Privacy
Personal data processing information
We keep your personal information secure, within Digiquest Solutions and it is not our intention to transfer it to other parties, except in cases expressly provided for by law. It is possible, however, that the data may be disclosed to Third Party Companies so that they may carry out activities on our behalf in accordance with the principles of lawfulness and transparency, protecting the rights of the data subjects. In this circumstance, data are processed exclusively by Companies, appointed as Data Processors and, therefore, bound to the pursuit of Digiquest Solutions' own purposes. In particular, we do not expect your data to be disclosed to other third parties for their own advertising, marketing and similar purposes. We encourage you to report to us any misuse of our brand if you become aware of it. To this end and in compliance with the provisions of Article 13 of the GDPR, we report the following information:
Data controller:
The data controller of the data collected is Digiquest Solutions S.p.A a socio unico with registered office in Via Privata Fratelli Gabba n. 5 - 20121 Milan (p.i. 08249200968). The data processing takes place at the headquarters of the owner and will be handled only by the staff appointed to it. The data protection officer (DPO) designated by the owner pursuant to art.37 of the GDPR is: Carmen Ilaria Erbetta e-mail:
ilaria.erbetta@digiquestsolutions.it
Data processor
The Data Processor coincides with the Data Controller.
Purpose of processing and legal basis
Personal data provided by users are used only for contractual purposes for the conclusion and management of the sale and purchase of products marketed by the Owner and accounting and tax purposes as per legal regulations. This need represents the legal basis that legitimizes the resulting processing. The conferment of the data necessary for these purposes represents, as the case may be, a contractual obligation or a necessary requirement for the conclusion of the contract; without them, Digiquest would be in the impossibility of establishing the relationship or executing it.
Other purposes may be related to promotion aimed at selling distributed products and services.
The legal basis that legitimizes the resulting processing is the consent of the Data Subject, which he/she is free to give or not and which he/she can, however, revoke at any time. The provision of data necessary for these purposes is not mandatory and does not determine any negative consequence, except the impossibility of receiving commercial communications.
All data collected, regardless of purpose, will not be disclosed to third parties.
Modalities for data processing
Data processing is carried out through the use of appropriate tools and procedures to ensure security and confidentiality and may be carried out either by means of paper media or through the use of electronic tools. Access to all Digiquest websites activates methods of automatic collection of information (technical cookies) necessary for proper navigation on these sites, which are automatically deleted when they expire or when the session is closed. Suitable security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
Communication and outreach
The data thus collected, will not be “disseminated”, i.e., it will not be made known to unspecified parties in any way, including by making it available or consulted. The aforementioned data, may instead be “communicated”, to one or more determined and identified subjects as follows:
- to designated individuals within DIGIQUEST Solutions S.p.A as data processors and processors and/or system administrators;
- to subjects who can access the data by virtue of a provision of the law, regulation or EU legislation, within the limits provided by these rules;
Retention period
The data will be kept for the time necessary for the execution/management of the relationship with the Customer, in accordance with the provisions in force, as well as, limited to the purposes of direct and indirect marketing for a period consistent with the purposes and commercial dynamics related to the very nature of the product. The Data Controller will process personal data for the time necessary to fulfill the above purposes and, in any case, for no longer than 10 years from the execution of the sales contract.
Rights of the data subject
At any time, the data subject may exercise the rights set forth in Articles 15 et seq. of European Regulation No. 679/2016, namely: the right to know whether his or her personal data are being processed and thus to know their content and origin, to verify their accuracy or request their supplementation, deletion, restriction, updating, rectification, transformation into anonymous form or blocking, as well as the right to object in any case, for legitimate reasons, to their processing and to lodge a complaint with the Guarantor for the Protection of Personal Data.
Consent given to processing may be revoked at any time leading to the discontinuation of processing.
These rights may be exercised against the Controller as identified above by emailing the pro-tempore Privacy Officer by writing to privacy@digiquestsolutions.it
Right of access
The right of access includes the possibility for the Data Subject to know what personal data relating to him or her are processed by the Data Controller and to receive a copy free of charge.
Right of rectification
The right of rectification allows the Data Subject to obtain the updating or rectification of inaccurate or incomplete data concerning him or her.
Right to erasure (so-called “oblivion”)
The right to erasure, or to be forgotten, allows the Data Subject to obtain the erasure of his or her personal data in the following special cases:
personal data are no longer necessary for the purposes for which they were collected and processed;
the Data Subject withdraws the consent on which the processing is based, if there is no other legal basis that might otherwise legitimize it;
the Data Subject objects to the processing and there is no further legitimate reason to proceed with the processing carried out by the data controller for:
- the pursuit of its own or a third party's legitimate interest, and there is no overriding legitimate reason for the owner to process the data,
- Direct marketing purposes, including related profiling;
the personal data of the Data Subject has been unlawfully processed. This right can be exercised even after consent is withdrawn.
Right of limitation
The right to limitation is exercisable by the Data Subject in case:
of violation of the conditions of lawfulness of processing, as an alternative to deletion of data;
of request for rectification of data (pending rectification) or opposition to their processing (pending the owner's decision).
Subject to retention, any other processing of the data for which restriction is sought is prohibited.
Right to portability
The Right to Portability allows the Data Subject to use their data held by the Data Controller for other purposes. Each Data Subject may request to receive personal data relating to him or her or request its transfer to another data controller, in a structured, commonly used and readable format (Right to portability).
Specifically, the data that can be subject to portability are master data (e.g., first name, last name, address, date and place of birth, residence).
Right of opposition
The right to object allows the Data Subject to object at any time, for reasons related exclusively to his or her situation, to the processing of personal data concerning him or her.