INFORMATION ON THE PROCESSING OF PERSONAL DATA – CUSTOMERS

(General Regulation on Data Protection – GD.PR 2016/679)

 

This information notice is given to natural persons and to natural persons who operate in the name and on behalf of legal persons pursuant to art. 13 of Legislative Decree no. 196 of 30 June 2003 – “Personal Data Protection Code” and art. 13 of GDPR 679/2016 – “European Regulation on the Protection of Personal Data”.

 

  1. Purpose of processing, legal basis and retention period

 

We inform you that your personal data provided by you and acquired by INDUSTRIALFORNITURE SRL will be processed in compliance with the guarantees of confidentiality and security measures provided by law, even with the help of electronic means directly and / or through third parties, for the purposes listed below along with the legal basis of reference:

 

  PURPOSE DATA PROCESSING LEGAL BASIS
1 Purposes strictly related to the execution of the contract and the supply of goods covered by it. Ø  Personal and contact details

Ø  Payment details

Contract of which the interested party is a party
2 Purposes connected with the fulfilment of tax, accounting and other legal obligations Ø  Personal and contact details

Ø  Payment details

Standard Member State

 

Tax and accounting regulations and other legal requirements
3 Exercise of the rights of the Holder, for example the right of defence in cour Ø  Personal and contact details

Ø  Payment details

Ø  Data relating to debt behaviour, economic solvency and the presence of judicial measures

 Legitimate interest
4 Exercise of the rights of the Holder – credit protection (verification of creditworthiness, creditworthiness and earning capacity). Ø  Data relating to debt behaviour, economic solvency and the presence of judicial measures Legitimate interest

 

  1. Compulsory or optional nature of the provision of data and consequences of a possible refusal to provide.

 

The provision of data for the purposes referred to in point 1, 2 and 3 is optional but necessary to execute the contract. Without such data it will not be possible to provide the services / goods covered by the contract. Therefore, any refusal to provide such data may result in the inability to use the services covered by the contract.

 

  1. Storage times

 

The data will be processed for the period of time necessary for the pursuit of the purposes indicated above and in any case not beyond the legal retention period provided for by law (currently 10 years from the time of termination of the contract / assignment). In case of pending judgment, the data will be processed until their resolution.

 

 

 

 

  1. Contact details of the Data Controller and Data Protection Officer

 

The Data Controller of your personal data is INDUSTRIALFORNITURE SRL, responsible towards you for the legitimate and correct use of your personal data and that you can contact for any information or request at the following addresses:

 

Data Controller: INDUSTRIALFORNITURE SRL

Head office: VIA GALILEO GALILEI 2/4, 57023 CECINA (LI)

Phone: 0586 661375

E-mail: industrialforniture@industrialforniture.it

PEC: info@pec.industrialforniture.it

 

  1. Intended purpose and transfer of data outside the EU

 

Your data may be transferred outside the European Economic Area. In this case INDUSTRIALFORNITURE SRL ensures that the processing of your personal data by these parties to whom the data are transferred is in compliance with European Regulation 679/2016, all in accordance with the principles set out in art. 45 of GDPR 2016/679 regarding the existence of a decision of adequacy by the European Commission, or in the absence of such decisions in accordance with Article 49 paragraph 1 letter b) – transfer necessary for the execution of a contract concluded between you and INDUSTRIALFORNITURE SRL.

 

Your data may be communicated, in addition to the staff in charge of processing, also to the following subjects:

 

  • private and public entities for the performance of administrative and legal procedures in compliance with the provisions of EU Regulation no. 679/2016;
  • consultants and companies that assist the Company in terms of information technology and infrastructure;
  • professionals, service consortia and consultants who assist the Company from a fiscal, commercial and legal point of view;
  • banks and credit institutions;
  • insurance companies;
  • judicial offices;
  • other companies and professionals who collaborate with the Company for the performance of services subject to contract/assignment;
  • Agents and representatives who collaborate with the company.

 

The data will not be subject to other modes of dissemination.

 

  1. Rights of the interested party

 

Please note that as a data subject you have, in addition to the right to complain to the Control Authority, the rights listed below, which you can enforce by making a request to the Data Controller and / or the Data Processor, contacting him at the addresses listed in paragraph 4.

GDPR Standard Ref. Rights of the data subject
Art. 15 – Right of access You have the right to obtain from the Data Controller confirmation whether or not personal data concerning you are being processed and, in this case, to obtain access to personal data and information concerning the processing.
Article 16 – Right of rectification You have the right to obtain from the data controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing an additional statement.
Article 17 – Right to cancellation (right to be forgotten) You have the right to obtain from the Data Controller the deletion of your personal data without undue delay and the Data Controller has the obligation to delete your personal data without undue delay.
Art. 18 – Right to limit treatment Art. 18 – Right to limit treatment

You have the right to obtain from the Data Controller the limitation of the processing when one of the following hypotheses occurs:

a) the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;

(b) the processing is unlawful and the data subject objects to the deletion of the personal data and requests instead that their use be limited;

c) although the Data Controller no longer needs it for the purposes of processing, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;

(d) the data subject has objected to the processing pursuant to Article 21(1), pending verification that the legitimate reasons of the data controller may take precedence over those of the data subject.
Art. 20 – Diritto alla portabilità dei dati You have the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to a Data Controller and you have the right to transmit such data to another Data Controller without hindrance by the Data Controller to whom you have provided them. In exercising your rights regarding data portability, you have the right to obtain the direct transmission of personal data from one Data Controller to another, if technically feasible.
Article 21 – Right of opposition You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(e) or (f), including profiling on the basis of those provisions. If you have given consent for one or more specific purposes, you have the right to withdraw such consent at any time.
Art. 22 – Right not to be subject to      automated decision-making, including profiling You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which significantly affects you in a similar way.