Privacy Policy

Categories of personal data not obtained from the person concerned
The personal data not obtained by entering by the interested party are exclusively the IP addresses contained in the access logs to the Site

Treatment and conservation methods
The processing will be carried out in an automated and / or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679 and Annex B of the Legislative Decree 196/2003 (articles 33-36 of the Code) concerning security measures, by specially appointed parties and in compliance with the provisions of art. 29 GDPR 2016/679.

Scope of communication and diffusion
We also inform you that the data collected will never be disclosed and will not be communicated without your explicit consent, except for the necessary communications that may involve the transfer of data to public bodies, consultants or other subjects for the fulfillment of legal obligations .

Special categories of personal data
Pursuant to Articles 26 and 27 of Legislative Decree 196/2003 and Articles 9 and 10 of EU Regulation n. 2016/679, you could assign to the data controller data that can be classified as “special categories of personal data”, ie data that reveal “racial or ethnic origin, political opinions, religious or philosophical beliefs, or belonging trade union, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sexual life or sexual orientation of the person “. These categories of data can be processed only with your free and explicit consent, expressed in writing at the bottom of this information.

Rights of the interested party
At any time, the interested party may exercise, pursuant to art. 7 of Legislative Decree 196/2003 and articles from 15 to 22 of EU Regulation no. 2016/679, the right to:

• request confirmation of the existence or not of your personal data;
  
• obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have
• been or will be communicated and, when possible, the storage period;
  
• obtain the correction and deletion of data;
  
• obtain the limitation of the treatment;
  
• obtaining data portability, ie receiving them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmitting them to another data controller without hindrance;
  
• oppose the processing at any time and also in the case of processing for direct marketing purposes;
  
• oppose an automated decision-making process relating to physical persons, including profiling.
  
• ask the data controller to access personal data and to correct or delete them or limit the processing that concerns them or to oppose their treatment, in addition to the right to data portability;
  
• withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
  
• lodge a complaint with a supervisory authority.

The interested party can exercise your rights at any time by writing an email to the address info@finidance.nyc