PRIVACY POLICY

In accordance with EU Regulation No. 679/2016, as stipulated in Article 13 of the mentioned Regulation, we wish to communicate the following:

Purpose of Processing:

Primary Purpose:

Your personal data, freely provided and acquired by Costam srl, will be processed lawfully and fairly for the following purposes:

Managing pre-contractual relationships and executing contracts between the parties.
Fulfilling current administrative, accounting, and tax obligations.
Exercising the rights of the Data Controller, such as the right to legal defense.

Secondary Purpose:

To communicate promotional, commercial, and advertising activities through email or SMS.

Processed data (which may be of a common or identifying nature) is updated, relevant, complete, and not excessive for the aforementioned purposes.

Processing Methods:

Costam srl informs that personal data provided for the above purposes will be processed in compliance with current regulations and according to the principles of fairness, lawfulness, transparency, and protection of confidentiality and rights. Data will be processed manually and/or with the aid of electronic means, ensuring controlled access environments.

Legal Basis for Processing:

The legal basis for processing your personal data lies in the establishment and execution of contractual relationships between the parties and any specific consents collected.

Legitimate Interests Pursued by the Data Controller:

The legitimate interests pursued by the Data Controller in processing the data are derived from the obligation to respect and honor contractual obligations between the parties.

Nature of Data Provision and Consequences of Refusal:

The provision of data for primary purposes is mandatory for the Data Controller to provide the requested services. Refusal will make it impossible to complete the data registration process, and the Data Controller cannot fulfill contractual obligations.

The provision of data for secondary purposes is optional and does not affect the provision of the requested and/or contractualized service.

Communication of Data to Third Parties:

Your personal data will be processed by the Data Controller, appointed Data Processors, and authorized processing agents. Data may be communicated to third parties for the provision of the requested service and will not be transferred to third countries or international organizations.

Data may be disclosed following inspections or verifications (if required) to all inspecting bodies responsible for verifying compliance with legal obligations.

Data may also be disclosed to companies/professional studios providing assistance, consultancy, or collaboration to the Data Controller in accounting, administrative, legal, tax, and financial matters.

Retention Period:

The Company retains your data only for the time necessary to carry out the processing for the purposes mentioned above.

Automated Decision-Making:

There is no automated decision-making process.

Data Controller and Data Protection Officer:

The identifying details of the Data Controller are as follows:

Costam srl

Via Maniago, 8 San Quirino - Pordenone

Email: privacy@costam.it

Email address for exercising Art. 15 rights of the EU Regulation (also for data collected for marketing purposes): privacy@costam.it

Exercise of Data Subject Rights:

Under Articles 13(2)(b) and (d), 15, 16, 17, 18, 19, 20, and 21 of the EU Regulation, data subjects are informed that:

Right of access – the right to confirm whether personal data is being processed and to receive information about the processing.
Right to rectification – the right to correct incomplete or inaccurate data.
Right to erasure ("right to be forgotten") – under certain circumstances, the right to have data deleted if not relevant to the continuation of the contractual relationship or necessary by law.
Right to restriction of processing – under certain conditions, the right to limit processing if not relevant to the continuation of the contractual relationship or necessary by law.
Right to data portability – the right to transfer data to another controller.
Right to object – the right to object at any time to processing based on legitimate interest or performance of a task carried out in the public interest or in the exercise of official authority, including profiling.
Right to withdraw consent – the right to withdraw consent to the processing of your data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with the supervisory authority – the right to submit requests to exercise your rights at any time. In any case, if you wish to file a complaint regarding the processing of your data or the handling of a complaint you have submitted, you have the right to apply directly to the supervisory authority.

This notice does not exclude the possibility that other information may be given orally to data subjects at the time of data collection.