PROTECTION OF PERSONAL DATA AND PRIVACY DISCLOSURE

Pursuant to article 13 of EU Regulation 2016/679 (GDPR), CUSTOMERS are hereby informed that the processing of the data provided by them to CLOUDITALIA is required in order to allow the latter, whether directly or through third parties, to fulfil the obligations arising from subscription to and subsequent provision of the service, or obligations connected thereto as provided by the Law and the applicable Regulations.

Data Processing means any operation or set of operations, executed with or without automated processes and applied to personal data or sets of personal data, such as the collection, registration, organisation, structuring, preservation, adaptation or modification, extraction, consultation, usage, communication by means of transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction. The data shall be processed using instruments that ensure the security as well as the confidentiality thereof and may also be conducted through automated instruments that memorise, manage and transmit the data itself.
The data controller is Clouditalia Telecomunicazioni Spa, a Single Shareholder company, represented by its legal representative, with registered office at Via Piero Calamandrei 173, Arezzo. Pursuant to article 37 of the GDPR, the Data Protection Officer (DPO) can be contacted at the certified e-mail address privacyclouditalia@legalmail.it or the address of the registered office indicated for the data controller, or by calling the telephone number 05751944401.

The persona data provided by you upon registration of your Account will be processed by Clouditalia for:
A) PRE-CONTRACTUAL, CONTRACTUAL PURPOSES AND FULFILMENT OF OBLIGATIONS AS PROVIDED BY THE LAW, REGULATIONS OR EU REGULATIONS
1) Checks prior to conclusion and execution of the Contract that may involve archiving of personal data provided by the interested party and usage thereof (the party interested in subscribing to the Services is required to first register on the website and crate an account, which involves sending an identification document to CLOUDITALIA based on which the latter will carry out checks prior to activating the service and CLOUDITALIA archives and uses the data for this purpose).
2) Creation of an Account and execution of the contract.
3) Provision of the Services requested as part of the Clouditalia Simfonia offer (including supplementary and optional services).
4) Communication of events which are strictly connected to the Clouditalia Simfonia service, such as, for example: communications relative to the functionality of the assistance and/or support service, payment status, blockage of the card, etc.
5) Management of the administration and technical parts of the contractual relationship (such as the billing of services, the handling of complaints and disputes, sending of service communications, collection of receivables, prevention of fraud and/or illegal activities, technical assistance and support);
6) Protection of credit, the prevention of fraud and/or illegal activities, including through banks and credit institutions, factoring companies or assignees of the receivables, professionals that provide support in the event of dispute, as well as for the implementation, under the control of the Sector Authority, control and monitoring systems for receivables which may be shared with other Operators.
7) Personal data will also be processed for fulfilment of obligations as provided by the law, a regulation, the European Union laws or an order of the Authorities and for statutory, accounting and tax purposes.
8) Exercise of the rights of the Controller (for example the right of defence in court).
The provision of personal data is required for the reasons indicated above and the processing thereof does not require the consent of the CUSTOMER. Any refusal to provide this data will result in the impossibility of initiating a contractual relationship and we will therefore be unable to provide the requested Services.
b) OTHER PURPOSES
1) Communication of new initiatives and commercial, promotional and advertising offers referring to the Clouditalia Simfonia Service or Services and sending Newsletters using automated instruments (e.g. e-mail, SMS, etc.) and/or traditional methods (such as telephone calls, ordinary mail, etc.)
2) Communication of new initiatives and commercial, promotional and advertising offers referring to the Services of Clouditalia Telecomunicazioni Spa and sending newsletters using automated instruments (e.g. e-mail, SMS, etc.) and/or traditional methods (such as telephone calls, ordinary mail, etc.)
We hereby inform you that in order to use the personal data for the purposes under point 1), letter b) and carry out the activities indicated therein, it is not necessary to request your consent if you have provided your e-mail account when registering your Account. Pursuant article 130, par. 4 of the Personal Data Protection Code (Legislative Decree 196/2003), where for the direct sale of its products or services, the data controller uses the email information provided by the party in question, the data controller is entitled not to request the consent of the latter party, provided that the products and/or services are similar to the products and/or service that were sold to the party.

We therefore inform you that by registering on https://www.simfonia.com/registration/ and providing your email information to create an Account in order to use the Clouditalia Simfonia service(s) or, subsequently, while the Clouditalia Simfonia Service(s) is/are in use by you, you are entitling the data controller to use the information you provided for the purposes under point 1) of letter b), without any additional consent being required from you.
We also inform you that upon receiving any communication that occurs for the purposes indicated under point 1), letter b), you are entitled to oppose processing by following the instructions provided with every message. This opposition can also be partial, referring to your wish to receive communications only via traditional instruments.
We inform you that as long as your Account has not been revoked, notwithstanding your right to oppose processing, you will receive the communications and Newsletters under point 1), letter b) above.

