pursuant to Art. 13 of EU Regulation 2016/679 - GDPR
The undersigned company, as the Data Controller (hereinafter, "Data Controller") shall inform you according to art. 13 of EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the following manner and for the following purposes.
1. Scope of the processing
The Data Controller processes personal, identifying, and non-sensitive data (in particular, name, surname, tax code, VAT number, email, telephone number - hereinafter, "personal data" or even "data") provided by you at the beginning of commercial relations with the Data Controller.
2. Purpose of the processing
Your data are processed without your prior expressed consent (Article 6 point b, and GDPR), for the following purposes: a) to fulfill the pre-contractual, contractual, and tax obligations deriving from existing relationships with you; b) to fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority; c) to exercise the rights of the Data Controller, for example, the right to defense in court.
We inform you that, if you are already our customer, we may send you marketing communications relating to the Data Controller's services and products similar to those you have already used, unless otherwise expressly dissent.
3. Method of treatment
The processing of your data is carried out employing the operations indicated in art. 4 n. 2) GDPR and, more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation, and destruction of data.
Your data is subjected to both paper and electronic processing, including automated processing. The Data Controller will process your data for the time necessary to fulfill the aforementioned purposes, and, in any case, for no more than ten years from the termination of the relationship for the purposes referred to in art. 2.
4. Data access
Your data may be made accessible for the purposes referred to in art. 2: a) for Data Controller's employees and co-workers, in their role of internal people in charge for the treatment, or system administrators; b) to third parties (for example, providers for the management and maintenance of the website, suppliers, credit institutions, professional firms, etc.) who carry out outsourced activities on behalf of the Data Controller, in their capacity as data processors.
5. Data Communication
" Without your express consent (Article 6 letter b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2: to Supervisory Bodies, Judicial Authorities, and to all those subjects to whom communication is mandatory by law for the accomplishment of the aforementioned purposes.
Your data will not be disclosed. "
6. Data Transfer
The management and the storage of your data will be handled internally. Your data will not be transferred outside of the European Union.
7. Nature of the collection and consequences of the refusal to respond.
The provision of data for the purposes referred to in art. 2 is mandatory. In their absence, we can not guarantee the services of the art.
8. Rights of the Data Subject
The Data Subject you have the rights referred to in art. 15 GDPR. Where applicable, you also have the rights referred to in Articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.
9. How to exercise your rights
You can exercise the rights referred to in point 8 at any time by sending a registered letter to the Data Controller's address, or an e-mail to email@example.com
10. Data Controller
The Data Controller is INDUSTRIAL TECNICA S.r.l. An updated list of data processors is available, on request, at the operational headquarters.