27.1 LSI LASTEM declares that the personal data relating to the Client, and the contact details of the Client’s staff appointed by the Client to manage the Contract, will be processed by LSI LASTEM in compliance with the current legislation on the protection of personal data and the obligations arising from the Contract. The data will be processed in relation to contractual requirements and the consequent fulfilment of the legal, administrative-accounting and contractual obligations deriving from them, as well as for the purpose of protecting their rights and ensuring the security of the systems. The provision of data marked as mandatory when filling in the contractual forms, and of those identified as such when collecting additional data during the contractual relationship, is necessary and essential for the establishment and management of the Contract itself and no specific consent is required from the Customer for its processing.
27.2 In the event of consent given by the Client and revocable at any time by contacting LSI LASTEM, or in any case if permitted according to the regulations in force, LSI LASTEM may also process the Client’s identification and contact data for marketing, promotional and informational activities, via email, fax, telephone, mail, or digital channels concerning LSI LASTEM’s products and services, market surveys, satisfaction surveys.
27.3 If the Client also consents, in the manner indicated above, to the use of his/her data also for profiling purposes, LSI LASTEM may process the data collected as part of the execution of the Contract to conduct analyses relating to the use of the Cloud Services by the Client of any combinations to a specific geographical area and the product category to which it belongs, or other forms of analysis, in aggregate or individual form, both for statistical purposes and to improve its offer of products and services and personalize the sending of any commercial communications, if permitted by the Customer. The Client may revoke his/her consent at any time in the manner indicated in Article 27.4 below.
27.4 The data will be processed in written form and/or on magnetic, electronic or telematic support. The data will not be disseminated or communicated to third parties, with the exception of any companies that carry out auditing and certification activities, to which LSI LASTEM has adhered or is required by law, as well as tax, legal or business consultants, credit institutions, public bodies and administrations or subjects entitled by law to receive such information and to follow up on the obligations of the Contract towards the Customer. Personal data may be disclosed, as far as strictly necessary according to their respective duties, to the personnel in charge of the administration, the commercial area, the technical area and management control of LSI LASTEM, as well as the external data processors who provide IT services also for the purpose of maintenance and management of the IT system and the restoration of data. The data will be processed for the entire duration of the contractual relationship and, after its termination, where necessary for the fulfilment of legal obligations, for the time provided for by tax and civil law or for the protection of rights in court. The Client may exercise the rights provided for by the law and request, among other things, information on the origin and use of the data, the modification and correction of the data, or the deletion of the data if no longer necessary, and request further information, including the list of external data processors, by contacting the legal department, at the headquarters of LSI LASTEM or by sending an email to the following address info@wwwtest.lsi-lastem.com. This is without prejudice to the right to contact the Guarantor for the protection of personal data or the judicial authorities in the event of an alleged violation of the regulations on the protection of personal data.
27.5 The Parties agree that LSI LASTEM may process and use purely statistical information, on an aggregated basis, collected in connection with the Client’s use of the Cloud Services, including information relating to meta-data associated with documents, for study and statistical purposes. To this end, the Client grants LSI LASTEM a non-exclusive, perpetual, irrevocable, worldwide, royalty-free license to use such information for such purposes.
27.6 The Parties acknowledge that the performance of the Cloud Services may involve the processing by LSI LASTEM of personal data owned by the Client or for which the Client has been appointed, in turn, as a data controller by the legitimate controller (“Third Party Beneficiary”). In this regard, the Parties mutually acknowledge that LSI LASTEM will act in relation to such processing as Data Processor of personal data pursuant to the Privacy Code, in accordance with the provisions set out in the Supplementary Conditions.
27.7 It is understood that LSI LASTEM assumes no responsibility for the consequences arising from the non-compliance by the Client and/or the Third Party Beneficiary with the obligations incumbent on them as data controllers pursuant to this Article 27. The Client undertakes to indemnify and hold harmless LSI LASTEM from any prejudice, charge, sanction or claim that LSI LASTEM may suffer or receive as a result of the breach by the Client and/or the Third Party Beneficiary of such obligations.