DATA PROCESSING NOTICE
pursuant to Art. 13 of GDPR 2016/679
“EUROPEAN REGULATION ON THE PROTECTION OF PERSONAL DATA AND THEIR FREE MOVEMENT”.

This page describes how this website is managed with regard to the processing of personal data of the users who consult it. This information is also provided pursuant to Article 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR) to those who interact with the pages of the website

www.thetis.it

It should be noted that the information is provided solely and exclusively for this website and not for any other websites that may be consulted by the user via links that may be present within it. The information for the collection of personal data illustrates, for the sake of transparency, the methods, times and nature of the information that the data controller must provide to web users when they connect to its web pages, regardless of the purpose of the connection.

Img199

Identity and contact details of the data controller

The data controller is the company THETIS SPA, with legal and administrative headquarters at Castello 2737/f in VENICE (VE). The owner’s contact details are as follows: [email protected]

Img201
Img203
Img205

Purposes of data processing
collected data

Web user data are collected to enable the Controller to:
a) to present and provide its services as well as to give answers to requests for information on the activity carried out and the services provided to answer any contact requests;
b) for protection and defence against computer fraud.

Img207

Legal basis for processing

The legal basis for the processing is represented by the need to provide answers to the data subject’s requests (Art. 6 c. 1 lett. b GDRP) for the purpose a) and the protection of legitimate interests of the data controller (Art. 6 c. 1 lett. f GDRP) for the purpose b).

Img209

Compulsory or optional nature of providing data – Data provided voluntarily by the user

Please note that, taking into account the purposes of data processing as illustrated above, the provision of data is compulsory and failure to provide such data, in part or in full, may make it impossible to respond to requests made or to use the services (purpose a)). In the event of the provision of data by filling in forms (forms) containing data indicated as compulsory: communication of the marked data is necessary and failure to provide it will make it impossible for the Controller to supply what has been requested or in any case to handle requests.
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, which is necessary to reply to requests, as well as any other personal data included in the message.

Img5

Storage periods, logic and methods of data processing

The data will be processed mainly through the use of automated tools for the time strictly necessary to achieve the purposes for which they were collected. The data will be kept for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed. Such processing will always be based on the principles of correctness, lawfulness, transparency and protection of the confidentiality and rights of the data subjects.

Img7

Existence of an automated decision-making process

The processing does not involve automated decision-making.

Img9

Transfer of data to a third country or to
an international organisation

The controller will not transfer personal data to a third country outside the EU or to an international organisation, except for those third-party services/components ’embedded’ in the site, as referred to in the relevant policies (see cookies policy).

Img11

Right to complain to the supervisory authority

IPersonal data will be processed by the Data Controller, and by persons strictly authorised by him. The data may be communicated to consultants, professionals and suppliers of services instrumental and necessary to the achievement of the purposes indicated. These subjects will be appointed External Data Processors pursuant to art. 28 of the GDPR where
necessary. The data will not be disseminated.

Img13

Identity and contact details of the data controller

The data subject has the right to lodge a complaint with the supervisory authority ( www.garanteprivacy.it ).

Img15
Img19
Img21
Img23

Rights of the persons concerned

You may, at any time and where applicable, exercise your rights of access to your personal data, rectification or erasure, restriction of processing, objection, revocation of consent and portability under Articles 15-20 of the GDPR by sending an e-mail request to [email protected].

Img17

Processing of further data

Any further processing of your personal data, other than what is indicated in this notice, will be promptly communicated to you prior to processing.

DaPIS (Data Protection Icon Set) created by CIRSFID, University of Bologna and Accademia di Belle Arti di Bologna