Data Controller and Reference Legislation

The data controller is Advanced Group Srl with registered office in Viale Lombardia 12, 20081 Cassinetta di Lugagnano (MI), Italy, hereinafter ‘Advanced Group’, for brevity. Advanced Group processes personal data in compliance with the European Data Protection Regulation (hereinafter ‘GDPR’, for short). Pursuant to Articles 12, 13 and 14 of the GDPR, the Data Controller provides this information on the processing of personal data carried out by it.

Area of application
This policy applies to Advanced Group and its website and personal data relating to individuals. Advanced Group cannot and is not in any way responsible for the processing of independent third party data and third party sites that can be reached from any links on Advanced Group’s site. Please note that Advanced Group is a ‘Business-to-Business’ (B2B) company:

• As data controller, Advanced Group systematically and predominantly processes data of legal or public persons,
• European legislation (GDPR) applies to personal data of natural persons only,

Any personal data of natural persons will be processed by the Data Controller Advanced Group, electronically or manually, in full compliance with the GDPR and subject to appropriate security measures as required by law and in accordance with the best industry standards (ISO27002, ISO 29134, NIST 800-123).  Data and information of legal entities are in any case treated confidentially and subject to the same security measures and compliance with the same standards.

Purpose of processing without express consent
Any personal information you provide to us without express consent, whether by web or e-mail or otherwise, is optional and the result of your free choice. This information will only be processed by Advanced Group for the purposes of: (a)responding to and fulfilling your requests, (b)fulfilling any contractual obligations we may have, (c)pursuing legitimate interests of the Data Controller [example: defending itself in legal proceedings], (d)fulfilling legal and tax obligations.

Aims of processing with express consent
Only with the express consent of the person concerned will Advanced Group process personal data of natural persons for promotional and commercial purposes: e.g. to inform you of new product or service offers.

Period of retention of personal data
Advanced Group will retain personal data for the period necessary and sufficient for the stated purpose or as required by legal and tax regulations or until the data subject requests their deletion (see also Rights of the Data Subject).

Data subject’s rights
The natural person to whom the data refer (‘data subject’) has the following rights:

• revoke the holder’s consent at any time*.
• file a complaint with the Supervisory Authority (Garante),
• request access to data from the Data Controller in order to verify its accuracy and, if necessary, request its correction,
• ask the Data Controller for the portability of their data in an intelligible format (.csv),
• ask the Controller to delete** your personal data

*   this does not affect the lawfulness of the processing before revocation

** the request for deletion will be complied with if there is no other legal basis for retaining the data: e.g. data necessary for the performance of a contractual or regulatory obligation on our part.

Personal data categories
Unless otherwise freely provided by the data subject, Advanced Group only processes ‘common’ personal data. Systematic and continuous processing of ‘special data’ (i.e.: sensitive, medical, judicial, etc.) is excluded.

Personal data sources
Advanced Group may receive your personal data from you by your own free choice (via email, website, telephone, fax, etc.) or from public sources (public registers, social media, etc.). Whatever the source, Advanced Group will not process the personal data of individuals for promotional or commercial purposes without their explicit consent.

Contact / Questions
contact the Data Controller to exercise your rights or to ask for clarification.