7. RIGHTS OF THE DATA SUBJECTS
Users may
exercise their rights granted by the Applicable Law by contacting the Data
Controller as follows:
Online:
Contacting customer service
through the dedicated contact form;
By Mail:
Sending a registered letter
with return receipt to the registered offices of the Data Controller (Via
Comelico, 3, 20135 Milano);
For
specific requests to be sent to our Data Protection Officer:
Users may also contact
the Data Protection Officer (DPO) of the Data Controller, the
contact data of which is reported below: Italian company Shibumi Srl - e-mail: dpo@iumob.it.
Pursuant to
Applicable Law, the Data Controller informs that Users have the right to obtain
indication (i) of the origin of personal data; (ii) the purposes and methods of
the processing; (iii) the logic applied in the event of processing carried out
with the aid of electronic instruments; (iv) of the identification details of
the data controller and processors; (v) the subjects or categories of subjects
to whom the personal data may be communicated or who may come to aware of them
as processors or agents.
Furthermore,
Users have the right to obtain:
a) access, updating, rectification, or,
when interested, integration of data;
b)
the cancellation, transformation into anonymous form or
the restriction of data processed in breach of the law,
including data that does not need to be stored in relation to the purposes for
which the data was collected or subsequently processed;
c)
certification to the effect that notification has been supplied of operations
as per letters a) and b), as also regards their content, to those to whom the
data was communicated or disseminated, except for the case where notification
proves impossible or requires the use of means clearly disproportionate to the
right being protected.
Moreover,
the Users have:
a) the
right to revoke consent at any time, if the processing is
based on their consent;
b) (where
applicable) the right to data portability (the right to
receive all personal data concerning them in a structured format, commonly used
and readable by automatic device);
c)
the right to oppose to:
i) in whole
or part, for legitimate reasons, the processing of personal data relating to
him/her for legitimate reasons even pertinent to the purpose of collection;
ii) in
whole or part, the handling of personal data for the purpose of sending
advertising or sales materials or for the carrying out of market research or
for commercial communication purposes;
iii) if
personal data is processed for direct marketing purposes, at any time, to the
processing of data for this purpose, including profiling to the extent that it
is related to such direct marketing.
d) if it is
deemed that the processing concerning his/her personal data violates the
Regulation, the right to lodge a complaint with a Supervisory authority (in
the Member State in which he/she usually resides, in the one in which he/she
works or in the one in which the alleged violation has occurred). The Italian
Supervisory Authority is the Data Protection Authority, with
registered offices in Piazza Venezia No. 11, 00187 – Rome (http://www.garanteprivacy.it/).
--------------------------
The Data
Controller is not responsible for updating all links viewed in this Privacy
Policy, therefore, whenever a link does not work and/or is not updated, the
Users acknowledge and accept that they must always refer to the document and/or
section of the websites referred to by this link.