We hereby inform you that in order to use the personal data for the purposes under point 2) letter b) and carry out the activities indicated therein, you must provide your consent upon registration of your Account.
The personal data will be processed by specifically tasked Clouditalia personnel. For some types of processing, Clouditalia may also use third parties who must, in any case, follow the instructions specifically provided by Clouditalia to ensure the security and confidentiality of the date provided to them. The personal data shall be processed using instruments that ensure the security as well as the confidentiality thereof and may also be conducted through automated instruments that memorise, manage and transmit the data itself. Clouditalia is the controller of the data provided and is therefore responsible for any updates or amendments to the data, based on changes it is informed of.

Notwithstanding deletion of telephone traffic data which is not required for invoicing or management of the interconnection payment, pursuant to article 123 of the Personal Data Protection Code (Legislative Decree 196/2003), the data relative to the telephone traffic (including any Logs or location related information) will be preserved for billing or payment of the connections for a maximum period of 6 (six) months from the invoicing date, or the date the payment became due. However, in the event of a dispute, the data may be kept on file for a longer period, until the relative right has prescribed.
The telephone traffic data will moreover be preserved for a further 24 (twenty-four) months from the communication date, for ascertainment and prevention of crime. Data relative to unanswered calls is preserved for 30 (thirty) days. The “Preservation times” indicated above are pursuant to the indications of Legislative Decree 196/2003 (the Privacy Code), but may vary based on various European Directives that may be issued.
Currently, in implementation of article 20 of (EU) Directive 2017/541 issued by the European Parliament and Council on 15 March 2017 on combating terrorism, for ascertainment and repression of the crimes listed under articles 51, par. 3-quater and 407, par. 2, letter a) of the Italian code of criminal procedure, the preservation time for telephone and email traffic data and the data which is relative to unanswered calls is 72 months, in derogation of the provisions set forth in article 132, paragraphs 1 and 1-bis of the personal data protection code, pursuant to Legislative Decree 196 of 30 June 2003.
Except as specified above, the data will be preserved for the Purposes indicated under (a) until cancellation of the account through which the customer is always afforded the option of receiving services. Moreover, the ten-year periods during which only documents and the relative data of a statutory, accounting and fiscal nature can be preserved remain, pursuant to article 2220 of the Italian Civil Code, as it is applicable. The information collected for the purposes indicated under letter b) point 2 will be preserved for no more than 2 years from the date they were collected, or a shorter period, if the interested party revokes his or her consent.
The CUSTOMER hereby declares that he/she is aware of his/her rights pursuant to article 15 of EU 2016/679 and is in particular the CUSTOMER is aware of his/her right:
– to obtain confirmation of the existence or lack thereof of personal data concerning him/her, whether recorded or not, and notification of the data in an intelligible form;
– to obtain information regarding the original of the personal data, the categories of personal data processed, the preservation period of the personal data or, if not possible, the criteria used for determining this period, the purposes of and procedures applied to the processing, the logic applied if the data is processed using electronic instruments, the identification information of the data controller, the data processor designated pursuant to article 37, the individuals or categories of individuals to whom the personal data may be communicated or which could become aware of the data in their capacity as the designated representative in the Country, parties who are responsible or in charge, and if the information is transferred to a third country or an international organisation, the right to be informed of the existence of adequate guarantees pursuant to article 46, relative to the transfer of the data.
– to ensure the updating, correction or, if necessary, integration of the data, deletions, transformation into anonymous form or blocking of data which is processed in violation of the law, including when preservation is not necessary in relation to the purposes for which the data was collected or subsequently processed, the limitation of the processing of personal data that refers to the customer or to oppose processing thereof;
– to wholly or partially oppose processing of personal data that refer to him or her, even if referring to the purpose of the collection, the dispatching of advertising material or for direct sales efforts or for market research surveys or marketing communications;
– to lodge a complaint with a competent authority.
The deletion or amendment of the data will take place according to the technically required times for each of the services listed. You may exercise the rights described above by sending a request via registered letter to the following address: Clouditalia Telecomunicazioni Spa a Socio Unico – Via Piero Calamandrei 173 – 52100 Arezzo; or via certified email to nimbus2011@legalmail.it.