Privacy Policy

I. Owner of the treatment

Owner of the treatment is SKIAREA VALCHIAVENNA S.p.A., Via per Motta, 6 – 23024 Madesimo (SO)

II. Data Processor

Responsible for the treatment of SKIAREA VALCHIAVENNA S.p.A. is the Legal Representative pro tempore.

III. Purpose of data processing

Personal data is processed as part of the normal activity of issuing and managing payments and collections (in addition to related and instrumental activities) and for the following purposes:

A. purposes strictly connected and instrumental to the management of relations with the data subject (e.g. acquisition of information prior to the conclusion of contracts, execution of operations on the basis of the obligations arising from the contract concluded with the data subject, etc.);

B. purposes related to obligations arising from laws, regulations and Community legislation, as well as provisions issued by authorities legitimized by law and by supervisory and control bodies;

IV. Methods of data processing

In relation to the purposes indicated, the processing of personal data, in compliance with the law and confidentiality obligations, is carried out by manual processing, computer and telematic tools, with logic strictly related to the purposes and, in any case, so as to ensure the security and confidentiality of data (even in the case of use of remote communication techniques).

V. Categories of subjects to whom the data may be communicated

A. For the performance of part of its activities SKIAREA VALCHIAVENNA also turns to external subjects. To this end, the personal data of the interested party may be communicated to the categories of subjects, including foreign ones, indicated below:
– subjects who intervene in the performance of work necessary for the execution of existing relationships with the person concerned;
– subjects who intervene for the control and optimization of SKIAREA VALCHIAVENNA S.p.A. activities. (e.g. auditing firms and consultants), for the control of financial risk and fraud, or for the recovery of receivables.
It follows that, without the consent of the interested party for the communication of its personal data to the aforementioned categories of third parties and for the current processing carried out by the same, SKIAREA VALCHIAVENNA S.p.A. will not be able to implement or maintain the existing relationship with the interested party.
Waiting for this consent, the completion, by the Customer, of executive acts of the existing relationship with SKIAREA VALCHIAVENNA S.p.A. or, in any case, the failure to perform acts or facts aimed at the dissolution of the relationship, must be understood as manifestations of the Customer’s consent to the execution of the relevant processing and communication of personal data, for purposes related and instrumental to the management of such relationships.

B. The subjects who carry out the types of activities mentioned above, to whom the data may be communicated, will use the data in full autonomy and as “owner”, in accordance with EU Regulation 2016/679, being extraneous to the original processing carried out at SKIAREA VALCHIAVENNA S.p.A. Naturally, the procedures aimed at ensuring the confidentiality of personal data remain unchanged. A list of these external subjects is available at SKIAREA VALCHIAVENNA S.p.A. headquarters.

VI Rights of the data subject under Legislative Decree 196/2003 Article 7 and Art. 15 GDPR – Right of access to personal data and other rights

The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and their communication in an intelligible form.
The interested party has the right to obtain the indication:

• the origin of the personal data;
• the purposes and methods of processing;
• the logic applied in case of processing carried out with the help of electronic instruments;
• the identity of the owner, manager and the representative designated under Article 5, paragraph 2;
• the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents.

The interested party has the right to obtain:

• updating, rectification or, when interested, integration of data;
• the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
• certification that the operations in letters a) and b) have been notified, also as regards their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate to the protected right.

The interested party has the right to object, in whole or in part:

• for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
• to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.