Dear Customer / Supplier, pursuant to Article 13 of EU Regulation 2016/679 hereinafter “Regulation” and in relation to personal data concerning you, our company, as data controller, following the existing contracts, wishes to provide you with the following information.
- Identification details of the data controller
The data controller is Brescia Sollevamenti with registered office in Via XX Settembre, 24 – 25100 Brescia and operational headquarters at the same address. Contact details are as follows: Telephone (+39) 030 9932754 E-mail: email@example.com. It should be noted that in consideration of the fact that the data controller is established within the European Union, the appointment of the data controller’s representative is not necessary.
- Contact details of the data protection officer
Following verification of the applicability of the provisions of art. 37 of the Regulation, the appointment of the Data Protection Officer was excluded, as the company does not fall into any of the cases contemplated.
- Purpose of the data processing and legal basis
The processing is aimed at carrying out the following activities: – Fulfilment of legal and / or contractual obligations, fulfilment of uses and customs, regarding the commercial activity of the company; – Accounting and administrative processing; – Management of legal obligations and disputes; Fulfillments related to current legislation on health and safety at work; – Requirements related to the application of the internal management system of the company. The legal basis of the processing consists of the following elements: contract for the acquisition / supply of goods or services, Legislative Decree 81/2008 and subsequent amendments. as regards the current legislation on health and safety at work and the regulations related to the application of the Civil Code and Criminal Code. The treatment is carried out by means of operations or complexes of operations and in particular: collection, registration, organization, storage, processing, modification, comparison, interconnection; selection, extraction, consultation, communication, blocking, cancellation and destruction; is carried out with or without the aid of electronic means; is carried out by the organization of the Data Controller and by a trusted company, the list of which is available from the Data Controller, who are our direct collaborators and who operate in total autonomy as separate external owners of the processing of personal data, obliged to fulfill on their own and according to a contract with Ns. company to the legislation on the protection of personal data. Personal data are not subject to disclosure.
- Legitimate interests of the Data Controller
If treatments are carried out pursuant to art. 6, paragraph 1, letter f), they will take place exclusively for the satisfaction of the legitimate interests of the data controller.
- Recipients of personal data
The personal data collected may be disclosed to: – all subjects to whom the right of access to such data is recognized by virtue of regulatory provisions; – to our collaborators in the context of their respective duties; – to all those natural and / or legal persons, public and / or private when the communication is necessary or functional to the performance of our business and in the manner and for the purposes illustrated.
- Transfer of personal data abroad
The data controller has no intention of transferring personal data to third countries or international organizations outside the European Union.
- Retention period of personal data
The time limit for data retention for tax purposes currently in force (10 years) is assumed as a parameter.
- Rights of the interested party
The interested party has the right (Chapter III Rights of the interested party) to ask the data controller for access to personal data and the correction or cancellation of the same, as well as the limitation or opposition to their treatment and data portability. To exercise these rights it is necessary to refer to the contact details previously mentioned.
- Revocation of consent
The interested party has the right to revoke the consent expressed pursuant to art. 6, paragraph 1, letter a) and art. 9, paragraph 2, letter a).
- Right of Complaint to the Supervisory Authority
The interested party has the right to lodge a complaint with the Supervisory Authority, which can be reached at the following addresses: Guarantor for the protection of personal data – Piazza di Monte Citorio n. 121 00186 ROME Fax: (+39) 06.69677.3785 Telephone switchboard: (+39) 06.696771 E-mail: firstname.lastname@example.org .
The references and methods for exercising the right of complaint are shown on the website of the Privacy Guarantor http://www.garanteprivacy.it.
- Communication of personal data
The communication and subsequent processing of personal data is a necessary condition for the completion of the existing contract with Ns. society. Failure to communicate will result in the non-applicability of the contract.
- Automated decision making
The personal data collected will not be subjected to automated decision-making processes, including profiling.