The internet site www.amdlcircle.com is owned by “architetto Michele De Lucchi s.r.l. – aMDL s.r.l.” (VAT 09029600153), in the person of the pro tem legal representative.
All browsing by users of the aforementioned sites and of all the activities which users may pursue (such as, to mention merely by way of example: subscription to the newsletter, online commercial transactions, etc….) shall be subject to EU Regulation 2016/679, 27 April 2016, relating to the protection of natural persons with regard to the personal data handling, as well as to the free circulation of any such data, which regulation came into effect on 25 May 2018, as well as to the D.Igs (legislative decree: Order of Council) no. 196, 30 June 2003 (“Code pertaining to the protection of personal data”), the latter meaning to the extent to which it is compatible with EU regulations.
The processing of personal data communicated by visitors to aMDL s.r.l. through these internet sites shall be based on the principles of honesty, lawfulness and transparency, protection of privacy and of the rights of every user, and on the other principles set forth under art. 5 of EU Regulation 2016/679 (minimization of data; exactitude; limitation of conservation; integrity and liability).
The storage of all such data hinges solely upon those common data affected by their management.The person concerned is therefore requested not to grant “sensitive” personal data (liable to reveal racial and ethnic origins, religious or philosophical convictions, political opinions, membership of parties and trade unions, besides personal data liable to reveal that person’s state of health or sexual life) and/or “judicial” data. Should the applicant deem it indispensable to provide any such “sensitive” data, his or her curriculum shall be sent by ordinary postage to the data controller, aMDL s.r.l. operating at Milano 20121 Via Varese 15, enclosing his or her consent to the handling of any such data, duly dated and undersigned. All such data shall be stored in our databases at our Human Resources Office, for a period of time not exceeding 6 months, subject to the applicant’s faculty to withdraw his or her application for employment, with the consequent cancellation of their data from our archives and the impossibility of any further consideration of that application.
the user’s personal data shall be known to the owner and to the data controller, as well as to other parties expressly appointed by the said owner and controller (e.g. staff / collaborators / assistant to the owner), and finally also to the Provider, who shall keep them in the electronic “data log” cd register. Any such personal data may be communicated, by the owner to his own office as aforementioned, as well as to specialist businesses and agencies, including those headquartered in other countries, i.e. outside the EU, which may be providing the said owner with processing services or activities instrumental to that of the owner.
regarding data relating to traffic concerning users of the site and processed by the Provider, in accordance with art. 123 of EU Regulation cit., any such data shall be cancelled or rendered anonymous when no longer necessary to the purposes of the transmission of the electronic communication, subject to the exceptions set forth under subsections 2 and 3 of the said article (i.e. – subsection 2: handling may apply to data relating to traffic strictly necessary for the purposes of invoicing to the contracting party, for the purpose of documentation, in the event of disputation of an invoice or claim to payment, for a period, as customary, not in excess of six months; subsection 3: the aforementioned data may in addition, be handled for a period of time necessary for the purposes of selling electronic communication services or for the provision of value added services, after the user’s - revocable - consent).
the interested party has the right to ask the data controller for access to his or her controlled data, and to rectify or cancel those data, or for limitation of their handling, or to oppose their handling, besides the right to the portability of any such data, in accordance with arts. 15 – 22 of EU Regulation cit. and of art. 7 Privacy Code (insofar as compatible with European regulations), as set forth in due course. To exercise the aforesaid rights, the user must send an email to: email@example.com. . Right to revocation of consent: whenever, as in the case in point, the data handling is based on consent, the right exists to revoke that consent at any time, without compromising the lawfulness of that revocation, based on the consent granted prior to any such revocation;
. The right to file a complaint to the controlling Authority; . The communication of personal data is a necessary requisite to enable the user to access certain functions of the site, such as, for example, the online purchase of products presented and available in the e-catalogue, and subscription to the newsletter. . The sites pertaining to the company aMDL s.r.l., viz: www.amdlcircle.com
The personal data supplied by users are used for the sole purpose of circulating the newsletter and shall not be communicated to third parties. Refusal to supply such data entails the impossibility of obtaining the newsletter service.
The data collected are processed with IT devices.
