Regulations

The owner of the treatment and the reference legislation
The owner of the treatment is Anthilla Srl with headquarters in Corso della Vittoria 147, Caronno Pertusella, Varese (Italy), hereinafter referred to as “Anthilla”, for brevity. Anthilla processes personal data in compliance with the European legislation on the Protection of Personal Data (hereinafter “GDPR”, for brevity). Pursuant to art. 12, 13 and 14 of the GDPR, the Data Controller provides this information on the processing of personal data made by it.

Scope of application
This information applies to Anthilla and its website and personal data relating to natural persons. Anthilla cannot be and is in no way responsible for the processing of independent third parties and third party sites that can be reached from any links on the Anthilla site. Taking into account that Anthilla is a Business-to-Business (B2B) company:

• as Data Controller, Anthilla systematically and mainly processes data of legal or public persons,
• the European legislation (GDPR) applies to personal data of natural persons only,

any personal data of natural persons will be processed by the Owner Anthilla, electronically or manually, in full compliance with the GDPR and subjected to adequate security measures as required by legislation and according to the best industry standards (ISO27002, ISO 29134, NIST 800-123) . Data and information of legal persons are however treated confidentially and subjected to the same security measures and adequacy to the same standards.

Purpose of processing without express consent
All personal information that you will provide us without express explicit consent, via web or email or otherwise, are optional and the result of your free choice. This information will be processed solely by Anthilla for the purpose of: (a) respond and satisfy your requests, (b) fulfill our contractual obligations, (c) pursuing the legitimate interests of the owner [example: defending oneself in the registered office] (d) fulfill legal and tax obligations.

Purpose of the treatments with express consent
Only after express express consent of the interested party, Anthilla will process personal data of natural persons for promotional and commercial purposes: for example to inform you of new offers of products or services.

Retention period of personal data
nAnthilla will retain personal data for the period necessary and sufficient for the purposes declared or foreseen by legal and tax regulations or until the interested party requests their cancellation (see also Rights of the interested party).

Rights of the interested party
The natural person to whom the data refers (“interested”), has the following rights:

• withdraw the consent to the owner at any time *
• propose a complaint to the Supervisory Authority (Guarantor),
• ask the Data Controller to access the data to verify its accuracy and possibly request its correction,
• ask the Data Controller for the portability of their data in an intelligible format (.csv),
• ask the Owner for the cancellation ** of their personal data

* this does not affect the lawfulness of the processing beforethe revocation

** the cancellation request will be satisfied if there are no other legal bases that oblige to keep the data: for example data necessary for the execution of our contractual or regulatory obligation.

Categories of personal data
If not otherwise freely provided by the interested party, Anthilla only processes “common” personal data. The systematic and continuous treatment of “particular data” (ie sensitive, medical, judicial, etc.) is excluded.

Sources of personal data
Anthilla can receive your personal data from you for your free choice (via email, website, telephone, fax, etc.) or from public sources (public registers, social networks, etc. .). Whatever the source, Anthilla will not process the personal data of individuals for promotional or commercial purposes without their explicit consent.

Contacts / Questions
contact the Data Controller to exercise your rights or to ask for clarifications.