The present information notice is provided to Users who subscribe to the newsletter on www.kiton.com pursuant to article 13 of European Regulation (EU) 2016/679 regarding personal data protection (GDPR).
The Data Controller (hereinafter the “Controller") is the company Ciro Paone Spa, with headquarters at Via San Pasquale a Chiaia, 83, Naples, Italy.
Type of data processed
Personal contact information (e-mail address) is voluntarily provided by interested parties using the subscription form on the website.
Purpose and legal basis for processing
Purpose for carrying out the requested service: Interested parties’ personal data, which is collected when the Newsletter subscription form is completed, is processed solely to activate the service requested in order to send the newsletter by e-mail, as well as to allow them to stop it being sent, or to unsubscribe from the list of recipients, in the event that they wish to disable the service. The legal basis for the data processing is thus to carry out the service requested by the User via their voluntary subscription to the newsletter [article 6, para. 1, letter b) of the GDPR]. Therefore, a User’s e-mail address must be shared for the service to be activated and for the requested newsletter to be received. In the same way, interested parties may unsubscribe from the service at any time, in accordance with the methods indicated by the Controller in the section on exercising rights.
Interested parties’ personal data will be processed using electronic instruments, including automated means, in compliance with the principles of lawfulness, necessity and relevance, while implementing safeguards aimed at identifying suitable security measures at all stages of processing, with regard to the specific processing purposes. The Controller does not carry out any processing that entails automated decision-making on the data of the Users who interact with this website to use this service.
Data storage period
The Controller will keep interested parties’ personal data for the time required in order to carry out the purposes stated in this information notice or, in the event that the service is deactivated (by unsubscribing from a service subscription or removing themselves from the mailing list), until this aforementioned right has been exercised.
Communication and dissemination of data
Interested parties’ personal data will be processed by the staff of the company Ciro Paone S.p.A who have been duly trained for this purpose and authorised for data processing.
Always in keeping with the limits that are strictly necessary in order to pursue the aforementioned purposes, interested parties’ personal data may be communicated to third parties (for example, companies specialising in website management, development and maintenance and companies specialising in electronic communication services management etc.) operating in accordance with the Controller's directives and who, to this end, are designated as data processors via specific agreements (known as Data Processing Agreements or DPAs) established pursuant to article 28 of the GDPR.
Lastly, interested parties’ personal data may be communicated to parties who are legitimately entitled to access it due to legal provisions, regulations or community legislation.
Further information concerning the names of the individual third-party companies can be obtained by writing to email@example.com
Personal data will not be disseminated, or be disclosed to unspecified parties.
Transfer of data
Personal data will be managed and stored on the servers of the Controller and of a third-party company assigned to manage and maintain the website, which has been duly appointed as Data Processor, located within the European Union, and therefore in compliance with the provisions of articles 45 et seq. of the GDPR. Currently the servers are located within the European Union and in Canada, a country which is deemed "adequate" under the GDPR by the European Commission (2002/2/EC: Commission Decision of 20 December 2001 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act). In any event, it remains understood that were it to become necessary to carry out further transfers outside of the EU, this transfer would always occur in compliance with articles 45 et seq. of the GDPR, by signing agreements that guarantee an adequate level of protection and/or implementing the standard contractual clauses provided by the European Commission, where necessary.
Rights of interested parties
At any time, interested parties may disable the requested newsletter by sending an e-mail to the Controller with "unsubscribe from newsletter” written in the subject line.
Furthermore, interested parties may always access their personal data, have their data rectified or cancelled, or limit processing in the instances provided by law, or oppose to the use of their data in the presence of a legitimate interest of the Controller or may exercise their right to data portability, in the permitted cases, as well as obtain an updated list of the Data Processors.
We would also like to remind you that in the event that you receive no response or an incomplete response from the Controller regarding the aforementioned requests, interested parties will be entitled to submit a complaint to the Italian Data Protection Authority or the competent Judicial Authority, within the terms and methods provided by current national legislation.
Requests regarding exercising the aforementioned rights should be sent to firstname.lastname@example.org