The data controller is aMDL s.r.l. (VAT 09029600153), in the person of the pro tem legal representative, operating in via Varese 15, Milan. The processing of data connected to the newsletter service takes place at the aforesaid headquarters of aMDL s.r.l., under the supervision of staff allocated to the brand name “Amdl Circle”.
The person responsible for the data collected is Mr Pico De Lucchi, domiciled in Milan, c/o aMDL s.r.l., in Milano 20121 via Varese 15.
The parties to whom the personal data refer have the right, at any time, to obtain confirmation of the existence or non-existence of said data, and to be informed of their contents and origin, to ascertain their exactness or to request their integration or updating, or rectification (article 7 of the Code governing the protection of personal data and arts. 15 – 22 of EU Regulation 2016/679). In accordance with the said regulations, the user has the right to request the cancellation, conversion into anonymous form or the blockage of any data processed in violation of the law, as well as to oppose their handling in any case, for legitimate reasons.
Requests should be made: -via email, to the addresses: firstname.lastname@example.org, and to email@example.com -Tel: +39026378681
Listed below are the regulations relating to the rights which anybody who has supplied their personal data to aMDL s.r.l. and authorised their processing for a given purpose, has the faculty, at any time, to exercise, in accordance with art. 7 of D.Lgs (order of council) 196/03 – Privacy Code and arts. 15- 22 of EU Regulations 2016/679, by sending an email to: firstname.lastname@example.org.
Article 7 D.lgs (order of council) 196/2003 – Right of access to personal data and other rights:
1.The interested party has the right to obtain from the data controller confirmation as to whether or not a processing of their personal data is in progress, and in which case, to obtain access to said personal data and to the following information: a)the purposes of the processing; b)the categories of personal data in question; c)he recipients or categories thereof to whom the personal data have been or will be communicated, in particular if the recipients reside in other countries or among international organisations; d)when possible, the scheduled period of conservation of the personal data or, if that is not possible, the criteria adopted to establish that period; e)the existence of the interested party’s right to ask the data controller for the rectification or cancellation of said personal data, or for limitation of their processing or to oppose their handling; f)the right to file a complaint to the controlling authority; g)whenever the data are not stored at the interested party’s address, all available information about their origin; h)the existence of an automated decision-making process, including profiling as stated under article 22, paragraphs 1 and 4 and, at least in such instances, meaningful information regarding the logic adopted, as well as the importance and consequences attached to that data control in respect to the interested party; 2.Should the said personal data be transferred to a different country or to an international organisation, the interested party shall have the right to be informed of the existence of proper guarantees, in accordance with article 46 relative to any such transfer. 3.The data controller shall supply a copy of the personal data being handled. In the event of further copies requested by the interested party, the data controller can debit that party for a reasonable contribution to the expenses incurred based on administrative costs. If the interested party files his or her request by an electronic device, and subject to any indication to the contrary from the interested party, the information shall be provided in an electronic format in everyday use. 4.The right to obtain a copy as per paragraph 3 shall not jeopardise other people’s rights and freedoms.
The interested party has the right to obtain from the data controller the rectification of any inexact personal data referring to that party, without unjustified delay. Considering the purposes of said handling, the interested party has the right to obtain the integration of any incomplete personal data, including by supplying an integrative declaration.
1.The interested party has the right to obtain from the data controller the cancellation of personal data, without unjustified delay, and the data controller shall undertake to cancel any such personal data, without unjustified delay, if any one of the following motives subsists:
a)the personal data are no longer necessary to the purposes for which they were collected or otherwise handled;
b)the interested party revokes the consent upon which the handling is based in compliance with article 6, paragraph 1, letter a), or with article 9, paragraph 2, letter a), and if no other legal foundation for the handling subsists;
c)the interested party opposes the handling in accordance with article 21, paragraph 1, and no prevalent legitimate reason to proceed with the handling subsists, or the party opposes the handling in accordance with article 21, paragraph 2;
d)the personal data are illicitly processed;
e)the personal data must be cancelled to fulfil a legal obligation contemplated by the right of the Union or of the member State to which the controller is a party;
f)the personal data have been collected in relation to the offer of services by the IT company specified under article 8, paragraph 1.
2.The controller, if he or she has made personal data public and is obliged, in accordance with paragraph 1, to cancel them, taking into account the technology available and the costs of implementation, adopts reasonable, including technical, measures to inform the controllers who are processing the personal data by request of the interested party, to cancel any link, copy or reproduction of their personal data.
