REGULATION (EU) 2016/679 – GDPR
of the European Parliament and of the Council, of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data
INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to Article 13 of EU Regulation 2016/679 of 27/04/2016, hereinafter referred to as GDPR, Eurodolciaria Srl, VAT number 02765270968, as the owner of the processing of personal data, informs you of the following :
OWNER AND MANAGER OF THE TREATMENT
The data controller is Eurodolciaria S.r.l., VAT number 02765270968, with registered office in Via Gounod 10/12, 20092 – Cinisello Balsamo (MI).
PURPOSE OF THE TREATMENT
The personal data you provide will be processed exclusively for the following purposes:
stipulation and execution of the contract and all related activities, such as, by way of example, invoicing, credit protection, administrative, management, organizational and functional services for the execution of the contract;
fulfillment of the obligations established by law, regulations, applicable legislation and other provisions issued by authorities invested by law and by supervisory and control bodies.
The processing of personal data for the aforementioned purposes – points a) e b) – does not require your express consent (art. 6 lett. b) e e) of the GDPR).
carrying out marketing and promotional activities for the Controller’s products and services, commercial communications, both by automated means without operator intervention (eg. SMS, fax, mms, e-mail, etc.) and traditional (by telephone, mail).
preparation of studies and market research.
The processing of personal data for the aforementioned purposes – points c) e d) – requires your express consent (Article 7 of the GDPR). This consent concerns both the automated communication methods and the traditional ones described above. You will always have the right to easily and free of charge, in whole or in part, to the processing of your data for these purposes, for example by excluding automated contact methods and expressing your desire to receive commercial and promotional communications exclusively through traditional methods of contact.
COMPULSORY OR OPTIONAL NATURE OF THE PROVISION OF DATA AND CONSEQUENCES OF ANY REFUSAL TO PROVIDE PERSONAL DATA
The data required for the purposes referred to in the previous letters a) e b) must be provided for the fulfillment of legal obligations and / or for the conclusion and execution of the contractual relationship and the provision of the requested services. Therefore, your refusal, even partial, to provide such data would make it impossible for the Supplier to establish and manage the relationship itself and to provide the requested service.
The provision of personal data necessary for the purposes referred to in the previous letters c) e d) is optional, therefore your refusal to provide such data would make it impossible to carry out the activities described therein.
DATA PROCESSING METHOD
The processing of personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR, for the aforementioned purposes, both on paper and on computer, by means of electronic or automated tools, in compliance with current legislation in particular regarding confidentiality and security and in compliance with the principles of correctness, lawfulness and transparency and protection of the Customer’s rights.
The processing is carried out directly by the owner’s organization by means of appointees, and by data processors appointed under art. 28 of Reg. EU 2016/679 and their possible appointees.
The list of designated data processors is constantly updated and available at the owner’s office.
COMMUNICATION AND DIFFUSION
The personal data you provide may be disclosed to recipients, appointed pursuant to art. 28 of Reg. EU 2016/679, which will process the data as managers and / or as natural persons acting under the authority of the owner and manager, in order to comply with contracts or related purposes. Specifically, the data may be disclosed to recipients belonging to the following categories:
subjects to whom such communication must be made in order to fulfill or to require the fulfillment of specific obligations under laws, regulations and / or community legislation;
subjects that provide services for the management of the information system and communication networks of the owner, including e-mail and the management of the website;
firms or companies in the context of assistance and consultancy relationships;
competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request;
in the case of administrative accounting purposes, the data may possibly be transmitted to commercial information companies for the assessment of solvency and payment habits and / or to subjects for credit recovery purposes.
external natural and / or legal persons who provide services that are instrumental to the activities of the Data Controller for the purposes referred to in the “Purpose of the Treatment” section (such as, for example, but not limited to, the installation and sales network of Trusted Tire, call center suppliers, consultants, companies, organizations, professional firms, research and market analysis companies). These subjects will operate as data processors.
Personal data will not be disseminated in any way.
The subjects belonging to the aforementioned categories perform the function of data processing manager, or operate in total autonomy as separate data controllers.
The list of designated data processors is constantly updated and available at the owner’s office.
PERIOD OF STORAGE OF PERSONAL DATA
The processing will be carried out in an automated and / or manual form, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed to do so.
In compliance with the provisions of art. 5 paragraph 1 letter. e) of Reg. 2016/679 the personal data collected will be stored in a form that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed and in compliance with the terms of the law for conservation of character. legal, tax or accounting.
TRANSFER OF DATA
Personal data are stored on an IT infrastructure located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the equipment even outside the EU. In this case, the Data Controller ensures from now on that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.
RIGHTS OF THE INTERESTED PARTY
In your capacity as an interested party, you have the rights referred to in art. 15 GDPR and precisely the rights of:
obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
obtain the indication: a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in case of processing carried out with the aid of electronic tools; d) the identification details of the owner, managers and designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents;
get: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) e b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in the previous point b), for direct marketing purposes using automated methods, it extends to traditional ones and in any case the possibility remains for the interested party to exercise the right to object even only partially. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication. Where applicable, it also has the rights referred to in Articles. 16-21 RGPD (Right of rectification, right to be forgotten, right to limitation of processing, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority
To exercise the rights referred to in art. 15 of the GDPR or for questions or information regarding the processing of your data and the security measures adopted, you can in any case forward the request to our company at the following address:
Eurodolciaria S.r.l.
Via Gounod 10/12, 20092 – Cinisello Balsamo (MI)
Tel: …..
E-mail: info@eurodolciaria.ch
PEC: eurodolciaria@postacert.vodafone.it