Inthefollowingchaptersyouwillfindinformationabouthowyourpersonaldata aretreated.Yourdatamaybecollectedduringyournavigationonourwebsiteoras aconsequenceoftheservicesthatweprovideyou.Inordertotakeadvantageofall theservicesofferedbyourwebsite,itisnecessaryforustocollectandtreatyour personaldata.Thetreatmentofyourpersonaldatamayconsistincollecting, organising,storing,analysing,interpreting,modifying,selecting,comparing,using, connecting,blocking,communicating,cancellinganddestructingdata.The treatmentofyourpersonaldatafollowstheprinciplesoflawfulnessand correctness,incompliancewiththecurrentlawandEURegulation2016/679ofthe EuropeanParliamentandCouncil.Withthisprivacynotice,weliketoinformyou aboutthedatawecollect,whythecollectionisnecessary,andalsoofyourrightsin connection with the treatment of your data.
Owner of the Treatment
TheOwneroftheTreatmentofyourpersonaldataonthiswebsitesiteisVeiderhof diWeitlanerPaulPeterwithlegalofficesatHieblerweg1,I-39038SanCandido,VAT no. IT01102310214. For more information, please contact us using the following addresses:Tel: +39 0474 910032Fax: +39 0474 910032E-Mail: info@veiderhof.itInternet: www.veiderhof.it
Purposes of the Treatment
We treats your data for the following purposes:a.to fulfil legal obligationsb.to fulfil contractual obligationsc.to make available the requested information and deliver the agreed servicesd.to monitor system efficiencye.tocarrymarketingactivities,suchasforwardingcommercialinformationand advertising material, market research activitiesf.to safeguard obligations (e.g.: payments)g.toascertainthelevelofsatisfactionforthequalityoftheproductsandservices offered
Type of Treatment
Yourpersonaldataaretreatedmanually,butalsoelectronically,mainlythroughthe useofautomatedprocesses,dependingontheobjectives.Inthiscase,we specificallyusedatabasesandcomputerisedplatformsthatmaybemanagedby bothusandthirdparties.Eachtypeoftreatmentguaranteestherespectandthe confidentialityofthedatatreated.Westoresuchdataandgeneralinformationin thedatabaseandintheserversaslogfiles.Inordertoprovideyouwithaunique navigationexperience,weneedtocollectsometechnicaldatathatarenecessary for the correct operation of the website:•Browser type and browser version•Operating system•The „referrer“ website•The on our website linked webpages•Date and time of access•IP address•Other similar data and informationThelegalbasisforthistypeoftreatmentisarticle6oftheGDPR.Byaccessingthe website,computerisedsystemsandmanagementsoftwareautomaticallyand indirectly collect and/or manage this number of data and information. Atfirst,thecollectionofthesedatainanonymousformatisstatic.However,later onthedataaretreatedtoensureahighlevelofprotectionandsafetyforanydata that we collect.
Period of data conservation
Incompliancewithcurrentlaws,theownerofthetreatmenthasdefineddifferent periods of data conservation depending on their usage:1.Asfarashandlingandansweringyourquestionsaboutproductsandactivities, yourpersonaldatawillbestoredforaperiodoftimestrictlynecessaryfor processing your request.2.Asfarasmanagingactivitiesconnectedwiththenavigationthroughour website,yourpersonaldatawillbestoredforaperiodoftimestrictlynecessary to satisfy your requests.3.Asfarasinternalmanagementandoperationalactivities(forexampletimeof conservationofinvoices,administration,andtaxinformation),yourpersonal datawillbetreatedforaperiodoftimeinlinewiththelegalrequirementsfor the specific purpose.4.Asfarasthehandlingofdisputesandlitigations,yourpersonaldatawillbe storedforthewholetimestrictlynecessaryforpursuingsuchmatters,andin any case not beyond the applicable prescription limits.
Use of Cookies
Inordertoconstantlyimprovethenavigationofourwebsite,ourcompanyuses cookies.Cookiesaretextfilescontainingdata,whichduringthenavigationtoa websitearestoredinthevisitor’scomputerthroughthebrowser.Thestorageof thesedataisnecessaryfortheaccessrecognition.Youcandeleteanycookies storedinyourcomputeratanytimethroughthesettingsofyourbrowser,oreven setthebrowsersothatcookiesarenolongerstoredinthefuture.Shouldyou decideonthelatter,wecannotensurethatyouwillbeabletouseourwebsite normally,andsomeservicesandfunctionalitiesmaynolongerbeavailable.More information on cookies and their usage is available in the dedicated section.