3.Paragraphs 1 and 2 are not applied in the measure in which the processing is necessary:
a)for the exercise of the right to freedom of expression and information;
b)for the fulfilment of a legal obligation requiring the data handling contemplated by the Union or by the member State to which the data controller is a party or for the performance of a task conducted in the public interest or in the exercise of public powers invested in the data controller;
c)for reasons of public interest in the public health sector in compliance with article 9, paragraph 2, letters h) and i), and of article 9, paragraph 3; d)for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes compliant to article 89, paragraph 1, in the measure in which the right specified under paragraph 1 may be liable to make it impossible or to seriously jeopardise the accomplishment of the purposes of that data handling; or e)for the ascertainment, exercise or defence of a right in a court of law.
The data controller shall inform each of the recipients to whom the personal data have been sent, of any possible rectifications or cancellations or limitations of the handling conducted in compliance with article 16, article 17, paragraph 1, and article 18, unless this proves impossible or entails a disproportionate effort. The data controller shall inform the interested party of those recipients should the interested party so request.
1.The interested party has the right to receive in a structured format in everyday use and legible from an automatic device the personal data supplied to a data controller, and has the right to transmit those data to another data controller without impediment from the controller to whom he or she has supplied them, if and when: a)the handling is based on consent as per article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), or under contract in accordance with article 6, paragraph 1, letter b); and b)the handling is done using automated devices. 2.In exercising his or her rights to the portability of data in compliance with paragraph 1, the interested party has the right to obtain the direct transmission of said personal data from one handling controller to another, if technically feasible. 3.The exercise of the right as per paragraph 1 of the present article without prejudice to the contents of article 17. This right is not applied to processing necessary to the execution of a task of public interest or connected to the exercise of public powers invested in the person of the data controller. 4.The right as per paragraph 1 shall not jeopardise the rights and freedoms of other people.
1.The interested party has the right, at any time for reasons connected to their particular situation, to oppose the handling of their personal data in accordance with article 6, paragraph 1, letter e) or f), including profiling on the basis of these provisions. The data controller shall abstain from any further processing of said personal data, unless he or she can prove the existence of legitimate cogent reasons for proceeding with that handling which prevail over the interests, rights and freedoms of the interested party or for the certification, exercise or defence of a right in a court of law. 2.Should the personal data be handled for direct marketing purposes, the interested party has the right, at any time, to oppose any processing of his or her personal data used for such purposes, including profiling in the measure in which it is connected to that direct marketing. 3.Should the interested party oppose his or her data handling for direct marketing purposes, the said personal data shall no longer be the subject of processing for those purposes. 4.The right as per paragraphs 1 and 2 shall be explicitly brought to the attention of the interested party and be set out clearly and separately from any other information, not later than at the moment of earliest communication with the interested party. 5.In the context of the use of services from the IT company and subject to the directive 2002/58/CE, the interested party may exercise their right to opposition by computer devices using specific technologies. 6.Should the personal data be handed for purposes of scientific or historical research or for statistical purposes as per article 89, paragraph 1, the interested party, for reasons connected with their particular situation, has the right to oppose that data handling, unless it is necessary to the performance of a task of public interest.
1.The interested party has the right not to be subjected to a decision based solely on computerised handling, including profiling, which may produce legal effects concerning him or her or which similarly and significantly affect his or her person. 2.Paragraph 1 does not apply whenever the decision: a)is necessary to the conclusion and execution of a contract between the interested party and a data controller. b)is authorised by the right of the Union or of its member State to which the data controller belongs, which furthermore explains measures suitable for the protection of the interested party’s rights, freedoms and legitimate interests; c)is based on the interested party’s explicit consent; 3.In cases where in accordance with paragraph 2, letters a) and c), the data controller shall implement measures appropriate to the safeguarding of the interested party’s rights, freedoms and legitimate interests, and at least the right to obtain human intervention by the data controller, to express his or her opinion ad to dispute the decision. 4.The decisions set out under paragraph 2 are not based on the particular categories of personal data specified under article 9, paragraph 1, unless article 9, paragraph 2, letters a) or g) are applied, and unless adequate measures are in force for the protection of the interested party’s rights, freedoms and legitimate interests.