Information statement pursuant to European regulation 2016/679 dated 27 April 2016

Dear Client,
Pursuant to European Regulation 2016/679 dated 27/04/2016, your personal data will be collected according to the principles of correctness, lawfulness and transparency and of protection of your privacy and your rights
In compliance with the provisions of the aforementioned European Regulation, we inform you of the following:

Processing purposes
The data that you have provided will be processed solely in compliance with the correct and complete execution of the contract, for the time strictly required to carry out the purposes for which the data was collected, and, in any case, with instruments and procedures suitable to ensuring the safety and confidentiality by Micromic S.r.l.
In particular, the following is the legal basis of the processing:
- Execution of obligations deriving from contracts, completed and/or their fulfilment, even before signing, for the purpose of concluding the same and for specific requests made from to the data party;
- To fulfil obligations under applicable laws, regulations, community norms and provisions issued by legitimate accounting and tax authorities,
- For operational needs;
- For communications relating to existing relationships;
- For internal statistics;
- Management of phone books, address books;
- Marketing
- Promotions
- Sensitive data are not normally requested and processed, however, in relation to specific services requested, it is possible that this type of data is provided.

Processing method
Personal data will be processed for the time strictly needed to achieve the purposes for which they were collected, and, in any case, with instruments (electronic and otherwise) and procedures so that Micromic S.r.l. Can ensure the safety and confidentiality of this data. Specific security measures are taken to prevent data loss, unlawful or improper use, and unauthorised access.

Required and optional provision of the data and the consequences of any refusal to comply
The provision of data is optional. We inform you that, however, that Micromic S.r.l. will use the personal data you provide for the sole purpose of providing the services requested and within the scope of the obligations deriving from the stipulated contract. Any refusal to provide the requested information or the incorrect communication of one of the mandatory pieces of information will make it impossible to process it and to properly fulfil the obligations deriving from the stipulated contract.

Transmission and dissemination of data
Without prejudice to communications and dissemination carried out in compliance with legal obligations, the data may be communicated for the purposes indicated above to the following categories of subjects both in Italy and abroad.
-Public or private subjects: Social security, welfare, and insurance institutions.
- Financial administration.
- Subjects that perform data processing services (Electronic Data Processing Centres) or that manage the IT system (including email).
- Credit institutes.
- Professionals and consultants and any legitimate recipient for the above mentioned purposes.
Company employees, as people in charge of processing, will also process the data.
Your data will not be subject to unlawful disclosure.

Data Controller and Processor
The Data Controller is the undersigned Micromic S.r.l. with registered offices in Via Silvio Pellico, 19/9 A – Pomezia (Rm)
The data processor is Mr. Gaetano Barra.
The continuously updated list of data processors is available at the registered office.

The data subject’s rights
You can exercise the rights provided for in Chapter III, Articles 15-21 of the 2016/679 European Regulation (access, correction, integration, cancellation, opposition to treatment, etc.) at any time and for free by contacting the data controller (also by e-mail). For your convenience we provide the text of Chapter III of European Regulation 2016/679.
“The Data Subject's right to access” :1. The data subject has the right to obtain from the data controller confirmation that his or her information is or is not being processed and, in this case, to obtain access to personal data and the following information: a) the purposes of processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data has been or will be communicated, in particular if these are recipients from third countries or international organisations; (d) where possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period; (d) when possible, the retention period of the personal data provided for, or, if this is not possible, the criteria used to determine this period; e) the existence of the data subject's right to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose to processing; f) the right to lodge a complaint with a supervisory authority; g) if the data is not collected from the data subject, all information available on its origin; (h) the existence of an automated decision-making process, including profiling referred to in Article 22 (1) and (4) and, at least in such cases, significant information on the logic used, and the importance and expected consequences of such processing for the data subject. 2 If the personal data is transferred to a third country or to an international organisation, the data subject has the right to be informed of the existence of adequate safeguards pursuant to Article 46 relating to the transfer. 3. The data controller provides a copy of the personal data being processed. In case of further copies requested by the data party, the data controller may charge a reasonable fee to cover administrative costs. If the data party submits the request by electronic means, and unless otherwise indicated by the data party, the information is provided in a commonly used electronic format. 4. The right to obtain a copy as referred to in paragraph 3 must not adversely affect the rights and freedoms of others. Correction and deletion. “Right of correction”: The data party has the right to obtain from the controller the correction of inaccurate personal data concerning him or her without undue delay. Taking into account the purpose of the processing of personal data, the data party has the right to integrate incomplete personal data, also by providing an additional statement.
“Right of deletion”: The data party has the right to obtain from the controller the correction of inaccurate personal data concerning him or her without undue delay. Taking into account the purpose of the processing of personal data, the data party has the right to integrate incomplete personal data, also by providing an additional statement. “Right to erasure”(«right to be forgotten): The data party has the right to make sure the data controller deletes his or her personal data without undue delay, and the data controller must cancel the personal data without undue delay (if one of the reasons provided for by Article 17 of European Regulation 2016/679 exists). “Right to restriction of processing”: The data party has the right to obtain from the data controller the limitation of processing when one of the following cases occurs: a) the data party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data, b) the processing is illegal and the data party opposes the cancellation of personal data and asks instead that its use is limited; c) although the data controller no longer needs it for processing purposes, personal data is needed for the data subject to verify, exercise or defend a right in court; d) the data party has opposed the processing pursuant to Article 21 (1), pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the data party. “Right to the portability of data”: The data party has the right to receive, in a structured, commonly used and automatically readable form, his or her personal provided to a data controller and has the right to transmit such data to another data controller without impediments from the data controller to whom he or she has provided such data if: a) the processing is based on consent pursuant to Article 6, paragraph 1, letter a) or Article 9, paragraph 2, letter a) or on a contract according to Article 6, paragraph 1, letter b) and b) the processing is carried out by automated means. “Right to object”: The data party has the right to oppose at any time, for reasons connected with his or her particular situation, to the processing of his or her personal data pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. The data controller refrains from further processing personal data unless he or she demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or the defence of a right in court. 2. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him/her for such purposes, including profiling in so far as it is related to such direct marketing. 3. If the data subject objects to processing for direct marketing purposes, personal data is no longer processed for these purposes. 4. The right referred to in paragraphs 1 and 2 is explicitly brought to the attention of the data party and presented clearly and separately from any other information at the latest at the time of the first communication with the data party. 5. In using the company’s information services, and without prejudice to EU Directive 2002/58, the data subject may exercise their right to object with automated means that use technical specifications. 6. If the personal data is processed for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1, the data subject has the right to object to the processing of personal data for reasons connected with his or her particular situation, unless the processing is needed for the performance of a task in the public interest. “Automated decision-making process concerning individuals, including profiling”: The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which generates legal effects in his or her regard or that may affects him or her significantly.