8. Rights of the data subject
As Data Subject, you have the rights set out in art. 7 of the Italian Data Protection Code and art. 15 of the GDPR, more precisely the right to:
i. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and the disclosure thereof in an intelligible form;
ii. obtain the following information: a) source of personal data; b) processing purposes and methods; c) logic applied in the event of processing performed with the aid of electronic means; d) details of the data controller and the data processor, and the designated representative according to art. 5, paragraph 2 of the Italian Data Protection Code and art. 3, paragraph 1 of the GDPR; e) persons or entities or categories of persons or entities to whom the personal data may be disclosed or who may become aware of it in their capacity as designated representative within the State, processors, or persons tasked with data processing;
iii. obtain: a) the updating, rectification, and – when interested therein – the supplementation of the data; b) the erasure, anonymisation, or blocking of data processed in breach of the law, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed; c) a statement confirming that the operations stated in letters a) and b) have been notified (also regarding content) to those to whom the data has been disclosed or disseminated, except in the event that such fulfilment proves impossible or would involve a disproportionate effort with respect to the protected right;
iv. object, in full or in part: a) on legitimate grounds, to the processing of your personal data, even if related to the purpose for which it is collected; b) to the processing of your personal data for the purpose of sending advertising or direct sales material or to carry out market research or business communication activities, by means of automated systems without an operator (for example e-mails) and/or through traditional marketing means such as telephone and/or postal service. Please note that your right to object to processing set out in point b) above, for direct marketing purposes through automated methods covers also traditional means and that in any case there is also the possibility to exercise the right partially. You may therefore decide to receive communication only by means of traditional methods or to only receive automated communications or no type of communication at all.
Where applicable you have the rights provided for by 16-21 of the GDPR (right of rectification, right to be forgotten, right of restriction of processing, right to portability of contractual data and raw navigation data, right of objection), as well as the right to lodge a complaint with the Data Protection Authority.