Privacy Policy

Holder of the treatment

The Data Controller is 00UP S.R.L. S.B., domiciled in Mondovi, Vicolo del Moro no. 6.

Object of the treatment

The Data Controller processes all personal data provided by you on the occasion
of any contact with the firm, even before receiving formal

If the person providing the data is under the age of 16,
the processing is lawful if and to the extent that consent is given
or authorized by the holder of parental responsibility for the
which are acquired the identification data and a copy of the document

Purpose of the processing

The processing of the personal data you provide is aimed at
correct and complete execution of the assignment received, to the fulfillment
the necessary tax obligations deriving from the current assignment as well as
the fulfillment of the obligations established by law, regulation, legislation
community or by order of the Authority.

For the aforementioned purposes, personal data are processed without express consent (Article 6 letters b) e) GDPR).

Methods of treatment and conservation

Personal data are processed both on paper and
electronic and / or automated, in compliance with the provisions of art.
32 of the GDPR 2016/679 and regarding security measures and in
compliance with the provisions of art. 29 GDPR 2016/679.

The treatment is carried out by means of the operations of art. 4
GDPR 2016/679 and more precisely: collection, registration, organization,
storage, consultation, processing, modification, selection,
extraction, comparison, use, interconnection, block,
communication, cancellation and destruction of data.    

In compliance with the principles of lawfulness, purpose limitation and
data minimization, pursuant to art. 5 GDPR 2016/679, after
Your free and explicit consent expressed at the bottom of this letter
information, your personal data will be kept for the period of
time necessary to achieve the purposes of the processing e
in any case for no more than 10 years from the termination of the relationship.

Provision of data

The provision of common, sensitive and judicial personal data is
strictly necessary for the purpose of carrying out the activities
indicated in the processing purpose.

Refusal to provide data

Refusal to provide data makes it impossible to carry out the activities indicated in the processing purpose. 

Access to data 

Personal data may be made accessible pursuant to the processing purposes to employees and external collaborators of the Data Controller in their capacity as persons in charge and / or internal managers of the processing and / or system administrators and, in general, to all those public and private subjects. to whom the communication is necessary and / or mandatory for the correct fulfillment of the same purposes.

(the list of said subjects can be seen at at the link

These subjects will process the data in their capacity as independent data controllers.

Dissemination of data 

Personal data are not subject to disclosure.

Transfer of personal data

Your data could be transferred to EU Member States
European Union and in third countries not belonging to the European Union.

Special categories of personal data

Pursuant to Articles 9 and 10 GDPR 2016/679, you may provide the firm with data that qualify as “special categories of personal data,” namely, those data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to a person’s health or sex life or sexual orientation.” These categories of data may be processed only with your free and explicit consent, given either in writing at the end of this notice or by digital consent at

Existence of an automated decision-making process 

The firm 00UP S.R.L. S.B. does not use any automated decision-making process, including profiling, as referred to in Art. 22, paragraphs 1 and 4, of the GDPR 2016/679.

Rights of the interested party

At any time, you can exercise, pursuant to art. from 15 to 22 of the GDPR 2016/679, the following rights:

a) ask for confirmation of the existence or otherwise of their personal data;

b) obtain information on the purposes of the processing, the
categories of personal data, recipients or categories of
recipients to whom the personal data have been or will be disclosed and,
when possible, the retention period;

c) obtain the correction and deletion of data;

d) obtain the limitation of the processing;

e) obtain data portability, i.e. receive them from the owner of the
treatment, in a structured format, commonly used and readable by
automatic device, and transmit them to another data controller
without impediments;

f)  oppose the processing at any time and also in the case of processing for direct marketing purposes;

g) oppose an automated decision-making process relating to individuals including profiling.

h) ask the data controller for access to personal data e
the correction or cancellation of the same or the limitation of
treatment that concern him or to oppose their treatment, in addition to the
right to data portability;

i) withdraw consent at any time without prejudice to the
lawfulness of the processing based on the consent given before the revocation;

L)  propose a complaint to the Guarantor Authority. 

How to exercise rights

You may exercise your rights at any time by written request sent to 00UP S.R.L. S.B., Vicolo del Moro no. 6 or to the address never

00up support