Privacy

Information to the data subject regarding the processing of personal data pursuant to Article 13 of Regulation (EU) 679/2016. Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on data protection (hereinafter referred to as the 'Regulation' or 'GDPR'), in relation to the processing of your personal data, the undersigned AB Logistic SRL (hereinafter also referred to as the 'Data Controller'), whose identity and contact details are provided below, informs you of the following.

Identity and contact details of the Data Controller:

The Data Controller pursuant to Articles 4 and 24 of the Regulation is AB Logistic Srl Via Delle Brughiere , 4 - 20020 Bienate di Magnago (MI) P.IVA/C.F. 08433150961, ablogisticsrl@legalmail.it . You may contact the Data Controller by writing to the address indicated above or by sending an email to the email address provided above.

Purposes of the processing for which the data are intended and legal basis of the processing:

The personal data provided directly by you or otherwise collected by the undersigned Data Controller will be processed exclusively for the following purposes: a) purposes related to the execution of the services provided (responding to requests for information and/or contact received via chat, etc.); b) purposes related to compliance with a legal obligation to which the Data Controller is subject. The legal basis for the processing of personal data for the purposes referred to in point a) is Article 6, paragraph 1, letter b) of the Regulation ('processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract'). The legal basis for the processing of personal data for the purposes referred to in point b) is compliance with a legal obligation to which the Data Controller is subject pursuant to Article 6, paragraph 1, letter c) of the GDPR ('processing is necessary for compliance with a legal obligation to which the controller is subject').

Methods of data processing:

The processing of your personal data may be carried out with the aid of electronic or automated means, using methods and procedures strictly necessary to achieve the purposes described above. In relation to the aforementioned purposes, the processing of your personal data will be carried out using manual, IT, and telematic tools solely for the achievement of the purposes themselves and, in any case, in a manner that ensures their security and confidentiality. The processing will be carried out using systems designed to store, manage, and transmit the data, with logic strictly related to the purposes themselves, based on the data in our possession and with your commitment to promptly communicate any corrections, additions, and/or updates.

Possible recipients and categories of recipients of personal data:

Personal data may be communicated for the purposes specified above to subjects who perform activities necessary for the provision of the services offered by the Website (for example, analysis of the functioning of the Website itself) who will process the data as data processors (Article 28 of the Regulation) and/or as authorized persons acting under the authority of the Data Controller and the Data Processor (Article 29 of the Regulation) or as subjects expressly designated to process the data in accordance with the GDPR and the national legislation implementing the provisions of the GDPR (Legislative Decree No. 101/2018), such as, for example, IT and/or storage service providers or other technical/organizational service providers, as well as employees and collaborators engaged by the Data Controller.

Transfer of personal data to a third country or an international organization:

No personal data of the User will be transferred to a third country outside the European Union or to International Organizations.

Retention period of personal data:

The personal data subject to processing will be retained in compliance with Article 5, paragraph 1, letter e) of the Regulation, in a form that allows the identification of the data subjects for a period not exceeding the achievement of the purposes referred to in point 2 for which the personal data are processed or for the time strictly necessary to comply with legal obligations. At the end of the retention period, the data provided by you will be deleted or anonymized.

Rights of the data subject:

The right to access your personal data; the right to rectification or erasure of the data or restriction of processing concerning you; the right to object to processing; the right to data portability under the terms of Article 20 cited; where the processing is based on Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), cited, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Without prejudice to any other administrative or judicial remedy, the data subject who considers that the processing concerning them violates the GDPR has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement pursuant to Article 77 cited (the Italian supervisory authority is the Garante per la protezione dei dati personali). To exercise the above rights, the data subject may contact the Data Controller at the contact details indicated in point 1 of this notice. If the communication of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and if the data subject is obliged to provide the personal data as well as the possible consequences of failing to provide such data. The communication of your data is mandatory in order to proceed with responding to your request for information and/or contact received by the Data Controller. Failure to provide personal data will result in the Data Controller being unable to respond to your request for information and/or contact.

Existence of automated decision-making, including profiling:

Pursuant to Article 13, paragraph 2, letter f) of the GDPR, we inform you that the personal data collected will not be subject to any automated decision-making process, including profiling as per Article 22, paragraphs 1 and 4 of the Regulation.

Processing of personal data for a purpose other than that for which they were collected:

If the Data Controller intends to further process personal data for a purpose other than that for which they were collected, prior to such further processing, the Data Controller will provide the data subject with information regarding this different purpose and any other relevant information as per Article 13, paragraph 2 of the Regulation.

Updates:

This privacy policy may be subject to changes and/or additions following any subsequent regulatory changes and/or additions, updates, or the provision of new services, or due to technological innovations.