Privacy Notice - Personal Data Processing

The following document has been prepared in compliance with the provisions of articles 13-14 of EU Regulation 2016/679.

Expandi Ltd as Data Controller, in the performance of its business collects and processes personal data provided by the Data Subjects. In order to guarantee the protection and exercise of the rights provided for by the law on the protection of personal data, the Data Subjects are hereby informed of the following:


Purpose of the processing

The data provided by the Data Subjects will be processed to fulfil the following purposes:

  • A. Sending of informative material regarding the publication, on the Expandi Ltd Blog, of new articles and posts, by means of recurring e-mails (newsletter);

With regard to the Purposes of point A, the data (pages visited on the website and other actions performed during the visit) may be used to profile preferences, in order to send the same commercial information in line with the preferences expressed. Expandi Ltd will not share your profiling data with any third parties.

Modalities for the exercise of the rights of the Data Subjects

The Data Subjects are informed, in accordance with the provisions of Article 13, paragraph 2 of EU Regulation 2016/679, on how to exercise their rights by sending an email to: dpo@expandigroup.com.

The Data Subjects are informed that Expandi Ltd, in accordance with art. 12, paragraph 3 of EU Regulation 2016/679, has:

  • a) Up to one month since the Data Subject made his request in order to respond to the exercise of the rights set out below.
  • b) This period may be extended by two months depending on the number of applications.
Data Retention

Data Subjects are informed that the personal data they have provided will be stored at the systems owned by Expandi Ltd until the time of withdrawal of consent by the Data Subjects.

Rights of the Data Subjects

Expandi Ltd, in accordance with Articles 15-22 of EU Regulation 2016/679, undertakes to ensure the full exercise of the rights of the Data Subject, unless this affects a legitimate right or the rights of other Data Subjects. Data Subjects are informed that, in case they want to exercise these rights, it can be done by writing to the address: dpo@expandigroup.com.

The Data Subject are informed that, pursuant to Article 13, paragraph 2, paragraph D of EU Regulation 2016/679, if he/she identifies serious breaches or complains about the failure of Expandi Ltd to comply with one of the rights set out in this policy, he/she may present a formal complaint with the National Privacy Guarantor.

Data Subjects are hereby informed that in order to guarantee their rights and freedoms, Expandi Ltd has appointed a DPO (Data Protection Officer).

Missed Consent

Please note that, pursuant to Article 13, paragraph 2, clause E of EU Regulation 2016/679, Expandi Ltd will not proceed with the sending of newsletters (Purpose of processing A) to the Data Subject who has not given his consent to this privacy notice.