pursuant to and in accordance with art. 13 of the EU Regulation 2016/679Dear Customer / Supplier,
we wish to inform you that the EU Regulation n. 679 of the 27th April, 2016 on the processing of personal data provides for the protection of physical and juridical persons with regard to the processing of personal data.
Pursuant to and for the purposes of art. 13 of the EU Regulation 2016/679, we kindly ask you to take note of the information.
- Identity of the Data Controller
- Purpose of the processing
The legal basis of the processing is the contract or the pre-contractual negotiations, initiated upon request of the interested party.
- Methods of processing
The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services aimed to achieve the over mentioned purposes.
All data processing operations are implemented in order to ensure the integrity, confidentiality and availability of personal data.
- Data retention period
- Scope of communication and disclosure of data
It can be instead communicated to those who are employed by the Data Controller and to some external parties who collaborate with them.
It may also be communicated, only if strictly necessary, to parties who for the purpose of processing purchases or other requests or services relating to the transaction or the contractual relationship with the Data Controller, must supply goods and / or perform services.
Finally, it can be communicated to those parties entitled to access it in accordance with provisions of the law, regulation or legislation. In particular, based on the roles and duties performed, some employers have been authorized to process personal data, within the limits of their competences and in accordance with the instructions by the Data Controller.
- Data transfer
- Refusal by the interested party to provide data
Persons acting in the name and on behalf of Customers / Suppliers legal persons may refuse to provide the Data Controller with its personal data. However, the provision of personal data is necessary for the correct and efficient management of the contractual relationship. Therefore, any refusal to grant data may compromise the contractual relationship in whole or in part.
- Rights of the interested party
- art.15 right of access
- art.16 right of correction
- art.17 right to cancellation
- art.18 right to limit the treatment
- art.20 right to portability
- art.21 right to object
- art.22 right to object to automated decision-making process
The interested party exercises his/her rights by contacting the Data Controller as indicated in point 1, or by e-mail to firstname.lastname@example.org , specifying the subject of his/her request, the right he/she intends to exercise and attaching a copy of a valid identity document that certifies the legitimacy of the request. With reference to articles 15 - right of access, 16 - right of rectification, 17 - right to cancellation, 18 - right to limitation of treatment, 20 - right to portability, 21 - right of opposition, 22 right to object to automated decision-making process of GDPR 679 / 16, the interested party exercises his/her rights by writing to the Data Controller at the address above, or by email at email@example.com, specifying the subject of his/her request, the right he/she intends to exercise and attaching a copy of a valid identity document that certifies the legitimacy of the request.
Withdrawal of consent
With reference to the art. 23 of Legislative Decree 196/2003 and art. 6 of the GDPR 679/16, the interested party can revoke the consent at any time.
Proposition of a complaint
The interested party has the right to lodge a complaint with the supervisory authority of the State of residence.
Refusal by the interested party to provide data
The interested party may refuse to provide the Data Controller with his/her browsing data. This requires disabling cookies by following the instructions provided by the browser used. Disabling cookies may compromise the correct browsing and the use of the site's features.
Automated decision-making processes
The Data Controller does not carry out processing consisting of automated decision-making processes.