The Liguriaverde, in compliance with the provisions of the law in force, undertakes to process the personal data provided by users with the utmost respect and responsibility, limiting the acquired data to a minimum.

In the privacy policy, which Il Verde Mondo has included on its website, it already states the purposes of data collection, the methods and times of use, basing its activity on maximum transparency.

In addition to the privacy policy, which also provides consent to the processing of data for the purposes indicated, where not already provided for by law, Il Verde Mondo has also included the possibility of providing consent for advertising, promotion and approval activities.

In particular, it is believed here to highlight the rights that they can exercise to users.

Rights of the interested party

The interested party is allowed the right of access to the data collected (Article 15 GDPR) [1] that concern him, in an easy way, in order to know and obtain communications in particular with regard to the purposes and methods of treatment, but not only. In order to exercise this right, Il Verde Mondo requires that information or processing activities be specified in relation to which the user needs to be aware.

Furthermore, in relation to such processed data, if the interested party deems it to be inaccurate, he may request its correction or integration (Article 16 of the GDPR) [2] , also by providing a supplementary declaration.

The interested party also has the right to impose a restriction on the processing of data on the data controller (Article 18 of the GDPR) [3] , for example when the interested party disputes the accuracy of the same and for as long as necessary for verification; when the processing is unlawful; when the data, even if no longer processed, are necessary for the purposes of judicial protection; when balancing rights.

The interested party must also be guaranteed the right to be forgotten (Article 17 of the GDPR) [4] , ie the right to obtain the cancellation of their personal data by the data controller, who, within the limits of their possibilities, he will have to take care to have such data deleted also to the subjects to whom he has communicated the data.

The interested party also has the right to oppose the processing of personal data [5] : in the event that the processing takes place for purposes of public interest or legitimate interest; or in cases of processing for marketing purposes; finally, the interested party can oppose the use of the data, when this responds to scientific or historical research purposes.

Right to data portability .

This right allows interested parties to receive, from Il Verde Mondo, ” personal data concerning him provided to a data controller ” so that he can transmit them to another data controller (for example, another company).

The right concerns the data “provided” by the interested party. Hence, it is limited to personal data only  , it does not apply to anonymous data, but instead applies to pseudo-anonymous data.

Interested parties have the right to obtain personal data in a structured format, commonly used and readable by an automatic device and, where possible, to request their direct transmission to another owner.

Exercise of rights

Once the rights of the interested party have been highlighted, Il Verde Mondo can be contacted by email by users at Hello@liguriaverde.com, if they intend to exercise one of the faculties seen above.

The deadline for replying is 1 month for all rights. This term can be extended to 3 months in particularly complex cases. In this case, Il Verde Mondo will still notify the interested party within the month. 
The exercise of the rights is in principle free of charge . However, Il Verde Mondo can evaluate if the answer is complex to the point of having to ask for a contributionto the interested party, and establish the amount, but only if the requests are manifestly unfounded or excessive or repetitive. The answer will be provided in writing, to the email address provided in the request. Il Verde Mondo may request information from the interested party in order to identify him and the interested party is obliged to provide such information, as well as proof of his identity. 

 

Transfer of data to non-EU countries

 This site may share some of the data collected with services located outside the European Union area (in particular with Google, Facebook and Microsoft (LinkedIn). The transfer is authorized based on specific decisions of the European Union and the Guarantor for the protection of personal data , in particular the decision 1250/2016 ( Privacy Shield  – it is possible to view the information page on the website of the Italian Guarantor ), for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield . 

 

Security measures

This site processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as suppliers of third party technical services, postal couriers) may have access to the data. hosting providers, IT companies, communication agencies). 

---

[1] Right of access by the data subject (C63, C64)

1. The interested party has the right to obtain from the data controller confirmation that it is or

the processing of personal data concerning him is in progress and, in this case, to obtain

access to personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data in question;

c) the recipients or categories of recipients to whom the personal data have been or will be

communicated, in particular if addressed to third countries or international organizations;

d) when possible, the retention period of the personal data envisaged or, if not

it is possible, the criteria used to determine this period;

e) the existence of the right of the interested party to ask the data controller to rectify it o

the deletion of personal data or the limitation of the processing of personal data

concerning him or to oppose their treatment;

f) the right to lodge a complaint with a supervisory authority;

g) if the data are not collected from the interested party, all available information

on their origin;

h) the existence of an automated decision-making process, including the profiling referred to

Article 22, paragraphs 1 and 4, and, at least in such cases, meaningful information on the logic

used, as well as the importance and expected consequences of such processing for the data subject.

2. If personal data are transferred to a third country or to an international organization,

the interested party has the right to be informed of the existence of adequate guarantees to

pursuant to Article 46 relating to the transfer.

3. The data controller provides a copy of the personal data being processed.

In case of further copies requested by the interested party, the data controller may charge

a reasonable fee based on administrative costs. If the interested party presents

the request by electronic means, and unless otherwise indicated by the interested party, the

information is provided in a commonly used electronic format.

