INFORMATION NOTICE PURSUANT TO ART. 13 GDPR (EU REG. N. 679/2016)

FOR THE PROCESSING OF PERSONAL DATA

MADE BY LORENZO POZZI, ALSO THROUGH THE WEBSITES

WWW.LORENZOPOZZI.COM

WWW.LORENZOPOZZI.IT

WWW.POZZILORENZO.IT

WWW.LORENZOPOZZI.EU

1. HOLDER OF THE TREATMENT

The Data Controller of your personal data is:

• LORENZO POZZI, CF PZZ LNZ 00H04 F704J, PI 11548410965, with laboratory in 20853 Biassono (MB), Via Casiraghi e Riboldi n. 37, which with respect to the processing of your personal data as well as in relation to the exercise of your rights (better indicated below in art.8), can be contacted at the email address  loripozzi58@icloud.com  or pec  pozzilore@legalmail.it .

2. LEGAL BASES

The legal bases of the processing, pursuant to art. 6 of the GDPR, on which the treatment carried out by Lorenzo Pozzi is based are:

1. the execution of a contract: the preparation of dishes (e.g. sweets) and the provision of related services (e.g. home delivery), upon request and payment of a price within the terms agreed with the Owner;

2. fulfillment of legal obligations: fulfillment of legal and tax obligations, connected to your request and / or to the order you placed;

3. consent for the use of your e-mail address for sending promotional communications by the Data Controller (e.g. new recipes, promotions, preparations and special services);

4. the legitimate interest of Lorenzo Pozzi in using your e-mail address for similar communications and / or connected to previous contact requests that you have made to him and / or to participate in initiatives organized by him and in which you have participated or to which you have shown interest.

3. PURPOSE OF THE TREATMENT

Your personal data will be processed for:

• the management of orders and reservations that have been received by the Owner;

• the management of payments and accounting related to orders made to the Data Controller;

• the organization of live or remote initiatives and / or events (e.g. via webinar) related to Lorenzo Pozzi's professional activity, as well as the management of the related registrations and / or participations by him;

• the sending by e-mail of promotional communications (e.g. updates to offers, invitations to initiatives, promotional material) relating to the professional activity of Lorenzo Pozzi  you may be interested in.

4. CATEGORIES OF PERSONAL DATA OBJECT OF THE TREATMENT.

The Data Controller processes the following categories of personal data (common) in relation to the purposes expressed above:

• personal data (name, surname, tax code, VAT number, delivery address);

• fiscal and related data (support bank, fiscal domicile);

• contact details (telephone number, e-mail address).

NECESSARY (AND NOT) TREATMENTS

The provision of your personal data is necessary in order to fulfill contractual obligations and, in general, to comply with the law by Lorenzo Pozzi. For them, therefore, your consent will not be necessary, so much so that failure to provide them will make it impossible for the Data Controller to perform the requested service in whole or in part.

Instead, the use of the e-mail address for promotional purposes, based on consent or legitimate interest, is an exception: in fact, at any time, the recipient of promotional communications can revoke the consent (if he has given it) or oppose the processing. based on Lorenzo Pozzi's legitimate interest in promoting himself towards those who have shown interest in his business on one or more occasions and who justify promotional activities for similar initiatives. In this sense, it will be enough to refer to the contact details referred to above in art. 1.

   5. METHOD OF TREATMENT AND STORAGE OF YOUR PERSONAL DATA

Your personal data will be processed and stored in accordance with the provisions of art. 5 of the GDPR, on physical infrastructure and cloud.

More precisely:

• the personal and contact data of those who have given consent to promotional communications will be processed for a maximum period of 2 years from the consent;

• the personal and contact details of those who have shown interest in Lorenzo Pozzi's activities and / or his initiatives, and therefore recipients of promotional communications, will be processed for a maximum period of 1 year from the last interaction.

   6. COMMUNICATION AND DISCLOSURE OF YOUR PERSONAL DATA

Your personal data will be processed for the purposes referred to in art. 2 and, therefore, communicated as well as to the subjects who have the right to access it by virtue of specific regulatory provisions (e.g. the authority):

• to subjects who carry out outsourced activities on behalf of the Data Controller, in their capacity as appointed external Data Processors (by way of indication but not exhaustively: professional firms, credit institutions, web platforms, system administrators).

7. TRANSFER OF YOUR PERSONAL DATA

• Personal data will be transferred outside the European Union limited to processing for promotional purposes via social networks (Facebook) on the basis of standard contractual clauses approved by the European Commission or of adequacy decisions of the same, depending on the specific recipient country.

• In all other cases, the processing of your personal data will take place within the European territorial limits.

The complete and updated list of "Data Processors" can be requested from the Data Controller at any time, at the contacts indicated above.

  8. RIGHTS OF THE INTERESTED PARTIES

Here are the rights recognized by the current national and European legislation on the processing of personal data:

• access à you can always obtain confirmation of the existence or not of personal data concerning you, as well as the methods of treatment, its purposes and the contacts of the Data Controller and / or the Data Processor;

• rectification à you have the right that your data is always correct and updated, and you can therefore request its updating, rectification or integration;

• cancellation à you can request the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;

• copy à you have the right to ask Lorenzo Pozzi for a copy of your processed data, without prejudice to the request for a contribution in the event that multiple requests are received (administrative and management costs);

• portability à you have the right to receive the personal data concerning you in a structured and commonly used format and you have the right to transmit such data to another Data Controller without impediments;

• opposition à you have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you carried out pursuant to Article 6, paragraph 1, letters e) or f) of the GDPR;

• complaint according to art. 77 of the GDPR we remind you that, in addition to the rights listed above, you have the right to lodge a complaint directly with the Supervisory Authority if you believe that your data is being processed in violation of the provisions of the GDPR.