Last update: March 29, 2024
Introduction
Grammelot S.r.l. (VAT number 09562620964), with registered and operational headquarters at Via Casale no. 5, Milan (MI), as Data Controller, informs you that the Personal Data provided by you upon registration and during the use of the KloudarchiveApp App are processed[1] by the undersigned, in accordance with European and national regulations on the protection of personal data (EU Regulation 2016/679, hereinafter “GDPR” and Privacy Code as amended by Legislative Decree 101/2018).
This information is provided pursuant to Article 13 of Regulation (EU) No. 2016/679 (hereinafter the “GDPR”).
Purposes of Processing and Legal Bases
Grammelot S.r.l. states that registration and use of the KloudarchiveApp App require the provision of personal data, which will be processed in full compliance with the GDPR and applicable national regulations.
Pursuant to these laws, such processing will be based on the principles of fairness, lawfulness, and transparency, protecting your privacy, rights, and freedoms.
The purposes of processing through the use of the platform are as follows:
- Substitutive and digital storage of documents in accordance with the law. Legal basis for processing: processing is necessary for the performance of a contract to which the data subject is a party under Article 6.1.b GDPR;
- Monitoring the use of the platform for cognitive and statistical purposes to evaluate the progress of document archiving. Legal basis for processing: pursuit of the legitimate interests of the Controller under Article 6.1.f GDPR;
- Management of the contractual relationship with users for the provision of services related to the substitute and digital preservation of documents. Legal basis of the processing: the processing is necessary for the execution of a contract of which the interested party is a party pursuant to art. 6.1.b GDPR;
- Verification of requirements with respect to company policies and existing selective procedures. Legal basis of the processing: pursuit of the legitimate interest of the Data Controller pursuant to art. 6.1.f GDPR;
- Defense of the Data Controller’s rights in out-of-court and judicial proceedings, dispute management, arbitration. Legal basis of the processing: pursuit of the legitimate interest of the Data Controller pursuant to art. 6.1. f GDPR.
Nature and Methods of Processing
The processing of data concerning you will be carried out through the KloudarchiveApp App predominantly in an automated manner, observing the security measures, technical and organizational, specifically adopted by Grammelot S.r.l..
The processing will concern common personal data: name, surname, personal and company email address as well as documents uploaded to the platform.
Personal data will be processed mainly at the Data Controller’s registered office in Milan and/or at the locations where any Data Processors appointed pursuant to Article 28 of Regulation (EU) 2016/679 are located, and will not be transferred outside the European Economic Area.
The provision of personal data is mandatory for the purpose of allowing access to the platform and participating in activities related to it. Failure to provide personal data will result in the impossibility for the data subject to benefit from the platform and the courses including educational materials uploaded therein.
Categories of Recipients to Whom Personal Data May be Disclosed
The Personal Data provided by users on the platform may be brought to the attention of employees or collaborators of the Owner, for activities related to the provision of activities connected to the platform, and of the Data Processors appointed pursuant to art. 28 Regulation which, operating under the direct authority of the Data Controller, process data and receive adequate instructions in this regard. The same will happen – by the Data Processors appointed by the Data Controller – towards the employees or collaborators of the Data Processors.
Furthermore, they may be communicated to certification and accreditation bodies.
Duration of Processing and Data Retention
The data provided will be kept for a period not exceeding that necessary for the purposes specified in this information, following the details reported in the section “Purposes of Processing and Legal Bases”.
Data Protection Officer (DPO)
Grammelot S.r.l., on a voluntary basis, has appointed a Data Protection Officer who can be contacted via email at the following address: support@grammelot.eu.
Data Subject’s Rights
The data subject may exercise his rights towards the Data Controller pursuant to articles 15 to 21 of the GDPR.
In particular, the interested party will have the right to request access to his personal data, rectification, cancellation of the same or to oppose their processing, as well as to request the limitation of the processing and to obtain the data in a structured format, of common use and readable by automatic device. The interested party may also revoke consent for processing based on this legal basis without prejudice to the lawfulness of the previous processing.
The exercise of the aforementioned rights may be activated by sending a specific communication to the certified email address grammelot@pec.it .
Changes to the Information
This information may be subject to updates in accordance with national and European regulatory provisions as well as due to operational choices made by Grammelot S.r.l. Unless otherwise specified, this information will continue to apply to personal data processed up to that time.
[1] The term “processing of data” refers to “any operation or set of operations, performed with or without the aid of electronic or automated means, concerning the collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of data.”