Contact form
Shouldyoudecidetocontactususingthecontactformonourwebsite,youwillbe askedtoentersomepersonaldata.Thisenablesustoprocessyourquery.Thisis alsothereasonwhythecorrespondingfieldsofthecontactformaremarkedwith anasterisk,orinanyanotherway,asmandatoryfields.Theenteringofpersonalor sensitivedataotherthanthosemarkedasmandatorywillbeatyourdiscretion. Failuretoenter,eveninpart,themandatoryinformationmarkedwithanasteriskor similarcharactermayresultintheimpossibilityforustoansweryourrequestsor delivertherequestedservices.Theforwardingofrequestsusingthecontactform constitutesyourimplicitacceptanceofthetreatmentofyourpersonaldata.The datathatyoutransmitaretreatedandstoredforaperiodoftimestrictlynecessary for the processing of your request.
Whenweworkwithoursuppliersandusethird-partyservices,wemakesurethat theyarecontractuallyobligedtoapplythesameprivacy/safetystandardsthatwe apply,andthatsuchstandardsarealsofollowed.Suchthirdparties,whoactas ownersofthetreatmentofthepersonaldata,guaranteethatthedatareceivedare notstoredandusedforpurposesotherthanthecontractuallyagreed.Withinthe frameworkofthesetechnicalagreements,themailaddressesmadeavailableto themareencryptedusingtechnologiessuchas“hashing”,sothatanyotherparties are unable to obtain the original addresses. ItmayhappenthatweneedtotransferyourdatatothirdpartiesinNon-European Countries(EEC).TheEEC(EuropeanEconomicArea)consistsofthecountriesofthe EuropeanUnion,plusSwitzerland,Iceland,LichtensteinandNorway.These countriesguaranteethesamesafetystandardsforthetreatmentofpersonaldata. Thistransferofthedatamaybenecessaryiftheservers(meaningthephysical locationswherethedataarestored)orifthepremisesofoursuppliersarein countriesoutsidetheEECarea.Shouldwebeforcedtotransferyourdatatoa countryoutsidetheEuropeanEconomicArea(EEC),itisourresponsibilitytoensure that they are treated with appropriate safety standards.
Disclosure of your data
Inprinciple,thepersonaldataarenotforwarded.Onlyinsomespecificcases, personal data may be disclosed to the following suppliers:Subcontractorsfortechnicalchecksandanalysis,payments,identificationand addressing services, suppliers of analysis services or credit insurance companiesPublic administration or authorities, should this be required by lawCreditinstitutionswithwhomweundertakecommercialrelationsforthehandling of credits / debits, financial reasonsAnyphysicalorlegalpersons,publicand/orprivate(legal,administrativeandfiscal consultants,courtsoflaws,chambersofcommerce,etc.),ifthedatatransferis necessary or relevant for providing our service activities.
User rights
Theaffectedperson’srightsmaybeexercisedbythesame,and/orbyanamed person,bysendingawrittenrequestwithacknowledgementofreceiptore-mailto theownerofthetreatment,WeitlanerPaulPeter,attheoperationaladdressofthe companyVeiderhofdiWeitlanerPaulPeter,Hieblerweg1,I-39038SanCandido.The affectedpersonhastherighttoobtainacopyofthedatainourpossession,which will be made available in accordance with the terms of current regulations.Inspecificcases,wedoreservetherighttostoresomeinformationforlegal purposes(forexampleincaseofsuspectedfraud,orbreachofthegeneralterms andconditions).Shouldyoubelievethatyourrightshavebeenviolated,youcan contact the relevant data protection authorities or take legal action.Below we are summarizing the rights of an affected person:•Right to receive confirmation of the data treatmentEachaffectedpersonhastherighttoasktheownerofthepersonaldata treatmentifthedataarebeingtreated.Anyonewishingtoexercisethisright may contact us at any time.•Right of informationEachaffectedpersonhastherighttoobtainatanytimeandfreeofcharge informationregardingthetreatmentoftheirownpersonaldata.Thenotification must contain the following information: othe purposes of the treatmentothe types of personal data being treatedotherecipientsand/orthecategoriesofrecipientstowhichthetreated personaldatamayhavereceived,withparticularreferenceandattentionto anyrecipientsoutsidetheEEC,orinternationalorganizations.Moreover,as farastransferofthedatatocountriesoutsidetheEECarea,theuseralso hastherighttoreceiveadditionalinformationregardingthesafety guarantees in place during the treatmentotheperiodofconservationcontemplatedforthetreatmentandthestorage of the personal dataothe possibility to issue a complaint with the data protection authoritiesointhosecaseswhenthepersonaldatawerenotcollectedortreatedbythe company,thepossibilityofobtainingappropriateinformationontheir source and originothepossibilityofautomateddecisions,evenwhencontemplatedbyart.22, par.1and4oftheGDPRontheprofilingofpersonaldata,andinthiscase obtainappropriateandsupportedinformationregardingthelogicsfollowed forsuchdecisionsandthepossibleconsequencesthatthissolutionmay bring for the the affected person.