(pursuant to artt. 13 e 14 of Regulation 2016/679/UE)

violAssociates as Data Controller pursuant to and for the purposes of the Europea Regulation 2016/679/EU (hereinafter referred to as "Regulation"), hereby informs that the processing of personal data will be based on principles of correctness, lawfulness, transparency and protection of the confidentiality and rights of data subjects. Personal data will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligation therein
Purpose of the treatment: in particular the data will be processed for the following purposes related to the implementation of obligation related to legislative and/or contractual obligation set out below
  Tax and accounting mandatory obligations;
  Management of customers and suppliers;
  Management of relationship during purchase or sale operation;
  Litigation management and credit recovery;
  Quality management
  Scheduling of activities;
  History of supplies and sales.
The processing of functional data for the fulfillment of legislative and regulatory obligations is necessary for the correct management of the relationship. The Data Controller also announces that any non-communication, or incorrect communication, of one of the mandatory information, may cause the inability of the Data Controller to guarantee the adequacy of the treatment itself.
Processing methods: personal data may be processed in the following ways
  Entrusting processing operation to third parties;
  Treatment by electronic means;
  Manual processing by means of paper archives.
Each treatment takes place in compliance with the methods referred to in articles 6, 32 of the Regulation and through the adoption of the appropriate security measures provided.
The data will be processed only by expressly authorized by the Data Controller personnel, or by expressly appointed as Responsible third parties, for the relevant treatment pursuant to Art. 29 of the Regulation.
Communication: the data will be communicated exclusively to competent and duly appointed subjects for the performance of the necessary for the correct management of the relationship services, with a guarantee of protection of the rights of the interested party.
  Consultants and freelancers, also in associated form;
  Banks and credit institution;
  Public and/or private subjects for whom the communication of data is mandatory or necessary for the fulfillment of legal obligations or is in any case functional to the administration of the relationship;
  Freight Forwarders, Transporters, Post Offices, Logistics Companies and similar.
Retention period: it should be noted that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Art. 5 of the GDPR, the data retention period is equal to a period of time not exceeding the achievement of the purpose for which they are collected and processed for the execution and fulfillment of the contractual purposes, subject to compliance with the required mandatory times From law.
Dissemination: there will be no dissemination of personal data by violAssociates except fot what concerns the use of photographic reports of the creations that can be published on its website. The data may also be stored at the Internet Providers that provide hosting and e-mail services, located within the European Union.
The interested party has the right to obtain from the Data Controller the cancellation, communication, updating, rectification, integration of personal data concerning him, as well as in general he can exercise all the rights provided bu the articles From 15 to 22 of the Regulation indicated below.

Article 15 – Right of access by the data subject
1.   The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
(d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(f) the right to lodge a complaint with a supervisory authority;
(g) where the personal data are not collected from the data subject, any available information as to their source;
(h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
2.   Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
3.   The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
4.   The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

Article 16 - Right to rectification;
Article 17 - Right to erasure («right to be forgotten»);
Article 18 - Right to restriction of processing;
Article 19 - Notification obligation regarding rectification or erasure of personal data or restriction of processing;
Article 20 - Right to data portability;
Article 21 - Right to object;
Article 22 - Automated individual decision-making, including profiling.
To exercise their rights insured by the aforementioned articles, the interested party turns to: