C-WAY S.R.L. UNIPERSONALE hereby provides the information pursuant to Article 13 of EU Regulation 2016/679 (GDPR) regarding the processing of personal data provided by you when filling out this form.

Data Controller

The Data Controller of personal data is C-WAY S.R.L. UNIPERSONALE, VAT and Tax ID 03789020108, with registered office in Genoa, Ponte Degli Spinola Sn, ZIP code 16128 (GE), represented by its legal representative pro tempore (hereinafter referred to as "Company" or "Controller").

Data Protection Officer

The Data Protection Officer (DPO) can be reached at the email address: dpo@c-way.it or by regular mail by writing to the Company's office, addressed to the same.

Categories of Data Subject to Processing

The Controller will process various types of your personal data, including, but not limited to:

• Personal data (first and last name)
• Contact details (email address).

Purpose of Processing

Your personal data will be processed, including through IT and electronic tools, in order to send you, with your consent, information about the Company’s services, products, and commercial initiatives, through the sending of our newsletter to your email address.

Legal Basis for Processing

The legal basis justifying the processing for the aforementioned purpose is your consent.

Consequences of Not Providing Personal Data

Failure to provide your personal data will result in the Company being unable to send you communications via the newsletter service.

Retention Period for Personal Data

Your data will be retained for the aforementioned purpose for a duration of 24 months from the date of their communication.

Right to Object to the Sending of Commercial Information

You may request at any time that no further commercial communications be sent to you via the email address you provided when subscribing to the newsletter by clicking the “unsubscribe” button included at the bottom of each communication or by writing to the email address privacy@c-way.it.

Data Recipients

Access to your personal data will be granted to the website manager and the newsletter service provider, each of whom acts as a Data Processor appointed by the Controller pursuant to Article 28 of the GDPR. A complete list of appointed Data Processors, which is inherently variable, is available in an always updated version upon request to the Controller by writing to privacy@c-way.it at any time.

Additionally, employees of the Company, defined as authorized processors, may also have access to your personal data if their job roles require it. Each authorized processor is specifically identified, authorized, and trained, and acts based on specific instructions provided by the Company regarding the purposes, methods of processing, and security measures to be adopted for the protection of personal data.

Rights of the Data Subject

The Controller informs you that as a Data Subject, you have the right, under Articles 15 and following of EU Regulation 2016/679, and within the limits prescribed therein, to:

• Obtain data and information about the processing, in particular regarding the type of personal data processed, the purposes for which the personal data are processed, the duration of the processing, and the parties to whom the data are communicated (the so-called right of access);
• Obtain rectification or completion of inaccurate personal data concerning you (the so-called right of rectification);
• Obtain the deletion of personal data concerning you in the following cases: (i) the personal data are no longer necessary for the purposes for which they were collected; (ii) you have revoked your consent to the processing of personal data if they are processed on the basis of such consent; (iii) you have objected to the processing of personal data concerning you if they are not processed for a legitimate interest of the Controller; (iv) the processing of personal data is not compliant with the law. However, the retention of your personal data by the Controller is lawful if necessary to allow the Controller to comply with a legal obligation or to ascertain, exercise, or defend a right in court (the so-called right to erasure);
• Obtain that personal data concerning you are only retained without further use in the following cases: (i) you contest the accuracy of the personal data, for the period necessary to allow the Controller to verify the accuracy of such personal data; (ii) the processing of personal data is unlawful and you oppose the deletion of the personal data by the Controller; (iii) the personal data are necessary for the ascertainment, exercise, or defense of a right in court; (iv) you have opposed the processing and are awaiting verification regarding the potential prevalence of the legitimate reasons of the Controller over your reasons (the so-called right to restriction);
• Object at any time to the processing of personal data (the so-called right to object);
• Receive in a commonly used, machine-readable format, the personal data concerning you, if they are processed based on a contract or your consent, and/or request to transfer the data to another data controller, where feasible (the so-called right to data portability).

The aforementioned rights may be exercised upon your request by sending an email to the dedicated address privacy@c-way.it or by writing via regular mail to C-WAY S.R.L. UNIPERSONALE, in Genoa, Ponte Degli Spinola Sn, ZIP code 16128 (GE).

You also have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to Lodge a Complaint

If you believe that the processing of your personal data by the Controller occurs in violation of the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the Privacy Authority, as provided by Article 77 of EU Regulation 2016/679 (by email to: garante@gpdp.it or by mail to the Privacy Authority for the protection of personal data, located in Rome (Italy), Piazza Venezia 11, Scala B, ZIP code 00187), or to take appropriate legal action, as provided by Article 79 of EU Regulation 2016/679.

The Managing Director

C-WAY S.R.L. UNIPERSONALE