PRIVACY Information pursuant to art. 13 of EU Regulation 679/2016

According to the art. 13 of EU Regulation 679/2016 regarding privacy (hereinafter the Regulation) and in relation to the personal data that you communicate to the Company directly (eg through websites, portals, social media) or which are collected by it through the network of intermediaries and which will be the object of processing, we inform you of the following:

1. Data controller

The data controller is Angelo Michele Vannella's Microlab to which he provides his personal data: - Microlab by Angelo Michele Vannella, with registered office in via Pierino Colombo n. 3 - 20871 Vimercate (MB)

2. Purpose of data processing Treatment:

a) is directed to the performance of administrative and accounting activities (of an organizational, administrative, financial and accounting nature), and of those pertaining to the exercise of the supply of products or services, to which the Owner is authorized pursuant to the current legal provisions, such as non-exhaustive, the conclusion of new contracts, management and execution of existing contracts, collection of remuneration, benefits upon expiry, recovery of receivables.

b) if you give your consent, it can also be directed to the performance of marketing activities (ie: sending of advertising material, direct sales, carrying out market research, commercial communication, participation in sweepstakes).In relation to the aforementioned purposes, the processing of personal data takes place:

c) also with the aid of electronic or automated means;

d) by the organization of the Data Controller through employees and collaborators appointed, "in charge" of the respective company functions;

e) from subjects external to this organization or from service companies, which may act as the case may, as independent data controllers or as external processors;

f) for marketing purposes, both with traditional tools such as paper mail and / or calls with an operator, and through automated tools, ie call or call communication systems without the intervention of an operator, by e-mail, fax, Mms (Multimedia Messaging Service) or Sms (Short Message Service) or other type of messages.

3. Data recipients Personal data can be communicated by the owner:

a) for the purposes referred to in point 2, letter a), where necessary for the execution of contracts or for legal obligations to: other subjects in the financial sector (leasing companies, financial companies); sales intermediaries (agents, sub-agents, dealers); banks and SIM; third party suppliers (lawyers, forensic doctors, clinics, credit recovery, fraud control, customer satisfaction surveys, as well as IT services, factoring, auditing and financial statement certification, archiving or bagging and / or sorting of correspondence).

4. Transfer of data to third countries

Personal data may be transferred to European Union countries and to those third countries that guarantee an adequate level of protection substantially equivalent to that ensured within the Union, based on an adequacy decision of the European Commission.

5. Data retention period

Personal data is stored according to the following criteria:

- for the time strictly necessary for the fulfillment of legal obligations (eg document conservation);

- for the time strictly necessary for the provision of any services requested by you;

- for the time strictly necessary to achieve the purposes for which they are treated, indicated in point 2. for twelve months from the collection of data used solely for marketing and profiling purposes related to marketing.

Treatment: any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data, or to sets of personal data, such as the collection, registration, organization, structuring, preservation, the adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction.

6. Rights of the interested party

The Regulation grants you the exercise of specific rights, including the right to ask the data controllers:

- confirmation that your personal data is being processed and, in this case, to obtain access to it (access right), pursuant to art. 15 of the Regulation.

- the correction of inaccurate personal data, or the integration of incomplete personal data (right of rectification), pursuant to art. 16 of the Regulation.

- the cancellation of the data itself, if one of the reasons provided for by the Regulation (right to be forgotten) exists, pursuant to art. 17 of the Regulation.

- the limitation of processing when one of the hypotheses envisaged by the Regulation (right of limitation), pursuant to art. 18 of the Regulation.

- to receive in a structured format, commonly used and readable by automatic device, the personal data supplied by you to the owner and to transmit such data to another data controller (right to portability), pursuant to art. 20 of the Regulation.

You also have the right to withdraw your consent to the processing of your data at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation and to oppose the processing for marketing and / or marketing purposes at any time. profiling related to marketing (right of opposition), pursuant to art. 21 of the Regulation. To exercise your rights, you can make a request to the Data Protection Manager, by registered letter to the address of A. Vannella's Microlab in Via Pierino Colombo, 3 - 20871 Vimercate (MB) or e-mail direzione@avmicrolab.it).

Without prejudice to any other administrative or judicial appeal, you have the right to lodge a complaint with a supervisory authority, if it considers that the treatment concerning you violates the regulation.

7. Communication of data and consequences of refusalIt maintains its autonomy, the communication of personal data to the owner and their treatment is:

a) strictly necessary for the performance of the activities described in point 2, letter a);

b) optional for the purpose of carrying out the activity described in point 2, letter b);

c) mandatory according to laws, regulations, national or community regulations.Your refusal to provide data and authorize its processing:

d) in the case referred to in letter a) and c), implies the impossibility to fulfill, before the conclusion of the contract, to your specific requests, to conclude new insurance contracts and execute the related obligations and to manage and settle the claims;

e) in the case referred to in letter b) does not entail any consequences on the contracts in place or in the course of being set up, but precludes the possibility of using the services described above and of carrying out marketing and profiling activities