The processing of Personal Data is carried out in full compliance with the protections and rights recognized by the EU Regulation 2016/679 (hereinafter “GDPR”).

Who will process my data?
The Data Controller of the personal data provided through the website www.eustema.it is Eustema S.p.A. (hereinafter referred to as “Eustema” or the “Company”) with registered office in Rome at via Carlo Mirabello nr. 7, TAX CODE and VAT NUMBER no. 05982771007 contactable at the e-mail address: “privacy@eustema.it”. The Data Controller, for some treatments, will be supported by the company Eustema S.p.A. with registered office in Rome at Via Carlo Mirabello nr. 7, CF and P. IVA 15957891003, which will act as Joint Data Controller. The Joint Data Controllers EUforLEGAL S.r.l. and Eustema S.p.A. have indeed stipulated a co-ownership agreement concerning the data processing according to art. 26 of the GDPR. An extract of the agreement of co-ownership for the treatment of personal data is made available upon request by sending an e-mail to the address privacy@eustema.it.

What data will you process?
The data processed are general data such as:

• first and last name
• role and company organization
• e-mail address
• telephone number

Why do you need my data?
Your Personal Data, in case of Your specific consent, will be used for the purpose of sending commercial and promotional information about the services and products offered by Eustema or the Co-owner EUforLEGAL.
Your right to object, at any time, to such sending remains unchanged.
The legal basis, which legitimizes the above-mentioned processing, is the specific consent freely given by You, pursuant to Article 6 paragraph 1 letter a) of the GDPR, for purposes of sending informative material and/or marketing and promotional activities. The consent to data processing provided is always revocable without affecting the lawfulness of the processing based on the consent given before the revocation.

Nature of data conferment
Providing personal data is optional, however, partial or total failure to provide them will result in partial or total inability on our part to send you material and/or information.
How do you treat my data?
Personal data are processed both through paper media and through the use of electronic/computer systems and with the use of measures to ensure their confidentiality and to prevent access by unauthorized subjects.

Who will you share my data with?
The processing of the collected data is carried out by employees of the Data Controller and/or the Joint Data Controller or of Softjam S.p.A., a wholly-owned subsidiary of the Joint-owner Eustema S.p.A, identified and authorized for this purpose according to specific instructions given in compliance with applicable regulations.
The data collected, if necessary or instrumental to the purposes indicated above, may be processed by third parties appointed as external data processors or, as the case may be, communicated to the same as autonomous data controllers for the sole purpose of providing the information for which you have expressed interest.
The personal data provided may also be communicated to third parties who perform services related and instrumental to the execution of the purposes indicated above (e.g., mailing services) or to fulfill legal obligations in fulfillment of orders from public authorities authorized, or to enforce or defend a right in court. The data will not will not be disclosed to unspecified parties.

Will my data be transferred abroad?
The data are processed within the European Union. In case it is necessary to transfer the data outside the European Union, the Data Controllers commit to comply with the provisions of Chapter V of the GDPR and to do what is necessary to ensure adequate levels of protection and safeguarding of Personal Data.

How long will my data be stored?
Your data will be stored for a time no longer than is necessary for the achievement of the purpose for which they were collected and subsequently processed, in accordance with the provisions of the regulations in force without prejudice to the exercise by the person concerned of the rights provided for including those of opposition and cancellation.

What are my rights?
As a data subject, at any time and in accordance with Articles 15-22 of the GDPR, you may exercise your right to:

• request confirmation of the existence or non-existence of Your personal data;
• obtain information about the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data have been or will be disclosed and, when possible, the storage period;
• obtain correction and deletion of data;
• obtain the restriction of processing;
• obtain the portability of the data in a structured format from the Data Controller, commonly used and machine-readable, and
• transmit them to another data controller without hindrance;
• object to the processing even in the case of processing for marketing purposes;
• revoke consent to the processing of the data provided;
• object to automated decision-making related to natural persons, including profiling;
• file complaints with the Privacy Guarantor or other competent supervisory authority.

Request to exercise rights may be sent to the e-mail address “privacy@eustema.it”, specifying in the request the right the data subject wants to exercise.

If the user deems the processing of personal data breaches the regulations of the GDPR, is entitled to present a complaint to the Data Protection Authority.