Data controller and reference legislation
The data controller is Anthilla Srl based in Corso della Vittoria 147, Caronno Pertusella, Varese (Italy), hereinafter referred to as “Anthilla”. Anthilla processes personal data in compliance with the European legislation on the Protection of Personal Data ( hereinafter “GDPR”). Pursuant to art. 12, 13 and 14 of the GDPR, the Data Controller provides the present information on the processing of personal data carried out by it.
This information applies to Anthilla and to its site and personal data relating to individuals. Anthilla can not be and is not in any way responsible for the processing of independent third parties and third party sites accessible from any links on the site of Anthilla. Given that Anthilla is a “Business-to-Business” (B2B) company:
- as Data Controller, Anthilla systematically and mainly processes data of legal or public persons,
- European legislation (GDPR) applies to personal data of natural persons only,
any personal data will be processed by Anthilla, electronically or manually, in full compliance with the GDPR and subjected to appropriate security measures as required by law and according to the best industry standards (ISO27002, ISO 29134, NIST 800-123) . Data and information of legal entities are however treated in confidence and subjected to the same security measures and adequacy to the same standards.
Purposes of the treatments without express consentAll personal information that you provide to us without express consent, via web or email or other, are optional and the result of your free choice. This information will be processed solely by Anthilla for the purposes of: (a) responding to your requests, (b) fulfilling our contractual obligations, (c) pursuing the legitimate interests of the Controller [example: defending itself in a registered office], (d) fulfill law and tax obligations.
Purposes of the treatments with express consent
Only after expressing the consent of the interested party, Anthilla will process personal for promotional and commercial purposes: for example to inform you of new offers of products or services.
Period of retention of personal data
Anthilla will keep personal data for the period necessary and sufficient for the purposes stated or foreseen by law and tax regulations or until the person requests the cancellation (see also Rights of the interested party).
Rights of the interested party
The natural person to whom the data refers (“concerned”), has the following rights:
- revoke your consent at any time *
- to propose a complaint to the Supervisory Authority (Guarantor),
- ask the Data Controller to access the data in order to check its accuracy and, if necessary, request its correction;
- ask the Owner for the portability of their data in intelligible format (.csv),
- ask the Data Controller to cancel ** their personal data
* this does not affect the lawfulness of the processing before revocation
** the cancellation request will be satisfied if there are no other legal bases that oblige the data to be maintained: for example, data necessary for the execution of our contractual or regulatory obligations.
Categories of personal data
Unless otherwise provided freely by the interested party, Anthilla processes only “common” personal data. The systematic and continuous treatment of “particular data” (ie: sensitive, medical, judicial, etc.) is excluded.
Sources of personal data
Anthilla may receive your personal data from you for your free choice (via email, website, telephone, fax, etc.) or from public sources (public records, social networks, etc.). Whatever the source, Anthilla will not process the personal data of individuals for promotional or commercial purposes without their explicit consent.
Contacts / Questions
Contact the Data Controller to exercise your rights or request clarification.