K-Tech S.r.l., with registered office at Via Marco Atilio n. 23, 00136 Rome, as the Data Controller (hereinafter also referred to as the "Controller"), pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"), provides the following information on the processing of personal data.
1. Data Controller
K-Tech S.r.l., with registered office at Via Marco Atilio n. 23, 00136 Rome; phone: +39 06 68 301 467; E-mail: privacy@k-tech.it; PEC: k-tech@arubapec.it.
2. Categories of data processed
The Controller processes exclusively personal data relating to the professional sphere of the data subject, such as:
- first name and surname;
- professional email address;
- name of the professional studio, company or organisation of affiliation;
- qualification or professional activity performed;
- further publicly available professional data.
3. Source of data
Personal data have not been collected directly from the data subject.
They have been obtained from publicly accessible and legitimately consultable sources, such as websites of professional studios, companies or organisations or other public sources related to the professional activity of the data subject.
At the request of the data subject, the Data Controller will provide more specific information regarding the concrete source of data acquisition.
4. Purpose of processing
Personal data is processed in order to present products, services, and software solutions offered by K-Tech S.r.l. that may be relevant to the professional activity carried out by the recipient.
5. Legal basis for processing
The processing is carried out pursuant to art. 6, par. 1, lett. f), GDPR, based on the legitimate interest of the Data Controller to establish a professional contact aimed at presenting potentially relevant products and services concerning the professional activity carried out by the recipient.
While ensuring that this interest has been subject to prior assessment and balancing with the rights and fundamental freedoms of the data subjects, in any case, the latter have the right to object to the processing carried out for such purposes at any time.
6. Methods of processing
Data is processed using electronic and telematic tools in compliance with the principles of lawfulness, fairness, transparency, minimisation, and security as provided by the GDPR.
No profiling activities or automated decision-making processes that produce legal effects or similarly significant effects concerning the data subject are carried out.
7. Recipients of the data
Data may be processed by:
- authorised personnel of the Data Controller;
- providers of IT and technological services;
- companies responsible for managing IT infrastructures;
- legal, tax, or IT consultants.
Such subjects operate, as applicable, as data controllers or independent holders.
8. Data retention
Personal data will be retained for the time strictly necessary to pursue the purposes indicated above and, in any case, for a period not exceeding twenty-four months from the first commercial contact, unless the right to object is exercised or different legal obligations apply.
In the event of an objection, the Data Controller may retain only the data necessary to ensure compliance with the request not to receive further communications.
9. Transfer of data to third countries
Personal data are not intentionally transferred outside the European Economic Area. If this becomes necessary for technical or organisational needs, the transfer will take place in compliance with Articles 44 and following of the GDPR and by adopting the guarantees provided by the applicable regulations.
10. Rights of the data subject
The data subject may exercise at any time the rights provided for in Articles 15 and following of the GDPR, including:
- access to personal data;
- rectification of inaccurate data;
- deletion of data;
- restriction of processing;
- objection to processing;
- data portability in cases provided for by law.
Requests can be sent to the email address privacy@k-tech.it.
11. Right to object to commercial communications
The data subject has the right to object at any time and free of charge to the processing carried out for the purposes of commercial communication.
In that case, the data will not be further used for such purposes.
12. Complaint to the Supervisory Authority
The data subject has the right to lodge a complaint with the Data Protection Authority pursuant to Article 77 GDPR, as well as to exercise any further remedies provided for by current legislation.