•Right of correction of personal dataTheaffectedpersonhastherighttorequesttheimmediatecorrectionofany errors in their own personal data.•Right of cancellationTheaffectedpersonhastherighttoasktheowneroftreatmenttoimmediately deletetheirownpersonaldata,ifatleastoneofthefollowingconditionsismet and that the processing of the personal data is not required: oTheaffectedpersonhavebeencollectedandprocessedinadifferentway and are no longer necessary.oThedatasubjectwithdrawstheauthorisationtothetreatment,grantedin accordancewithart.6,paragraph1,lettera)oftheGDPR,orart.9, paragraph2,lettera)oftheGDPR,butalsoifthetreatmentisinviolationof other data protection regulations.oTheaffectedpersondissagreesthetreatmentaccordingtoart.21,paragraph 1,oftheGDPR,anddemonstratesthattherearenolegitimatereasonsfor their processing.oThe personal data are not being treated in a compliant way.oThecancellationofthepersonaldataisrequiredtofulfilalegalobligation contemplatedbynationalorEUlaws,towhichtheowneroftreatmentmust abide.oThepersonaldatahavebeentreatedfollowingtherequestsofservicesbya minor, in compliance with the provisions of art. 8, paragraph 1 of the GDPR.•Right of limitation of the treatmentoTheaffectedpersonhastherighttoasktheowneroftreatmenttolimitthe processingifoneofthefollowingconditionspersists:Thecorrectnessofthe personaldataisdisputedbytheaffectedperson.Thelimitationshallapply foraperiodoftimethatwillgivetheresponsiblepersonthepossibilityto verify the correctness of the personal data.oThetreatmentisnotincompliancewithcurrentlaws;theaffectedperson refuses the cancellation of the personal data, asking instead their limitation.oTheownerofthetreatmentnolongerneedsthepersonaldataforthe purposeofthetreatment,butthedatasubjectrequiresthesametoassert, exercise or defend their rights for legal action.oTheaffectedpersonhasdisagreedtocurrenttreatmentaccordingtoart.21, paragraph1oftheGDPRandithasnotyetbeenclarifiedifthelegitimate reasonsoftheownerofthetreatmenthavepriorityonthoseoftheaffected person.•Right of data transmissionTheaffectedpersonhastherighttoreceive,inastructuredformat,orinany caseinaformatreadablebyadataprocessingmachine,thepersonaldata originallydeliveredtotheowneroftreatment.Theaffectedpersonhastheright to transfer these data to another owner of treatment.Moreover,basedontheprovisionsofart.20,paragraph1oftheGDPR,the affectedpersonhastherighttorequestthatdatawillbedirectlytransferred fromtheoriginalownertothenewownerifatechnicalsolutionforbothparties is available.•Right of disagreementTheaffectedpersonhastherighttoobjectatanytimetothetreatmentoftheir ownpersonaldataduetoreasonsresultingfromtheirspecificsituation.This also applies to profiling.Incaseofobjectiontothetreatmentofpersonaldata,wewillinterruptthe treatment,unlesswecanprovidevalidreasonstocontinueandsuchreasonsdo notaffecttheinterests,therightsandthefreedomoftheaffectedpersonina negativewayandunlessthetreatmentisnecessaryforaffirmation,exercising and defence of legal affairs.•Automated decisions, including profilingTheaffectedpersonhastherighttodisagreeonautomateddatatreatment, includingprofiling,thathaslegalconsequencesandasignificantimpact,unless thedecisionistakentofulfilorabidetothetermsofacontractbetweenthe affected person and the owner of the treatment.Ifthetermsofacontractbetweentheaffectedpersonandtheownerof treatmentincludeprocessingacertainrequest,withtheexplicitconsentofthe same,wewillimplementreasonablemeasurestosafeguardtherightsand freedom of the affected person.•Right to withdraw the consent to the data treatmentTheaffectedpersonhastherighttowithdrawatanytimetheconsenttothe treatmentoftheirownpersonaldatapreviouslygrantedtotheownerofthe treatment.
Place of the data treatment
Thetreatmentofthepersonaldatathatyouhavetransmittedismainlyhappening withinourworkingstructures,inthedepartmentswheretheindividualresponsible forsuchtreatmentislocated.Theagreedcontractualactivitieswillonlytakeplacein an EU or EEC country.Anytransfers,inpartorinfull,ofthecontractedservicestoadifferentcountryshall besubjectedtotheapprovalofthecustomer,andcanonlytakeplaceifthedata guarantee and safety conditions do agree with art. 44 and subsequent of the GDPR.Forfurtherinformation,pleasecontactusattheaddressesindicatedinthe “Copyright” section.
ThiswebsiteusesWebFontstoensurethecorrectdisplayofthegraphiccontent madeavailablebyGoogle.Whenloadingourwebsite,yourbrowseralsoloadsthe necessaryfontsintheCacheareaofthebrowseritself,sothatgraphiccontentis displayed correctly. Inordertodoso,thebrowserneedstoconnecttotheGoogleserver,whichwill thenreceivetheinformationthatyourIPaddresshasloadedourwebsite.Theuse ofWebFontsbyGoogleensuresacleanandvisuallyenjoyablenavigation experience.Thisrepresentsalegitimateinterestalsoaccordingart.6,paragraph1, letterf)oftheGDPR.FurtherinformationontheuseofWebFontsisavailableatthe followinglink:https://developers.google.com/fonts/faq,orcanbefoundinthe privacy notice of Google itself at https://www.google.com/policies/privacy/.
SSL-Certificate
Wetreatpersonaldatacollectedonthewebsiteusingcomputerisedprocesses. PersonaldataareprotectedbySecureSocketLayer(SSL)encryption.This technologyprotectstheuserfromtheriskofunintentionaldisclosureofpersonal data when using an unprotected connection.Theuserisnotifiedwhenaccessingaprotectedconnectionbyapadlockicon.By clickingthepadlockicon,theusercanthenmakesurethattheSSLcertificateis valid and up to date.
We treats your data for the following purposes:a.to fulfil legal obligationsb.to fulfil contractual obligationsc.tomakeavailabletherequestedinformationand deliver the agreed servicesd.to monitor system efficiencye.tocarrymarketingactivities,suchasforwarding commercialinformationandadvertisingmaterial, market research activitiesf.to safeguard obligations (e.g.: payments)g.toascertainthelevelofsatisfactionforthe quality of the products and services offered
Type of Treatment
Yourpersonaldataaretreatedmanually,butalso electronically,mainlythroughtheuseofautomated processes,dependingontheobjectives.Inthiscase, wespecificallyusedatabasesandcomputerised platformsthatmaybemanagedbybothusandthird parties.Eachtypeoftreatmentguaranteesthe respectandtheconfidentialityofthedatatreated. Westoresuchdataandgeneralinformationinthe databaseandintheserversaslogfiles.Inorderto provideyouwithauniquenavigationexperience,we needtocollectsometechnicaldatathatare necessary for the correct operation of the website:•Browser type and browser version•Operating system•The „referrer“ website•The on our website linked webpages•Date and time of access•IP address•Other similar data and informationThelegalbasisforthistypeoftreatmentisarticle6of theGDPR.Byaccessingthewebsite,computerised systemsandmanagementsoftwareautomatically andindirectlycollectand/ormanagethisnumberof data and information. Atfirst,thecollectionofthesedatainanonymous formatisstatic.However,lateronthedataare treatedtoensureahighlevelofprotectionandsafety for any data that we collect.
Period of data conservation
Incompliancewithcurrentlaws,theownerofthe treatmenthasdefineddifferentperiodsofdata conservation depending on their usage:1.Asfarashandlingandansweringyourquestions aboutproductsandactivities,yourpersonaldata willbestoredforaperiodoftimestrictly necessary for processing your request.2.Asfarasmanagingactivitiesconnectedwiththe navigationthroughourwebsite,yourpersonal datawillbestoredforaperiodoftimestrictly necessary to satisfy your requests.3.Asfarasinternalmanagementandoperational activities(forexampletimeofconservationof invoices,administration,andtaxinformation), yourpersonaldatawillbetreatedforaperiodof timeinlinewiththelegalrequirementsforthe specific purpose.4.Asfarasthehandlingofdisputesandlitigations, yourpersonaldatawillbestoredforthewhole timestrictlynecessaryforpursuingsuchmatters, andinanycasenotbeyondtheapplicable prescription limits.
