DATA PROCESSING NOTICE PURSUANT TO ART. 13-14 OF REGULATION (EU) 2016/679
In relation to the EU Regulation 2016/679 (hereinafter also Regulation), the following is the information referred to in the subject line.
1. DATA CONTROLLER
Stringhetto Srl with registered office in Via Maestri del Lavoro, 9 37045 Legnago (VR) telephone number +39 0442 20833, Email amministra@stringhetto.com, PEC stringhettosrl@pec.it, as the Data Controller of your personal data, pursuant to and in accordance with Regulation (EU) 2016/679, on the “protection of individuals with regard to the processing of personal data and on the free movement of such data”, hereby informs you that the processing of your data will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and rights.
In relation to the collection and use of personal data, the Data Controller first of all points out that the data are collected from the data subject, both at the time of the formulation of the quote and at the time of the signing of the contract and in any case of the provision of the service or during the course of the same.
2. REPRESENTATIVE OF THE DATA CONTROLLER (ART. 27 OF THE REGULATION).
There is no provision for a Data Controller Representative within this organization as it is not required under the Regulations themselves.
3. DATA PROTECTION OFFICER (ARTICLES 37 TO 39 OF THE REGULATION)
There is no provision for a Data Protection Officer within this organization (also referred to as Data Protection Officer – DPO), as this is not required under the Regulations themselves.
4. PURPOSE OF PROCESSING
The processing of your personal data, as a customer or supplier of the writer, is performed to regulate the contractual relationship by fulfilling legal, regulatory and contractual obligations and in particular for purposes related to the establishment and conduct of business/contractual relations and so:
the execution of the service/provision of the good with respect to the company;
legal fulfillments related to civil, tax and accounting rules, as well as arising from EU regulations and provisions;
purposes of a financial and credit nature, as well as credit control and protection.
The processing of data pertaining to your contact details may also be carried out for direct marketing purposes, by sending newsletters or invitations or commercial communications.
The data processed may concern:
personal details (for example: first name, last name, place and date of birth, tax code, residence, domicile, including temporary, family status), bank details, Email and telephone contact details.
5. LEGAL BASIS AND LAWFULNESS OF PROCESSING
With reference to the lawfulness of the processing identified, the writer specifies to you, below, the legal bases on which it is based.
For the purposes referred to in Point 4 of this notice above, the processing is necessary both for the performance of a contract to which you are a party (Art.
6, paragraph 1, letter
b) of the Regulation) and for the pursuit of the legitimate interest of the Data Controller itself or of third parties (art 6, paragraph 1, letter f) of the Regulation also, the processing is necessary to fulfill legal obligations to which the writer is subject (art 6, paragraph 1, letter c) of the Regulation).
The processing of data for direct marketing purposes is based on the legitimate interest of the Company.
6. METHODS OF PROCESSING
The personal data in question may be processed by means of paper, computer and telematic tools, with the use of security measures to ensure the confidentiality of the person to whom the data refer and to prevent undue access to third parties or unauthorized personnel.
In any case, the processing of your personal data will be carried out in accordance with the law according to principles of lawfulness and fairness and in such a way as to protect your confidentiality.
7. NATURE OF DATA PROVISION
The provision of data is mandatory for all legal and contractual obligations.
Any refusal, partial or total, to provide the mandatory data will result in the objective impossibility of establishing or further carrying out any relationship with you.
8. COMMUNICATION OF DATA
Personal data contained in invoices and business documents, may be disclosed by the writer, solely for reasons pertaining to the transfer of the good and provision of the service, accounting correctness and for payment execution purposes to Banks and Credit Institutions, Insurance Companies, Public Administrations, Correspondence Companies, Professional firms of tax and legal advisors, Self-employed and Freelancers.
Data pertaining to contact details may also be disclosed to the Couriers in charge of transportation.
In addition, your data may come to the attention of IT managers, suppliers and consultants who in various capacities are involved in support, maintenance of the company software in use, IT systems, network infrastructure and data hosting.
These individuals are appointed as Data Processors by the owner organization.
The updated list of Data Processors and Appointees is kept at the Owner’s office.
9. DISSEMINATION OF DATA
Personal data processed, in no way, will be brought to the attention of unspecified parties.
10. TRANSFER ABROAD
The personal data processed will not be transferred abroad, within or outside the European Union.
However, the possibility of using cloud services is reserved and in this case the service providers will be selected from those who provide adequate guarantees (in accordance with the provisions of Article 46 of Regulation 2016/679).
11. RIGHTS OF THE DATA SUBJECT
You are granted the right to:
to know what personal data are processed by the writer, their origin, purpose and method of processing (Art. 13-14 Regulation 2016/679);
obtain the deletion and/or destruction of data processed in violation of the law, as well as the updating, rectification or integration of data (Art. 13-14 Regulation 2016/679);
submit a request for rectification against the Data Controller (Art. 13-14 Regulation 2016/679);
submit a complaint to a supervisory authority (Art. 13-14 Regulation 2016/679);
submit a request for deletion (right to be forgotten) of the data managed by the Data Controller (Art. 17 Regulation 2016/679);
submit a request for restriction of processing (Art. 18 Regulation 2016/679);
submit a request for opposition in cases where processing falls under what is defined in Art. 21 Regulation 2016/679.
12. DURATION OF TREATMENT
Processing will last no longer than necessary for the purposes for which the data were collected and for the fulfillment of legal obligations, and in any case no longer than 10 years after the termination of the contractual relationship.
13. DATA CONTROLLER
To be informed about the external data controller figures, you can request information from the administration office.
