INFORMATION ON THE PROCESSING OF PERSONAL DATA – SUPPLIERS
(General Data Protection Regulation – GDPR 2016/679)
This information notice is given to natural persons and natural persons acting in the name and on behalf of legal persons pursuant to Articles 13 and 14 of Legislative Decree no. 196 of 30 June 2003 – “Code for the Protection of Personal Data” and Article 13 of GDPR 679/2016 – “European Regulation on the Protection of Personal Data”.
- Purpose of processing, legal basis and storage period
We inform you that your personal data provided by you and acquired by INDUSTRIALFORNITURE SRL will be processed in compliance with the guarantees of confidentiality and security measures provided by law, even with the help of electronic means directly and / or through third parties, for the purposes listed below along with the legal basis of reference:
PURPOSE | DATA TREATED | LEGAL BASIS | |
1 | Purposes strictly related to the contract between INDUSTRIALFORNITURE SRL and the supplier | Ø Personal data and
Contact |
Contract of which the interested party is a party |
2 | Purposes related to the fulfilment of fiscal and accounting obligations and other legal obligations | Ø Personal and contact details
Ø Payment details |
Standard Member State
Tax and accounting regulations |
3 | Exercise of the rights of the Holder, for example the right of defence in court | Ø Personal and contact details
Ø Payment details |
Legitimate interest |
- Compulsory or optional nature of the provision of data and consequences of a possible refusal to provide.
The provision of data for the purposes referred to in point 1, 2 and 3 is not optional but necessary to execute the contract between the parties. Therefore, any refusal to provide such data may make it impossible for INDUSTRIALFORNITURE SRL to conclude the contract with the supplier.
- Storage times
The data will be processed for the period of time necessary for the pursuit of the purposes indicated above and in any case not beyond the legal retention period provided for by law (currently 10 years from the time of termination of the contract / assignment). In case of pending judgment, the data will be processed until their resolution.
- Contact details of the Data Controller and Data Protection Officer
The Data Controller of your personal data is INDUSTRIALFORNITURE SRL, responsible towards you for the legitimate and correct use of your personal data and that you can contact for any information or request at the following addresses:
Data Controller: INDUSTRIALFORNITURE SRL
Head office: VIA GALILEO GALILEI 2/4, 57023 CECINA (LI)
Phone: 0586 661375
E-mail: industrialforniture@industrialforniture.it
PEC: info@pec.industrialforniture.it
- Intended purpose and transfer of data outside the EU
Your data may be transferred outside the European Economic Area. In this case INDUSTRIALFORNITURE SRL ensures that the processing of your personal data by these parties to whom the data are transferred is in compliance with European Regulation 679/2016, all in accordance with the principles set out in art. 45 of GDPR 2016/679 regarding the existence of a decision of adequacy by the European Commission, or in the absence of such decisions in accordance with Article 49 paragraph 1 letter b) – transfer necessary for the execution of a contract concluded between you and INDUSTRIALFORNITURE SRL.
Your data may be communicated, in addition to the staff in charge of processing, also to the following subjects:
- private and public entities for the performance of administrative and legal procedures in compliance with the provisions of EU Regulation no. 679/2016;
- consultants and companies that assist the Company in terms of information technology and infrastructure;
- professionals, service consortia and consultants who assist the Company from a fiscal, commercial and legal point of view;
- banks and credit institutions;
- insurance companies;
- judicial offices;
- other companies and professionals who collaborate with the Company for the performance of services subject to contract/assignment;
- Agents and representatives who collaborate with the company.
The data will not be subject to other modes of dissemination.
- Rights of the interested party
Please note that as a data subject you have, in addition to the right to complain to the Control Authority, the rights listed below, which you can enforce by making a request to the Data Controller and / or the data controller, contacting him at the addresses listed in paragraph 4.
GDPR Standard Ref. | Rights of the data subject |
Art. 15 – Right of access | You have the right to obtain from the Data Controller confirmation whether or not personal data concerning you are being processed and, in this case, to obtain access to personal data and information concerning the processing. |
Article 16 – Right of rectification | You have the right to obtain from the data controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing an additional statement. |
Article 17 – Right to cancellation (right to be forgotten) | You have the right to obtain from the Data Controller the deletion of your personal data without undue delay and the Data Controller has the obligation to delete your personal data without undue delay. |
Art. 18 – Right to limit treatment | Art. 18 – Right to limit treatment
You have the right to obtain from the Data Controller the limitation of the processing when one of the following hypotheses occurs: a) the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; (b) the processing is unlawful and the data subject objects to the deletion of the personal data and requests instead that their use be limited; c) although the Data Controller no longer needs it for the purposes of processing, personal data are necessary for the data subject to ascertain, exercise or defend a right in court; (d) the data subject has objected to the processing pursuant to Article 21(1), pending verification that the legitimate reasons of the data controller may take precedence over those of the data subject. |
Art. 20 – Diritto alla portabilità dei dati | You have the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to a Data Controller and you have the right to transmit such data to another Data Controller without hindrance by the Data Controller to whom you have provided them. In exercising your rights regarding data portability, you have the right to obtain the direct transmission of personal data from one Data Controller to another, if technically feasible. |
Article 21 – Right of opposition | You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(e) or (f), including profiling on the basis of those provisions. If you have given consent for one or more specific purposes, you have the right to withdraw such consent at any time. |
Art. 22 – Right not to be subject to automated decision-making, including profiling | You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which significantly affects you in a similar way. |