1 Privacy Notice to the Data Subject pursuant to Articles 13–14 of EU Regulation 2016/679
We hereby inform you that your personal data will be processed in accordance with the principles of fairness, lawfulness, transparency, and the protection of your privacy and rights. Please note the following:
Data Controller: ATENIX E.E. s.r.l.
Data Processor: Dott. Angonese Ermanno
1.1 Types of Data Processed
The processing concerns the following categories of data:
  • Identification data
  • Contact data (email, phone numbers, social media, etc.)
  • Educational data (CV, attended courses)
  • Banking/tax data
  • Profiling/spending data
  • Audio recordings/video surveillance
1.2 Purpose of Processing
The data is processed for the following purposes:
  • Proper and complete execution of the contract and related obligations
  • Fulfillment of legal obligations imposed by current legislation
  • Fulfillment of tax and fiscal obligations
  • Marketing activities
  • Customer satisfaction
  • Informational activities directed at the customer
1.3 Legal Basis for Processing
The legal basis for such processing is the performance of services related to the contractual relationship, compliance with legal obligations, and the legitimate interest in carrying out processing necessary for the aforementioned purposes.
1.4 Data Recipients
For the purposes of processing, data may be disclosed to:
  • Third-party suppliers of our company
  • Third-party clients of our company
  • Banking institutions, tax authorities, entities responsible for tax compliance, legal professionals, and judicial authorities
  • Service providers
  • Authorities and/or public entities
Data may also be communicated and transferred to one or more entities operating outside the national territory, including outside the European Union.
1.5 Consequences of Failure to Provide Data
Please note that, considering the purposes outlined above, the provision of data is mandatory. Failure to provide, partial provision, or inaccurate provision of data may result in the inability to perform contractual services. Consent for the dissemination of data for marketing purposes and the sending of advertising material is not mandatory and remains optional.
If the data subject is under the age of 16, processing must be authorized by the holder of parental responsibility, whose identification data and a copy of identification documents will be collected.
1.6 Processing Methods
Data will be processed using both manual and electronic/telematic tools, with organizational and processing logic strictly related to the purposes stated above, and in any case in a manner that ensures the security, integrity, and confidentiality of the data, in compliance with the organizational, physical, and logical measures required by current regulations.
Your data may be stored in both paper and electronic archives.
Your data will not be subject to dissemination nor to any fully automated decision-making process, including profiling.
1.7 Data Retention
Personal data will be retained for the entire duration of the contract and for ten years following the issuance of the last invoice, unless otherwise required by law.
1.8 Exercise of Your Rights
You may contact the Data Controller or Data Processor at any time to exercise the following rights:
  • Access to your personal data
  • Rectification of inaccurate personal data
  • Erasure of personal data in the cases provided for by Article 17 GDPR
  • Restriction of processing within the limits of Article 18 GDPR
  • Data portability pursuant to Article 20 GDPR
  • Objection to processing in the cases provided for by Article 21 GDPR
  • Not to be subject to automated decision-making as provided for by Article 22 GDPR
  • Withdrawal of consent, where applicable: withdrawal does not affect the lawfulness of processing based on consent given before its withdrawal
  • Lodging a complaint with the supervisory authority (Data Protection Authority)