The Data Controller of this website is Inventa Nuove Soluzioni Tecnologiche Srl - via G. Carli, 1 - 41043 Formigine MO - info@inventagri.com

Object of Data Processing
The Controller processes personal, identifying data (e.g. first name, surname, company name, address, telephone number, e-mail, bank and payment references - hereinafter, “personal data” or also “data”) communicated by you in connection with the conclusion of contracts for the Controller's services.

Purpose of Processing
Your personal data are processed without your express consent (Art. 24 lett. a), b), c) Privacy Code and Art. 6 lett. b), e) GDPR), for the following Service Purposes:
- conclude contracts for the Controller's services;
- fulfil pre-contractual, contractual and tax obligations arising from existing relations with you;
- comply with obligations laid down by law, regulation, EU legislation or an order of the Authority (such as anti-money laundering);
- exercise the rights of the Controller, such as the right of defence in court.

Modalities of Treatment
The processing of your personal data is carried out by means of the operations indicated in Art. 4 Privacy Code and Art. 4 no. 2) GDPR and precisely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subject to both paper and electronic and/or automated processing. The Controller will process your personal data for the time necessary to fulfil the above-mentioned purposes and in any case for no longer than 5 years from the termination of the relationship for the Service Purposes.

Data Access
Your data may be made accessible for the above-mentioned purposes:
- to employees and collaborators of the Controller, in their capacity as persons in charge and/or internal data processors and/or system administrators;
- to third-party companies or other entities (by way of example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that perform outsourcing activities on behalf of the Controller, in their capacity as external data processors.

Communications
Without the need for your express consent (pursuant to Art. 24 letters a), b) and d) of the Privacy Code and Art. 6 letters b) and c) of the GDPR), the Data Controller may communicate your data for the above-mentioned purposes to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom communication is obligatory by law for the fulfilment of the above-mentioned purposes. These subjects will process the data in their capacity as autonomous data controllers. Your data will not be disseminated.

Data Security
The data are stored and controlled by adopting appropriate preventive security measures, aimed at minimising the risks of loss and destruction, unauthorised access, unauthorised processing and processing that is not in accordance with the purposes for which the data are processed. The handling and storage of personal data will take place within the territory of the European Union.

Rights of the Data Subject
As a data subject, you have the right under Article 15 GDPR, namely the rights to:
i. obtain confirmation of the existence or otherwise of personal data relating to you, even if not yet recorded, and their communication in intelligible form; ii. obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identity of the data controller, data processors and the representative designated pursuant to Art. 5, paragraph 2 of the Privacy Code and Art. 3, paragraph 1 of the GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as designated representative in the territory of the State, managers or appointees; iii. obtain: a) the updating, rectification or integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected; iv. oppose, in whole or in part, for legitimate reasons, the processing of your personal data, even if pertinent to the purpose of collection.
Where applicable, you also have the rights under Articles 16-21 GDPR (Right to rectification, Right to be forgotten, Right to restriction of processing, Right to data portability, Right to object), as well as the right to complain to the Data Protection Authority.

Modalities of Exercise of Rights
You may exercise your above rights at any time by sending a communication:

by e-mail, at: info@inventagri.com
or by post A.R., to: Inventa Nuove Soluzioni Tecnologiche Srl - via G. Carli, 1 - 41043 Formigine MO