4. The right to obtain a copy referred to in paragraph 3 must not affect the rights and rights

freedom of others.

[2] Right of rectification (C65)

The interested party has the right to obtain from the data controller the correction of personal data

inaccuracies concerning him without undue delay. Taking into account the purposes of the

processing, the interested party has the right to obtain the integration of incomplete personal data,

also by providing a supplementary declaration.

 

[3] Right to restriction of processing (C67)

1. The interested party has the right to obtain from the data controller the limitation of the processing

when one of the following hypotheses occurs:

a) the interested party disputes the accuracy of the personal data, for the period necessary for the owner

of the processing to verify the accuracy of such personal data;

b) the processing is unlawful and the interested party opposes the cancellation of personal data e

calls instead for its use to be limited;

c) although the data controller no longer needs it for processing purposes, i

personal data are necessary for the interested party to ascertain, exercise or defend

a right in court;

d) the interested party has opposed the processing pursuant to article 21, paragraph 1, pending

verification of the possible prevalence of the legitimate reasons of the data controller

than those of the interested party.

2. If the processing is restricted in accordance with paragraph 1, such personal data are processed,

except for storage, only with the consent of the interested party or to ascertain

GENERAL DATA PROTECTION REGULATION 99

CHAPTER III – Rights of the interested party Art. 18

to, the exercise or defense of a right in court or to protect the rights of

another natural or legal person or for reasons of significant public interest of the Union

or of a Member State.

3. The interested party who has obtained the limitation of processing pursuant to paragraph 1 is

informed by the data controller before said limitation is revoked.

[4] Article 17

Right to erasure (“right to be forgotten”) (C65, C66)

1. The interested party has the right to obtain from the data controller the cancellation of personal data

that concern him without undue delay and the data controller is obliged to

delete personal data without undue delay, if one of the following reasons exists:

a) the personal data are no longer necessary with respect to the purposes for which they were collected

or otherwise processed;

b) the interested party revokes the consent on which the processing is based in accordance with the article

6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if nothing else exists

legal basis for the processing;

c) the interested party opposes the processing pursuant to article 21, paragraph 1, and does not exist

any legitimate overriding reason to proceed with the processing, or opposes

to the processing pursuant to article 21, paragraph 2;

d) the personal data have been unlawfully processed;

e) personal data must be deleted to fulfill a legal obligation under the

law of the Union or of the Member State to which the data controller is subject;

f) the personal data have been collected in relation to the offer of information society services

referred to in Article 8 (1).

2. The data controller, if he has made personal data public and is obliged, pursuant to

paragraph 1, to cancel them, taking into account the available technology and implementation costs

adopts reasonable measures, including technical ones, to inform the data controllers

who are processing the personal data of the interested party’s request to delete any

link, copy or reproduction of your personal data.

3. Paragraphs 1 and 2 do not apply to the extent that processing is necessary:

a) to exercise the right to freedom of expression and information;

b) for the fulfillment of a legal obligation that requires the treatment required by law

of the Union or of the Member State to which the data controller is subject or for the

fulfillment of a task carried out in the public interest or in the exercise of public

powers vested in the data controller;

c) for reasons of public interest in the public health sector in accordance with Article

9, paragraph 2, letters h) and i), and of Article 9, paragraph 3;

d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes

in accordance with Article 89 (1), insofar as the right referred to

in paragraph 1 risks making the achievement impossible or seriously jeopardizing the achievement

the objectives of this treatment; or

e) for the assessment, exercise or defense of a right in court.

[5] Right to object (C69, C70)

1. The interested party has the right to object at any time, for reasons connected with his

particular situation, to the processing of personal data concerning him pursuant to article

6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.

The data controller refrains from further processing personal data except that

he demonstrates the existence of legitimate binding reasons for proceeding with the treatment that prevail

on the interests, rights and freedoms of the interested party or for the assessment,

the exercise or defense of a right in court.

2. If personal data are processed for direct marketing purposes, the interested party has

the right to object at any time to the processing of personal data concerning him

carried out for these purposes, including profiling to the extent that it is connected

to such direct marketing.

3. If the data subject objects to the processing for direct marketing purposes, the data

personal data are no longer processed for these purposes.

4. The right referred to in paragraphs 1 and 2 is explicitly brought to the attention of the interested party

and is presented clearly and separately from any other information at the latest

at the time of the first communication with the interested party.

GENERAL DATA PROTECTION REGULATION 101

CHAPTER III – Rights of the interested party Art. 21

5. In the context of the use of information society services and without prejudice to the Directive

2002/58 / EC, the interested party can exercise his right to object by means

automated systems that use technical specifications.

6. If personal data are processed for scientific or historical research purposes or for statistical purposes

pursuant to Article 89 (1), the interested party, for reasons connected with his situation

in particular, has the right to object to the processing of personal data concerning him,

unless the processing is necessary for the performance of a task of public interest.