Privacy

INFORMATION PURSUANT TO ART. 13 OF EU REGULATION NO. 679/2016 AND THE RELEVANT ITALIAN LEGISLATION AND SUBSEQUENT AMENDMENTS – Tax Refund S.r.l.

Pursuant to and for the purposes of Article 13 of EU Regulation No. 679/2016, the following preliminary information is provided to all those whose personal and sensitive data are processed by Tax Refund Srl for tax free invoicing purposes pursuant to Article 38-quater of the VAT Law and its subsequent obligations, including VAT refunds.

1. Purpose of processing
The personal data collected is processed on paper and electronically through automated archiving in the Tax Refund S.r.l. IT system and/or external cloud storage for purposes related to issuing invoices pursuant to Article 38-quater of the VAT Law and its subsequent obligations, tax free including VAT refunds.

2. Nature of the provision and legal basis
The processing and provision of personal data is mandatory and necessary to perform the requested contractual activity.

3. Processing Methods
Tax Refund Srl ensures that the personal data provided will be processed exclusively for these contractual purposes and for the strictly necessary period of time, consistent with technical, accounting, and legal requirements. In the event of termination of the contract, Tax Refund S.r.l. will retain the personal data (in paper and electronic format) until the contractual process is concluded (except for legal obligations regarding certain documents, such as tax free invoices) and, in any case, for the maximum period permitted by law. Please note that Tax Refund S.r.l. uses encryption systems on its IT systems and on the data processed. Please note that the company may have appointed external professionals as data protection officers (e.g., accountants, IT system maintenance technicians, or consultants) to fulfill legal obligations. The list of these data processors is available from the company upon request.

4. Rights of Interested Parties
Pursuant to Article 13, paragraph 2, letters a), b), and c) of European Regulation No. 679/2016, which sets out the rights of the Interested Parties pursuant to Articles 15 to 23 of the quoted European Regulation, we hereby inform you that:
1. The Interested Party has the right to obtain confirmation as to whether or not personal data concerning him or her exists and communication of such data in an intelligible form.
2. The Interested Party has the right to obtain information on:
a) the source of the personal data;
b) the purposes and methods of the processing;
c) the logic applied in the event of processing carried out with the aid of electronic means;
d) the identification details of the data controller, data processors, and any data protection officer.
e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative(s) in the State's territory, data controller(s), or persons in charge of processing.
3. data controller(s), or persons in charge of processing. 3. The Interested Party has the right to obtain (Articles 15, 16, 17, 18, 20, and 77 of the Regulation):
a) access to the personal data processed (Article 15 of the Regulation);
b) updating, rectification, or integration of the data (Article 16 of the Regulation);
c)the erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed, and any restriction of processing (Articles 17 and 18 of the Regulation);
d) data portability (Article 20 of the Regulation)
f) the right to lodge a complaint with a supervisory authority (Article 77 of the Regulation)
4. The Interested Party has the right to object, in whole or in part (Article 21 of the Regulation):
a) on legitimate grounds, to the processing of personal data concerning him or her, even if pertinent to the purpose of the collection, without prejudice to the data controller's legal rights;
b) to the processing of personal data concerning him or her for the purpose of sending advertising or direct selling materials or for carrying out market research or commercial communications.

5. The data control holder is Tax Refund S.r.l.
For any communication, please send a request to privacy@taxrefund.it (www.taxrefund.it) or write to: Tax Refund S.r.l., Via G. Zanardelli n. 34, 00186 Rome. For any information regarding privacy, you can contact the company by proving your identity as the data subject.