Schedule: Data Protection Act 2018 Compliance

1. DEFINITIONS

In this Schedule, the following words shall have the following meanings:

“Act”

means the Data Protection Act 2018.

“Associate”

means any corporate or other form of organisation or any individual person with whom you have an association which does, or could, entail the transfer of personal data to us for processing.

“ICO”

means the Information Commissioner’s Office.

“Data Protection Legislation”

means all or any of:

(a) the UK GDPR,

(b) the Act,

(c) regulations made under the Act

(d) regulations made under section 2(2) of the European Communities Act 1972 which relate to the EU GDPR or the Law Enforcement Directive.

“the UK GDPR”

means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation), as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018.

“the EU GDPR”

means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) as it has effect in EU law..

“Law Enforcement Directive”

means Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA.

"data controller", "data processor", “sub-processor”, "data subjects", "personal data", "process", "processed" and "processing" shall have the meanings respectively, as defined in the Act.

In this agreement, “personal data”, is limited to data which comes into our hands in some way connected to this agreement.

1. DATA PROTECTION
2. POLICY FOR PROCESSING OF PERSONAL DATA

3.              METHODS OF PROCESSING AND STORING DATA – The processing of personal data is performed by the company in compliance with the provisions of the current legislation on privacy. The company processes personal data using The Webiste and online tools and with procedures strictly related to the purposes indicated in this policy. The company cannot guarantee its users that the measures taken for website security and the transmission of data and information on the website are capable of limiting or excluding any risk of unauthorized access or loss of data by devices pertaining to the user. It is suggested that the users of The Website ensure their computer is equipped with adequate software to protect the transmission of data (such as antivirus).

4.              APPROPRIATE TRANSMISSINO OF DATA – The company will process the data according to the principles of correctness - data will be used to the extent necessary and exact for processing and will only be used by company employees for authorized purposes.

5.              CHANGES TO THIS POLICY – The company reserves the right to make changes to this policy at any time, giving notice to users on the website www.studio-sette.com or by email. The data subject may request the company to delete their personal data. Unless otherwise specified, the previous privacy policy will continue to apply to personal data collected until then

Data Processing Activities

What we or you may process in each category

1. We shall process this basic personal data
2. Retention period

Updated March 2024