Privacy Policy

This information is provided pursuant to art. 13 EU Regulation 2016/679 for the protection of personal data.

The Data Controller is:

Nito Ferri

info@esostella.com

Nature of conferment

The provision of data is optional. The refusal to provide data makes it impossible to be contacted for the purposes listed below. The provision of data for marketing purposes is optional and does not make it impossible to be contacted for other purposes.

Purposes of the treatment and legal basis

Execution of obligations arising from contracts entered into with the Owner and / or fulfillment, before the conclusion of the contract, of specific requests of the person concerned;

fulfillment of obligations under the law, regulations or legislation;

With regard to the purposes sub a) and b), we inform you that the processing and communication of your personal data by the Owner does not require your consent as necessary for the execution of obligations arising from the contract itself and / or the performance of services requested by you before the conclusion of the contract and to comply with legal obligations.

Modalities for the treatment of data

The collected data are treated with computer tools.

Suitable security measures are observed to prevent data loss, illegal or incorrect use and unauthorized access.

Who treats your data

The processing of personal data takes place at the above-mentioned headquarters and is handled by staff in charge.

Conservation period of your data.

The personal data processed for contractual or economic purposes such as billing will be treated for the mandatory time provided by the laws of competence.

Complaint

It is without prejudice to the right of the data subject to lodge a complaint with the supervisory authority.

Rights of the interested parties ex art 15 EU 2016/679

The subjects to whom the personal data refer have the right to be informed whether or not personal data referring to them are being processed, and if so, to obtain information regarding:

the purposes of the processing;

the categories of data concerned

the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients in third countries or international organizations;

where possible, the expected period of retention of the personal data or, if this is not possible, the criteria used to determine this period;

the existence of the data subject’s right to request from the data controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing;

the right to lodge a complaint with a supervisory authority;

where the data are not collected from the data subject, all available information on their origin;

the existence of an automated decision-making process, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information about the logic used, as well as the importance and expected consequences of such processing for the data subject.

Requests should be addressed to the email address or by regular mail to the address set forth above.