PRIVACY POLICY – PROCESSING OF PERSONAL DATA

The personal data of the user are used by Sangermano Antonio, owner of the website sangebike-rent.com (VAT: 00785040528, Via del Poggiolo 4 – Torrita di Siena (Siena), Italy), who is the Data Controller, in compliance with the principles of personal data protection established by EU Regulation GDPR 2016/679 and the applicable national legislation.

METHODS AND PURPOSES OF DATA PROCESSING

We inform you that your data will be processed using IT tools for the purpose of managing, processing, and fulfilling requests submitted to the company through the website www.sangebike-rent.com.

LEGAL BASIS

The legal basis for the processing of common data, in accordance with Article 6 of the GDPR Regulation, is consent.
The company processes optional user data based on consent, meaning through the explicit approval of this Privacy Policy and in relation to the methods and purposes described below.

CATEGORIES OF RECIPIENTS

Without prejudice to communications carried out in compliance with legal obligations, all collected and processed data may be communicated exclusively for the purposes mentioned above to the following categories of recipients:

  • Internal data processors;
  • Data Controller.

IT INFRASTRUCTURE

  • Activity Name: Contact management via website
  • IT Infrastructure: PC
  • Infrastructure Type: Internal
  • Location: Registered Office and Operational Headquarters

DATA RETENTION PERIOD

The data retention period is as follows: Data is stored for the strictly necessary time and no longer than required to fulfill the purposes for which it was collected.

DATA SUBJECT’S RIGHTS

In accordance with EU Regulation 679/2016 (GDPR) and applicable national regulations, the data subject may exercise the following rights under the conditions and within the limits set by the current legislation:

  • Request confirmation of the existence of personal data concerning them (Right of Access – Article 15 of Regulation 679/2016);
  • Know the origin of the data;
  • Receive clear and intelligible communication of their data;
  • Obtain information regarding the logic, methods, and purposes of processing;
  • Request the update, rectification, deletion, integration, anonymization, or blocking of data processed in violation of the law, including data that is no longer necessary for the purposes for which it was collected (Right to Rectification and Erasure – Articles 16 and 17 of Regulation 679/2016);
  • Right to restriction of processing and/or to object to the processing of personal data (Article 18 of Regulation 679/2016);
  • Right to data portability (Article 20 of Regulation 679/2016);
  • Right to withdraw consent at any time;
  • In cases where processing is based on consent, receive their data provided to the Data Controller in a machine-readable format and in a format commonly used by an electronic device;
  • Right to lodge a complaint with the Supervisory Authority (Right of Access – Article 15 of Regulation 679/2016).

DATA CONTROLLER AND CONTACT INFORMATION

The Data Controller and responsible party for processing your personal data is: