INFORMATION FOR THE PROCESSING OF PERSONAL DATA

The company pictaolens.com, in the person of its legal representative, with headquarters in Viale Nino Bixio, 23 - 31100 - Treviso (TV) (hereinafter, "Owner"), as Data Controller, informs you pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the manner and for the following purposes.

1) Object of the Treatment.

The Data Controller processes personal - identification data (eg: name, surname, tax code, date and place of birth, address, telephone number, e-mail address, bank and payment details), hereinafter also only "data", from You may be communicated by virtue of a commercial relationship or to subscribe to specific services (including subscription to newsletters or filling in contact or call-back forms); navigation data: this is information that is not collected to be associated with identified interested parties. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. Due to the total anonymization of the navigation data processed by the Data Controller, the latter are not subject to the rules set out in the GDPR (EU Regulation no. 679/2016).

2) Legal basis and purpose of the processing.

The processing of the personal data provided will take place:
1. to execute any contractual obligations, as well as to fulfill any legal obligations to which the Data Controller is subject. This treatment is necessary to fulfill the obligations assumed by the Data Controller and deriving from the contract that may exist between you and pictaolens.com, as well as to fulfill the consequent legal obligations.
2. for advertising purposes, consisting in sending by e-mail newsletters of an informative and educational nature, containing commercial communications and / or advertising material on products or services offered by the Owner.
The provision of data for the purposes referred to in points 1. is necessary; failing that, it will not be possible to execute the contract or provide the requested information. Instead, the provision of data and the relative consent for the purposes referred to in point 2, requiring your consent, must be considered optional and, therefore, can always be revoked. However, in case of non-expression of your consent or subsequent revocation, it will not be possible to execute the relative service.

3) Processing methods and retention period.

The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, use, limitation, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic / digital processing.
The Data Controller will process personal data:
(i) by reason of point 1. of the previous paragraph, for the time necessary to fulfill the aforementioned purposes, without prejudice to the need of the Data Controller for longer periods, linked to the need to ascertain, exercise or defend a law in court or, whenever the judicial authorities exercise their functions.
(ii) in the case of data provided for advertising purposes (as per point 2), up to the opt-out communication communicated by you.

4) Categories of recipients of personal data.

Always within the limits and with the purposes referred to in paragraph 2), in order to give it specific execution and for functional reasons, your personal data may possibly be communicated, as well as to the managers and / or sub-processors (if appointed) and to subjects acting under the authority of the same or of the Data Controller (duly trained internal employees and collaborators), to public bodies and institutions, to subjects to whom the communication of data must be carried out in compliance with the obligation established by law, by a regulation or by the community legislation or to fulfill an order of the Judicial Authority, as well as to other possible third parties, in the cases expressly provided for by the law, or even if the communication will be necessary for the protection of the Owner in court. In any case, you may request to be updated on the data relating to the managers and sub-managers, possibly appointed, by sending a written request to the addresses referred to in point 7 below.

5) Cookies.

Like many other websites, the pictaolens.com website (pictaolens.com) also uses cookies - if necessary also from third parties - and similar technologies. Please, therefore, read our cookie policy for more details regarding the use of the aforementioned tools on the pictaolens.com website, as well as how to block them.

6) Rights of the interested party.

In your capacity as interested party, you have the rights provided for by art. 15, 16, 17, 18, 20 and 21 of the GDPR and precisely the rights of:
a) access: the interested party has the right to obtain from the Data Controller confirmation that the processing of personal data concerning him or her is in progress and, in this case, obtain access to personal data, information regarding purpose of the processing, the categories of personal data processed, the recipients or categories of recipients, the retention period (if possible), the right of rectification, cancellation, limitation, opposition, complaint to a supervisory authority;
b) rectification: the interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay;
c) cancellation ("right to be forgotten"): the interested party has the right to obtain from the Data Controller the cancellation of data concerning him without undue delay in the cases provided for by art. 17 of the GDPR;
d) limitation of processing: the interested party has the right to obtain from the Data Controller the limitation of the processing of data concerning him when the hypotheses referred to in art. 18 of the GDPR;
e) data portability: the interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a holder and has the right to transmit such data to another holder of the treatment without impediments by the owner to whom he provided them in the cases provided for by art. 20 of the GDPR;
f) opposition: the interested party has the right to object at any time to the processing of personal data concerning him in the cases provided for by art. 21 of the GDPR;
g) revocation: the interested party has the right to revoke the consent given to the Data Controller at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation;
h) lodge a complaint with the supervisory authority (Italian privacy guarantor).

7) How to exercise rights.

You can exercise your rights at any time by sending:
- a registered mail to pictaolens.com, with headquarters in Viale Nino Bixio, 23 - 31100 - Treviso (TV);
• an e-mail to the address: info@pictaolens.com

8) notes.

It should be noted that this document, published at /en/privacy-policy, constitutes the "Privacy Policy" of this site which will be subject to updates.