Use of Cookies
Inordertoconstantlyimprovethenavigationofour website,ourcompanyusescookies.Cookiesaretext filescontainingdata,whichduringthenavigationtoa websitearestoredinthevisitor’scomputerthrough thebrowser.Thestorageofthesedataisnecessary fortheaccessrecognition.Youcandeleteanycookies storedinyourcomputeratanytimethroughthe settingsofyourbrowser,orevensetthebrowserso thatcookiesarenolongerstoredinthefuture. Shouldyoudecideonthelatter,wecannotensure thatyouwillbeabletouseourwebsitenormally,and someservicesandfunctionalitiesmaynolongerbe available.Moreinformationoncookiesandtheir usage is available in the dedicated section.
Contact form
Shouldyoudecidetocontactususingthecontact formonourwebsite,youwillbeaskedtoentersome personaldata.Thisenablesustoprocessyourquery. Thisisalsothereasonwhythecorrespondingfields ofthecontactformaremarkedwithanasterisk,orin anyanotherway,asmandatoryfields.Theenteringof personalorsensitivedataotherthanthosemarked asmandatorywillbeatyourdiscretion.Failureto enter,eveninpart,themandatoryinformation markedwithanasteriskorsimilarcharactermay resultintheimpossibilityforustoansweryour requestsordelivertherequestedservices.The forwardingofrequestsusingthecontactform constitutesyourimplicitacceptanceofthetreatment ofyourpersonaldata.Thedatathatyoutransmitare treatedandstoredforaperiodoftimestrictly necessary for the processing of your request.
Inprinciple,thepersonaldataarenotforwarded. Onlyinsomespecificcases,personaldatamaybe disclosed to the following suppliers:Subcontractorsfortechnicalchecksandanalysis, payments,identificationandaddressingservices, suppliersofanalysisservicesorcreditinsurance companiesPublicadministrationorauthorities,shouldthisbe required by lawCreditinstitutionswithwhomweundertake commercialrelationsforthehandlingofcredits/ debits, financial reasonsAnyphysicalorlegalpersons,publicand/orprivate (legal,administrativeandfiscalconsultants,courtsof laws,chambersofcommerce,etc.),ifthedata transferisnecessaryorrelevantforprovidingour service activities.
User rights
Theaffectedperson’srightsmaybeexercisedbythe same,and/orbyanamedperson,bysendinga writtenrequestwithacknowledgementofreceiptor e-mailtotheownerofthetreatment,WeitlanerPaul Peter,attheoperationaladdressofthecompany VeiderhofdiWeitlanerPaulPeter,Hieblerweg1,I-39038SanCandido.Theaffectedpersonhastheright toobtainacopyofthedatainourpossession,which willbemadeavailableinaccordancewiththeterms of current regulations.Inspecificcases,wedoreservetherighttostore someinformationforlegalpurposes(forexamplein caseofsuspectedfraud,orbreachofthegeneral termsandconditions).Shouldyoubelievethatyour rightshavebeenviolated,youcancontactthe relevantdataprotectionauthoritiesortakelegal action.Belowwearesummarizingtherightsofanaffected person:•Righttoreceiveconfirmationofthedata treatmentEachaffectedpersonhastherighttoaskthe ownerofthepersonaldatatreatmentifthedata arebeingtreated.Anyonewishingtoexercisethis right may contact us at any time.•Right of informationEachaffectedpersonhastherighttoobtainat anytimeandfreeofchargeinformationregarding thetreatmentoftheirownpersonaldata.The notificationmustcontainthefollowing information: othe purposes of the treatmentothe types of personal data being treatedotherecipientsand/orthecategoriesof recipientstowhichthetreatedpersonaldata mayhavereceived,withparticularreference andattentiontoanyrecipientsoutsidethe EEC,orinternationalorganizations.Moreover, asfarastransferofthedatatocountries outsidetheEECarea,theuseralsohasthe righttoreceiveadditionalinformation regardingthesafetyguaranteesinplace during the treatmentotheperiodofconservationcontemplatedfor thetreatmentandthestorageofthepersonal dataothepossibilitytoissueacomplaintwiththe data protection authoritiesointhosecaseswhenthepersonaldatawere notcollectedortreatedbythecompany,the possibilityofobtainingappropriate information on their source and originothepossibilityofautomateddecisions,even whencontemplatedbyart.22,par.1and4of theGDPRontheprofilingofpersonaldata, andinthiscaseobtainappropriateand supportedinformationregardingthelogics followedforsuchdecisionsandthepossible consequencesthatthissolutionmaybringfor the the affected person.