Privacy Policy

Information pursuant to Article 13, GDPR
This information, pursuant to Article 13, GDPR (in short, ‘Information’), is provided by NOVATEST s.r.l., with registered office in Via Albertini, 36 – 60131 Ancona (AN) – IT, as Data Controller. The data collected is processed in accordance with the principles of fairness, lawfulness, transparency and protection of your privacy and your rights.

a) Identità e dati di contatto del Titolare
NOVATEST s.r.l.
Via Albertini, 36
60131 Ancona (AN) – IT
P.IVA: 02475340424
C.F.:02475340424
info@novatest.it

b) Data Protection Officer (DPO)
Data Protection Officer
Via Albertini, 36 – 60131 Ancona (AN)
info@novatest.it

c) Purpose of the processing for which the personal data are intended and related legal basis
Your personal data will be processed:

• without your consent (Article 6, letters b, c, f, GDPR), for the following purposes:
  • to fulfil pre-contractual and contractual obligations arising from the conferral of a professional assignment/provision of services,
  • to comply with the provisions of laws and regulations (national or EU), or to execute an order from judicial authorities or supervisory bodies to which the Data Controller is subject,
  • to exercise the rights of the Data Controller, in particular the right to defence in court;
• with your consent (Article 7, GDPR), for the following purposes:
  • organisation of events, meetings, conferences and seminars, including those aimed at professional training,
  • various types of marketing activities, including the promotion of professional services, the distribution of information and promotional material, the sending of newsletters and publications, invitations to participate in events,
  • management of surveys and questionnaires, including those relating to customer satisfaction.

The provision of data for the purposes referred to in section (i) above is mandatory. Failure to provide data and/or any express refusal to consent to processing will make it impossible for the Data Controller to perform the task assigned or may result in a breach of requests from the competent authorities. The provision of data for the purposes referred to in section (ii) above is optional, with the consequence that you may decide not to give your consent or to withdraw it at any time.

d) Categories of personal data processed
Within the scope of the purposes of processing highlighted in paragraph (c) above, only personal data relating to, for example, name and surname, tax code, VAT number, residence, domicile, place of work, email or certified email address, telephone and fax number, employer, role and/or position within the company, etc. will be processed.

e) Categories of recipients of personal data
For the purposes referred to in paragraph (c), section (i) above, the personal data you provide may be made accessible:

• employees and collaborators of the Data Controller, in their capacity as persons authorised to process data (or so-called ‘data processors’),
• third parties who perform outsourced activities on behalf of the Data Controller, in their capacity as data processors,
• judicial or supervisory authorities, administrations, public bodies and organisations (national and foreign).

If you give your consent to the use of your personal data for the purposes referred to in paragraph (c), section (ii) above, such data may be made accessible to the subjects indicated in points (1), (2) and (3) above, as well as, where applicable and always subject to consent

f) Storage and transfer of personal data abroad
Personal data is managed and stored in the cloud and on servers located within the European Union owned and/or available to the Data Controller and/or third-party companies duly appointed as data processors. The transfer of data abroad to non-EU countries is not envisaged or carried out. Your personal data will not be disclosed.

g) Period of retention of personal data
Personal data collected for the purposes indicated in paragraph (c), section (i) above will be processed and stored for the entire duration of any professional relationship established. From the date of termination of such relationship, for any reason or cause, the data will be stored for the duration of the limitation periods applicable by law. Personal data collected for the purposes indicated in paragraph (c), section (ii) above will be processed and stored for the time necessary to fulfil those purposes and in any case for no longer than 2 years from the date on which we receive your consent.

h) Rights that can be exercised
In accordance with the provisions of Chapter III, Section I, GDPR, you may exercise the rights indicated therein and in particular:

• Right of access – Obtain confirmation as to whether or not personal data concerning you are being processed and, if so, receive information regarding, among other things: the purposes of the processing, the categories of personal data processed and the storage period, the recipients to whom they may be disclosed (Article 15, GDPR),
• Right to rectification – Obtain, without undue delay, the rectification of inaccurate personal data concerning you and the completion of incomplete personal data (Article 16, GDPR),
• Right to erasure – Obtain, without undue delay, the erasure of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR),
• Right to restriction – Obtain from the Joint Controllers the restriction of processing, in the cases provided for by the GDPR (Article 18, GDPR);
• Right to portability – Receive, in a structured, commonly used and machine-readable format, personal data concerning you provided to the Joint Controllers and obtain the transmission of such data to another controller without hindrance, in the cases provided for by the GDPR (Article 20, GDPR);
• Right to object – Object to the processing of personal data concerning you, unless there are legitimate reasons for the Joint Controllers to continue processing (Article 21, GDPR)
• Right to lodge a complaint with the supervisory authority – Lodge a complaint with the Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).

You may exercise these rights by simply sending a request by e-mail to the certified e-mail address of the Data Protection Officer, indicated above.

i) Processing methods
Your personal data is processed using the methods indicated in Article 4, no. 2) of the GDPR – carried out with or without the aid of IT systems – and specifically: collection, recording, organisation, structuring, updating, storage, adaptation or alteration, retrieval and analysis, consultation, use, communication by transmission, comparison, interconnection, restriction, erasure or destruction of data. In any case, the logical and physical security of the data and, in general, the confidentiality of the personal data processed will be guaranteed by implementing all the necessary technical and organisational measures to ensure their security.