7. RIGHTS OF THE DATA SUBJECT
Pursuant to Articles 13, paragraph 2, letters (b) and (d), 14, paragraph 2, letters c) and e), 15, 16, 17, 18, 19, 20 and 21 of the GDPR, the Data Subject has the right to:
a) request to the Company access to the his/her persona data, their rectification and erasure, the limitation of the processing, or to object to their processing;
b) the portability of the data;
c) file a claim with the Authority for the protection of personal data, in accordance with the procedures and indications available on the official website of the Authority www.garanteprivacy.it
Any rectification, erasure or limitation of the processing made on request of the Data Subject – unless impossible or requiring an unreasonable effort – will be notified by the Company to those to whom the personal data have been communicated. The Company may communicate their names to the Data Subject, if so requested by the Data Subject.
The exercise of rights is not subject to any form of constraint and is free. To exercise the rights, the Data Subject may contact the Data Controller by sending a notice to the above mentioned address or an e-mail to firstname.lastname@example.org
For a concrete and prompt implementation of the Data Subject rights under Articles 15 to 31 of the GDPR, and in accordance with Article 12 of the GDPR; the Company has adopted appropriate measures to provide all required information and communications in a concise, transparent, intelligible and easily accessible form, using clear and plain language. The Company also undertakes to provide the information in writing or by other means and, when requested by the Data Subject, also orally, provided that the identity of the Data Subject is proven by other means.
The Company shall also provide the Data Subject with information on the action taken on a request under Articles 15 to 21 of the GDPR. The Company shall provide the response without undue delay and, in any event, within a reasonable time, taking into account the complexity and number of the requests.
If the Company does not take action on the request of the Data Subject, the Company shall inform the Data Subject without delay of the reasons for not tasking action and on the possibility of lodging a complaint with the Authority for the protection of personal data and seeking a judicial remedy.