•Right of correction of personal dataTheaffectedpersonhastherighttorequestthe immediatecorrectionofanyerrorsintheirown personal data.•Right of cancellationTheaffectedpersonhastherighttoasktheowner oftreatmenttoimmediatelydeletetheirown personaldata,ifatleastoneofthefollowing conditionsismetandthattheprocessingofthe personal data is not required: oTheaffectedpersonhavebeencollectedand processedinadifferentwayandarenolonger necessary.oThedatasubjectwithdrawstheauthorisation tothetreatment,grantedinaccordancewith art.6,paragraph1,lettera)oftheGDPR,or art.9,paragraph2,lettera)oftheGDPR,but alsoifthetreatmentisinviolationofother data protection regulations.oTheaffectedpersondissagreesthetreatment accordingtoart.21,paragraph1,oftheGDPR, anddemonstratesthattherearenolegitimate reasons for their processing.oThepersonaldataarenotbeingtreatedina compliant way.oThecancellationofthepersonaldatais requiredtofulfilalegalobligation contemplatedbynationalorEUlaws,towhich the owner of treatment must abide.oThepersonaldatahavebeentreatedfollowing therequestsofservicesbyaminor,in compliancewiththeprovisionsofart.8, paragraph 1 of the GDPR.•Right of limitation of the treatmentoTheaffectedpersonhastherighttoaskthe owneroftreatmenttolimittheprocessingif oneofthefollowingconditionspersists:The correctnessofthepersonaldataisdisputedby theaffectedperson.Thelimitationshallapply foraperiodoftimethatwillgivethe responsiblepersonthepossibilitytoverifythe correctness of the personal data.oThetreatmentisnotincompliancewith currentlaws;theaffectedpersonrefusesthe cancellationofthepersonaldata,asking instead their limitation.oTheownerofthetreatmentnolongerneeds thepersonaldataforthepurposeofthe treatment,butthedatasubjectrequiresthe sametoassert,exerciseordefendtheirrights for legal action.oTheaffectedpersonhasdisagreedtocurrent treatmentaccordingtoart.21,paragraph1of theGDPRandithasnotyetbeenclarifiedif thelegitimatereasonsoftheownerofthe treatmenthavepriorityonthoseofthe affected person.•Right of data transmissionTheaffectedpersonhastherighttoreceive,ina structuredformat,orinanycaseinaformat readablebyadataprocessingmachine,the personaldataoriginallydeliveredtotheownerof treatment.Theaffectedpersonhastherightto transferthesedatatoanotherownerof treatment.Moreover,basedontheprovisionsofart.20, paragraph1oftheGDPR,theaffectedpersonhas therighttorequestthatdatawillbedirectly transferredfromtheoriginalownertothenew ownerifatechnicalsolutionforbothpartiesis available.•Right of disagreementTheaffectedpersonhastherighttoobjectatany timetothetreatmentoftheirownpersonaldata duetoreasonsresultingfromtheirspecific situation. This also applies to profiling.Incaseofobjectiontothetreatmentofpersonal data,wewillinterruptthetreatment,unlesswe canprovidevalidreasonstocontinueandsuch reasonsdonotaffecttheinterests,therightsand thefreedomoftheaffectedpersoninanegative wayandunlessthetreatmentisnecessaryfor affirmation, exercising and defence of legal affairs.•Automated decisions, including profilingTheaffectedpersonhastherighttodisagreeon automateddatatreatment,includingprofiling, thathaslegalconsequencesandasignificant impact,unlessthedecisionistakentofulfilor abidetothetermsofacontractbetweenthe affected person and the owner of the treatment.Ifthetermsofacontractbetweentheaffected personandtheowneroftreatmentinclude processingacertainrequest,withtheexplicit consentofthesame,wewillimplement reasonablemeasurestosafeguardtherightsand freedom of the affected person.•Righttowithdrawtheconsenttothedata treatmentTheaffectedpersonhastherighttowithdrawat anytimetheconsenttothetreatmentoftheir ownpersonaldatapreviouslygrantedtothe owner of the treatment.Part 2 Privacy