Data Subject Rights Procedure
The General Data Protection Regulation (EU Regulation 2016/679) (hereinafter also “Regulation” or “GDPR”) grants Data Subjects the exercise of the following rights vis-à-vis the Data Controller:
- Right of Access per Article 15 of the GDPR – In order to request confirmation of whether or not personal data is being processed;
- Right to Rectification per Article 16 of the GDPR – To request rectification or supplementation of the data provided, if inaccurate;
- Right to Erasure per Article 17 of the GDPR – To request that the processed data be deleted (for example, if no longer necessary for the purposes for which the data was collected or in the event of revocation of consent or else if the processing is illegal);
- Right of Limitation of Processing per Article 18 of the GDPR – So that the data processed by the Data Controller may be marked in such a way as to limit its processing in the future;
- Right to Data Portability per Article 20 of the GDPR – In order to achieve the receipt of personal data or the transmission of the data to another Data Controller, in a structured format that is commonly used and readable by an automatic device;
- Right to Object per Article 21 of the GDPR – To object at any time to the processing of data, unless there are legitimate and prevailing reasons to proceed with the processing (for example, for the exercise or defence in court).
Categories of Data Subjects
For the purposes of this procedure, the categories of Data Subjects are grouped below by area of competence, whose data are processed by Scart S.r.l. located at Nucleo Pianacci 28 – 52011 Bibbiena (AR), having VAT no. 00113990519 and email address info@grupposcart.com, as Data Controller, as identified in the Data Processing Register drawn up pursuant to Article 30 of the GDPR:
- Data Subjects related to the HR Area – Candidates, employees, family members of employees and former employees of the Data Controller, as well as freelancers who conduct activities for the Company and employees of third parties who provide services in favour of the same;
- Data Subjects associated with the Administration Area – Customers, suppliers, professional firms, consultants, in relation to the management of the contracts entered into with them and the relative execution of all activities related thereto, instrumental and/or complementary to the management of the relationship;
- Other Data Subjects – Web users as well as all individuals, external to the Data Controller and in general any natural person for whose personal data Scart S.r.l. is the Data Controller, not being attributable to the previous categories.
Exercise of the right by the Data Subject and receipt of the request by Scart Srl Group companies
The exercise of rights is free of charge, it being noted:
- The exercise of the rights is conditional on the prior identification of the Data Subject who must include a copy of a valid identification document together with the request;
- This can also be presented by means of a delegate with a specific mandate/proxy;
- To exercise the rights, a request can be sent via certified email to scart.imballaggi@pec.it;
- Requests can also be sent by registered letter with return receipt to Scart S.r.l. at Nucleo Pianacci 28 – 52011 Bibbiena (AR);
- Alternatively, a certified email can be sent to INSERT ADDRESS;
- Following receipt of the request, it will be the responsibility of Scart S.r.l. to verify the identity of the Data Subject as well as handle the request submitted;
- Within 30 days from the request (extendible by 60 days in cases of complexity), the Data Controller will respond to the request submitted by the Data Subject.
