Privacy Policy on the processing of personal data ex art. 13-14 EU Reg. 2016/679

Interested Audience: Customers

Ready4Set Srls, in its capacity as Data Controller of personal data, pursuant to and in accordance with EU Regulation 2016/679 hereinafter referred to as ‘GDPR’, hereby informs you that the aforementioned legislation provides for the protection of data subjects with regard to the processing of their personal data and that such processing will be based on the principles of fairness, lawfulness, transparency and protection of the confidentiality and rights of all data subjects who provide their sensitive personal data in any manner whatsoever.

Personal data will be processed in accordance with the legal provisions of the aforementioned legislation and the confidentiality obligations stipulated therein.

The processing we intend to carry out, with your specific consent where necessary, has the following purposes

  1. to allow the provision of the services you have requested and the subsequent operational, technical and administrative management of the relationship connected with the provision of the Services and the execution of communications relating to the conduct of the relationship established;
  2. allow you to browse and consult the websites and applications owned exclusively by Ready4Set Srls
  3. respond to requests for assistance or information, which we will receive by e-mail, telephone or via special online forms
  4. fulfil legal, accounting and tax obligations
  5. send direct commercial offers via e-mail for services authorised by you with your explicit prior consent
  6. process studies, research, market statistics; send you advertising material, information, commercial information or surveys to improve the service (“customer satisfaction”) via e-mail or text message, and/or through the use of the telephone with operator and/or through the official pages of the Site, applications and social networks with explicit prior consent
  7. make personalised commercial proposals on the basis of the products or services purchased by you, or of which you have become interested by browsing our Site or related applications.

This means, for example, that if you have browsed our Site to find information on certain products, you may receive offers relating to those offers.

This type of analysis is typically carried out on purchase data pertaining to both natural and legal persons, and the relevant decisions are not based on solely automated processing.

Purposes and legal basis of the processing:

in particular, the data of the data subject shall be processed for the following purposes in connection with the implementation of legal obligations

  • statutory obligations in the field of taxation and accounting.

The data subject’s data will also be used for the following purposes related to the implementation of measures connected with contractual or pre-contractual obligations

  • customer management.

Method of processing.

The personal data of the data subject may be processed in the following ways

  • processing by means of electronic computers;
  • Cloud systems specified in the processing register

All processing is carried out in compliance with the modalities set out in Articles 6, 32 of the GDPR and through the adoption of appropriate security measures. The data of the data subject will be processed only by personnel expressly authorised by the Data Controller and, in particular, by the following categories of employees

  • Administration office.


The data of the data subject may be communicated to external parties for the proper management of the relationship and, in particular, to the following categories of Recipients including all duly appointed Data Processors

  • consultants and freelance professionals, also in associated form;
  • within public and/or private subjects for whom the communication of data is compulsory or necessary to fulfil legal obligations or is in any case functional to the administration of the relationship.


The personal data of the interested party will not be disclosed in any way.

Retention Period.

We would like to inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, the period of retention of the data subject’s personal data is:

  • established for a period of time not exceeding the achievement of the purposes for which they are collected and processed for the performance and fulfilment of contractual purposes;
  • established for a period of time not exceeding the performance of the services provided;
  • established for a period of time not exceeding the fulfilment of the purposes for which they are collected and processed and in compliance with the compulsory time limits prescribed by law.

Data Controller:

The Data Controller, in accordance with the Law, is

Ready4Set Srls

Viale America, 125 – 00144 Rome (RM) 

VAT number: IT17383771007

in the person of its legal representative pro tempore.

The data subject shall have the right to obtain from the data controller the erasure (right to be forgotten), restriction, updating, rectification, portability, objection to the processing of personal data concerning him/her, as well as in general he/she may exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.

EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject

The data subject shall have the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, their communication in intelligible form and the possibility to lodge a complaint with the Supervisory Authority.

The data subject shall have the right to be informed of

  1. the origin of the personal data
  2. the purposes and methods of the processing
  3. the logic applied in the event of processing carried out with the aid of electronic instruments
  4. the identity of the data controller, data processors and the representative designated pursuant to Article 5(2)
  5. the entities or categories of entity to whom or which the personal data may be communicated or who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

The interested party has the right to obtain

  1. the updating, rectification or, where interested therein, integration of the data;
  2. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
  3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
  4. the portability of the data.

The data subject has the right to object, in whole or in part

  1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection
  2. to the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication.

Should the data subject wish, at any time, to object to the processing of his or her data for marketing purposes, he or she may do so using the mechanism proposed in the footer of the commercial e-mails or by sending an e-mail to: