Information pursuant to GDPR EU 2016/679
Pursuant to the GDPR EU 2016/679, and in relation to the personal data of which the Private Investigative Institute “SHERIDAN SRL” will come into possession, we inform the Principal of the assignment of the following:
1. Purpose of data processing
The processing of the personal data of the Principal of the engagement, and of other persons to whom it refers for reasons connected with the investigative activity, is aimed solely at the correct and complete execution of the professional assignment received; to fulfill legal obligations; for instrumental purposes inherent to the accomplishment of the business activity. The foregoing, in full compliance with the principle of correctness and the current legal provisions such as – merely by way of example and not exhaustive – the acquisition of preliminary information on acceptance of the assignment, billing, management of receipts, the possible credit recovery, etc.
2. Data processing methods
A. The processing is carried out by means of operations or set of operations such as: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data;
B. The operations can be carried out with or without the aid of electronic, computerized and telematic, or in any case automated instruments, with logic strictly related to the foregoing;
C. Data will be processed in compliance with the principles of confidentiality, integrity and availability of data, adopting all the necessary security measures;
D. The treatment is carried out by the Data Controller and / or by the Data Processors as far as they are concerned;
3. Provision of data
The provision of common, sensitive and fiscal personal data is indispensable for the purposes of carrying out the activities referred to in point 1. For this purpose it may be necessary to communicate one’s own or others’ judicial, health, sexual data, etc., to provide the service professional request.
4. Legal basis of the processing
The data is obtained in the satisfaction of a request by the interested party, for the fulfillment of the contract and for the fulfillment of the obligation pursuant to art. 135 TULPS.
5. Obligation to provide data
The interested party is not obliged to provide personal data, but in case of refusal it will be impossible to provide the service requested either for practical reasons or because this would imply failure to comply with legal obligations.
6. Data retention period
The personal data necessary for the execution of the requested activity will be kept for the period strictly necessary for the provision of the service itself; otherwise, the other data will be kept for the period imposed by the law, or for the time necessary for the protection of a right in court.
7. Communication and data recipients
Data Processors, collaborators in charge of external operations, subjects operating in the sector, auxiliaries, consultants, brokers, etc. (that is to say all those subjects to whom the communication is necessary for the correct fulfillment of the purposes indicated in point 1) – can acquire the personal data of the Conferent for the purposes referred to in point 1.
8. Dissemination of data
Personal data are not subject to general dissemination, advertising, profiling, etc., but will be communicated only for compliance with legal obligations.
9. Data transfer abroad
Personal data will not be transferred, for any reason, to countries of the European Union or to countries outside the European Union.

10. Rights of the interested party
The GDPR EU 2016/679 grants the interested party the exercise of the following specific rights:
α) right of access to data (art. 15 GDPR)
β) right to rectify data (art. 16 GDPR)
χ) deletion of data (art. 17 GDPR)
δ) treatment limitation (art. 18 GDPR)
ε) right to object to treatment (art. 21 GDPR)
φ) portability right (art. 20 GDPR) understood as the right to obtain, from the data controller, the data in a structured format of common use and readable by an automatic device to transmit them to another holder of the processing without impediment.
γ) right to revoke the consent to the processing, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation (art. 7 – par. 3 GDPR)
η) right to lodge a complaint with the supervisory authority, ie the Privacy Guarantor (art. 51 GDPR)

11. Data controller
The data controller is the Private Investigative Institute “SHERIDAN SRL”. To it, and in particular to the Treatment Manager Marco Malavolti , the Principal of the assignment may contact to assert his rights, as provided for by GDPR EU 2016/679, by sending a request by certified mail (PEC) to the e. -mail: or by registered mail a / r to be sent to the headquarters of Via Farini 50, 41121 Modena.