities to whom the data shall be disclosed in order to fulfil an obligation required by law, regulation or EU legislation or to execute an order from the judicial authority, as well as to any other third parties as may be specifically required by law, or even when the disclosure of data shall become necessary to defend the Controller’s interests before the court. In any case, you may request to be up-to-date with data pertaining to the Processors and the Sub-processors appointed, if any, by submitting a written request to the contact addresses listed in paragraph 7) below.
As Data Subject, you may claim the rights set forth in Articles 15, 16, 17, 18, 20, and 21 of the GDPR, and more precisely the rights to:
a) Access: the Data Subject has the right to obtain from the Data Controller confirmation as to whether personal data concerning him/her are being processed and, where that is the case, access to the personal data and the information concerning the purposes of the processing, the categories of personal data being processed, the recipients or categories of recipients, the retention period (if applicable), the right to rectification, erasure, restriction of processing, object, and lodge a complaint with a supervisory authority;
b) Rectification: the Data Subject has the right to obtain from the Data Controller the rectification of inaccurate personal data concerning him/her without undue delay;
c) Erasure (‘Right to be forgotten’): the Data Subject has the right to obtain from the Data Controller the erasure of personal data concerning him/her without undue delay in the cases provided by Art. 17 GDPR;
d) Restriction of processing: the Data Subject has the right to obtain from the Data Controller restriction of processing personal data concerning him/her when the events set forth in Art. 18 GDPR apply;
e) Data portability: the Data Subject has the right to receive the personal data concerning him/her, which he/she has provided to a Controller, in a structured, commonly used and machine-readable format, as well as the right to transmit those data to another Data Controller without hindrance from the Controller to which the personal data have been originally provided in the cases provided by Art. 20 GDPR;
f) Object: the Data Subject has the right to object at any time to the processing of personal data concerning him/her in the cases provided by Art. 21 GDPR;
g) Withdrawal of consent: the data subject has the right to withdraw his/her consent given to the Controller at any time and the withdrawal of consent shall not affect the lawfulness of the processing based on consent given before its withdrawal;
h) Lodge a complaint with a supervisory authority (namely the Italian Data Protection Authority – ‘Garante della Privacy’)
You may exercise your rights at any time by sending either:
– a registered letter addressed to Global Shipping S.p.A. – Via Roma 2 – 31020 Lancenigo di Villorba (TV), Italy; or
– an email to the following address: firstname.lastname@example.org