You can exercise your rights under the GDPR regarding your personal data by writing to gdpr@davines.it. We will endeavour to respond to your request as soon as possible and in any event no later than thirty days from receipt of your report. In certain cases, we will ask you for a copy of an identification document if, in connection with your request, it is necessary to verify your identity. In particular, you may exercise the following rights, where applicable:
- Right of access, i.e. the right to know whether personal data concerning you is being processed and, if confirmed, to obtain a copy of such data and to be informed about: the source of the data, the categories of personal data processed, the recipients of the data, the purposes of the processing, the existence of automated decision making (including profiling), the data retention period, the rights under the GDPR;
- Right to have your data corrected or supplemented;
- Right to obtain the deletion ofpersonal data if such data are no longer necessary for the purposes for which they were collected, or if we are no longer authorised to process them;
- Right to obtain the restriction of the processing of personal data in the following cases: i) you have contested the accuracy of the personal data. You may request a restriction of the processing for the period necessary to verify the accuracy of the data; ii) we are no longer authorised to process the data, and instead of deleting it, you may ask us to restrict its use; iii) if the personal data in our possession, although no longer necessary for the purposes for which it was collected, is necessary for you to establish, exercise or defend a right in court;
- Right to data portability, i.e. the right to receive personal data concerning you in a structured, commonly used and machine-readable format, as well as the right to request that such data be transmitted to another data controller;
- Right to withdraw consent, for processing based on it;
- Right to object at any time to the processing of your personal data based on our legitimate interest.
You also have the right to write to the appointed DPO and/or lodge a complaint with the Data Protection Authority if you consider that the processing of your data contravenes the provisions of the GDPR.