Dear interessed party, we wish to inform you that the "European Regulation 2016/679 concerning the protection of individuals with regard to the Processing of Personal Data, as well as the free circulation of such data" (from now on "GDPR") provides for the protection of persons and other subjects regarding the processing of personal data. GL Consulting S.r.l. with a single shareholder, as "Data Controller", pursuant to Article 13 of the GDPR, therefore, provides you with the following information:

CATEGORIES OF DATA: FORMESPAZIOROMA di SONIA M. STUPPIA will process personal and / or sensitive and health-related data that will be included in the form.

SOURCE OF PERSONAL DATA: The personal data of FORMESPAZIOROMA of SONIA M. STUPPIA will be in possession are collected directly by the interested party when completing this form.

DATA PROCESSING HOLDER: The Data Controller is FormespazioRome di Sonia Maria Stuppia via Pratolungo 15, 00072 Ariccia RM P.Iva 06383911002 - E-mail formespazio@libero.it.

PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your data, collected and stored in relation to the compilation of this form, has as its legal basis your consent and is carried out for the following purposes: complete the online order of products from you selected and manage payment, delivery / shipping.

RECIPIENTS OF DATA: Within the limits pertinent to the indicated processing purposes, your data may be communicated to partners, consulting companies, private companies, appointed as Responsible by the Data Controller. Your data will not be disseminated in any way. The Data Processors and Persons in charge of the processing in office are promptly identified in the Privacy Document, updated periodically.

TRANSFER OF DATA ABROAD: the data collected will not be transferred abroad.

CONSERVATION PERIOD: The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed ("principle of conservation limitation", art. 5, GDPR) or on the basis of the deadlines established by law . The verification of the obsolescence of data stored in relation to the purposes for which it was collected is carried out periodically.

RIGHTS OF THE INTERESTED PARTY: The interested party has always the right to request the Data Controller access to your data, the correction or cancellation of the same, the limitation of the processing or the possibility to oppose the processing, to request data portability, to revoke the consent to the processing by enforcing these and the other rights provided by the GDPR by simple communication to the Owner. The interested party may also lodge a complaint with a supervisory authority.

OBLIGATORY OR LESS OF DATA PROVISION: We inform you that the provision of data is optional for some fields and for others (indicated by an asterisk) mandatory and failure to provide the mandatory data involves NOT sending the form.

OBLIGATION OF CONSENT: The provision of consent to data processing by means of a special check is optional, but essential to proceed with the sending of the form and the consequent online order.

METHOD OF DATA PROCESSING: The personal data you provide will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations which the activity of the Data Controller is inspired by. The data will be processed both with IT tools and on paper and with any other type of suitable support, in compliance with adequate technical and organizational security measures provided by the GDPR.