Request Information

Data Controller and responsible for processing
The data controller is Colasanti Luigi d.i. based in Via Aurelia 1249, 00166, Rome (RM) (Later also Owner)

Purpose of the processing
A) The personal data you have provided are processed without explicit consent for:
- perform services for you (estimate of assets, sales services, brokerage services);
- comply with contractual or pre-contractual obligations existing with the interested party.
- allow you to participate at live or in-house auctions;
- manage access to the website and related services www.colasantiaste.com;
- file them in archives;
- issue invoices;
- comply with any legal and regulatory obligations;
- exercise the data controller rights, for example the right of defense in court.
B) Only subject to your specific and distinct consent (articles 23 and 130 of the Privacy Policy and article 7 of the GDPR):
- for the purpose of sending you by e-mail, sms, mms, telephone contacts, social networks, instant messages, mobile applications, banners, fax, mail and telephone, for the promotion and / or sale of products and / or services and material advertising on products or services offered by the owner.
- for registration to the newsletter for marketing purposes of the data controller

Personal data collected
The data Controller treats, in accordance with this information, the data provided, including;
a) data, including personal and contact details, fiscal data, images of documents useful for participation in auctions;
b) the data provided in case of information and assistance request;
c) data relating to the Internet connection (IP address), whenever an offer is made or access to the website to participate to 'Live' online auctions;
The above data will be processed only to the extent necessary to achieve the purposes described in paragraph 2 of this statement.

Method of processing
The processing of your data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2 GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, use, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing. Personal data in electronic format is stored on local or remote servers, however internal to the EU, protected and encrypted and copies of such data will be stored in encrypted format and protected on local devices and / or cloud servers within the Union European for data security purposes (backup copies).

Legal base of the processing
The personal data processing for the purpose of using services at point 2A is Il trattamento dei dati personali per le finalità di fruizione dei servizi al punto 2A is mandatory as necessary for the use of specific services offered by the data controller. The provision of personal data for the purposes of the law is mandatory as required under applicable laws. In the event that the customer opposes the treatment for the purposes under point 2A, he will not be able to use the services made available by the data controller. By pursuing the Legitimate Interest, the data controller may send limited communications relating to services and / or previous purchases of the interested party. The processing of personal data for the Marketing Purposes is optional and subject to explicit consent as referred to in point 2B).

Data communication
Without the need for express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to Supervisory Institution, Judicial Authorities, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes. These subjects will process the data in their capacity as independent data controllers. Your data will not be disclosed to third parties who have not been authorized by you in express written request

Data transfer
The data controller hereby ensures that the transfer of non-EU data will not take place under any circumstances unless the transfer is legally required in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

You also have the right to data portability (art. 16-21 GDPR) at your express written request in the modalities of article 10

Rights of the interested party
In your capacity as an interested party, you have the rights set forth in art. 7 of the Privacy Policy and art. 15 GDPR and precisely the rights of:
I. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
II. obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of the owner, the managers and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Policy and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them, managers or agents;
III. obtain: a) updating, rectification and integration of data; b) cancellation, blocking of data processed in violation of the law; c) the declaration that the operations referred to in letters a) and b) have been violated (data breach), also with regard to their content, of those to whom the data have been communicated or spread, except for the case in where such fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;
IV. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending commercial material such as quotes and offers for the purchase of material.
V. where applicable, it also has the rights referred to art. 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of processing, right to data portability, right of opposition), as well as the right of claim to the Guarantor Authority.

Duration of treatment
The Data Controller will process personal data as long as necessary to fulfill the aforementioned purposes and in any case:
• the data will be stored for 10 years from the end of the relationship for the obligatory retention of tax data associated with invoices;
• not handled after your express request for blocking, invalidate or cancel the processing for the purposes of art 2.B (excluding legislative obligations);

How to exercise your rights
For the correction, update, block, certification for letters A or B, the person concerned may at any time exercise the rights by explicit request to the data controller, without too many unnecessary formalities, or by sending an e-mail to the address privacy@colasantiaste.com
The right to delete data, the right to 'art 20 GDPR, the right to the portability of data to third parties must instead be expressed written form, explicit, clear and signed, or sent via pec address.

Data Controller, managers and agents
The Data Controller is Colasanti Luigi d.i ..
Your data may be made accessible for the purposes referred to in art. 2.A) and 2.B) to employees and collaborators of the Data Controller, in their capacity as persons in charge of processing and / or system administrators and / or administrators; to third-party companies such as credit institutions, professional firms, consultants who carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data controllers. The updated list of external managers is kept at the Data Controller headquarters and can be requested by email at privacy@colasantiaste.com

Even without explicit consent, Colasanti auction house may process my data for the sole purpose of providing service, invoice issuing and legislative obligations as set out in point 2A.

By selecting the box I authorize Colasanti auction house to process my data ALSO for commercial communications and receive newsletters as specified in point 2B.