Privacy Policy on the Processing of Personal Data pursuant to EU Regulation 2016/679

EasyRoi Srl, with registered office at Viale Abruzzi, No. 13/A, – 20131 – Milan VAT number 11807140964, as the Data Controller, in compliance with the obligation to inform data subjects about the essential elements of the processing of personal data, hereby specifies the methods and purposes of personal data processing.
Processing refers to any operation or set of operations performed on personal data, including collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure, and destruction of personal data.

Purposes and methods of processing

In the context of carrying out professional functions related to investment selection within the national territory and analysis of its potential, personal data collected directly from the data subjects are subject to processing.
The processing of personal data is carried out using paper-based and computerized tools, with methods aimed at preventing violations of the data subject’s rights, fundamental freedoms, and dignity. The data is stored only for the necessary time to provide the services or in compliance with legal requirements. Fiscal documents will be securely stored within the fiscal assessment period.

Legal bases for processing

Area Agents:
The data collected by filling out the “Area Agents” form will be processed in accordance with EU Regulation 2016/679, Article 6(1)(b), based on the legal necessity for the performance of one or more specific purposes.

Contacts:
The data collected by filling out the “Contacts” form will be processed in accordance with EU Regulation 2016/679, Article 6(1)(b), based on the legal necessity for the performance of one or more specific purposes.

Newsletter Subscription:
With your consent, you authorize EasyRoi Srl to periodically send informative newsletters that may include coupons, discounts, or promotional offers.

Any processing not specified above will be carried out in accordance with Article 6(1)(a) with the consent of the data subject.
Article 4, paragraph 11 of EU Regulation 2016/679 defines consent as “any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data.”

Mandatory or optional nature of data provision

Providing data is mandatory for processing carried out under Article 6(1)(b). Refusal, even partial, may result in the impossibility or ineffectiveness of the professional service. Personal data processed based on the legal basis under Article 9(2)(b) and data processing based on explicit consent are optional.

Scope of Communication and Disclosure

All formally designated and authorized individuals involved in the processing may have access to your data according to their respective authorization profiles.
Personal data belonging to “special categories of personal data” will not be transferred or disclosed to third parties.
The provided personal data will not be disseminated and will not be processed outside the European Union.

Rights of the data subject

The data subject has the right to exercise the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of EU Regulation 2016/679 at any time. In particular, the data subject has the right to obtain confirmation of the existence of the provided data (content and origin), verify the purposes of the processing, the recipients or categories of recipients to whom the personal data has been or will be disclosed, the retention period, the right to request rectification, erasure or restriction of processing, the right to lodge a complaint with a supervisory authority, the existence of automated decision-making and the logic used, the right to be forgotten, the right to data portability, and

to know if the data is transferred to a third country.
To exercise these rights, the data subject can contact the Data Controller by writing to: privacy@easyroi.com.

Rev.1.0 dated 02/05/2022.