INFORMATION ON THE PROCESSING OF PERSONAL DATA – CUSTOMERS/SUPPLIERS
pursuant to and for the purposes of art. 13 of EU Regulation 2016/679
(General Data Protection Regulation)
Dear Customer/Supplier, pursuant to art. 13 of EU Regulation 2016/679 hereinafter “Regulation” and in relation to the personal data concerning you, our company, as data controller, pursuant to existing contracts wishes to provide you with the following information.
-
Identification details of the data controller
The data controller is ______ with registered office in _____ and operational headquarters at the same address. The contact details are as follows: Telephone (+39) 327 542 9520 E-mail: mydriverbrescia@gmail.com. Please note that given that the data controller is established within the European Union, the appointment of a representative of the data controller is not necessary.
-
Contact details of the data protection officer
Following verification of the applicability of the provisions of art. 37 of the Regulation, the appointment of a Data Protection Officer was excluded, as the company does not fall into any of the cases contemplated.
-
Purpose of the processing for which the data is intended and legal basis
The processing is aimed at carrying out the following activities:
– Fulfillment of legal and/or contractual obligations, performance of uses and customs, regarding the commercial activity of the company;
– Accounting and administrative processing;
– Management of legal obligations and disputes;
– Obligations related to current legislation on health and safety at work;
– Obligations related to the application of the internal Management System of the company.
The legal basis of the processing is constituted by the following elements: contract for the acquisition/supply of goods or services, Legislative Decree 81/2008 and subsequent amendments with regard to the legislation in force on health and safety at work and the regulations related to the application of the Civil Code and the Penal Code.
The processing is carried out by means of operations or sets of operations and in particular: collection, recording, organization, storage, processing, modification, comparison, interconnection; selection, extraction, consultation, communication, blocking, cancellation and destruction; it is carried out with or without the aid of electronic means; it is carried out by the organization of the Owner and by trusted companies, the list of which is available from the Owner, who are our direct collaborators and who operate in total autonomy as separate external controllers of the processing of personal data, obliged to comply on their own and according to a contract with our company with the legislation on the protection of personal data.
Personal data are not subject to disclosure.
-
Legitimate interests of the Data Controller
In the event that processing is carried out pursuant to art. 6, paragraph 1, letter f), it will be carried out exclusively for the satisfaction of the legitimate interests of the data controller.
-
Recipients of personal data
The personal data collected may be communicated to:
– all subjects whose right to access such data is recognized by virtue of regulatory provisions;
– to our collaborators within the scope of their respective duties;
– to all those natural and/or legal persons, public and/or private when the communication is necessary or functional to the performance of our activity and in the ways and for the purposes illustrated.
-
Transfer of personal data abroad
The data controller does not intend to transfer personal data to third countries or international organizations outside the European Union.
-
Period of retention of personal data
The time limit for data retention for tax purposes currently in force (10 years) is assumed as the parameter.
-
Rights of the interested party
The interested party has the right (Chapter III Rights of the interested party) to ask the data controller for access to personal data and the rectification or erasure of the same, as well as the limitation or opposition to their processing and the portability of the data.
To exercise these rights, please refer to the contact details mentioned above.
-
Revocation of consent
The interested party has the right to withdraw the consent expressed pursuant to art. 6, paragraph 1, letter a) and art. 9, paragraph 2, letter a).
-
Right to Complain to the Supervisory Authority
The interested party has the right to lodge a complaint with the Supervisory Authority, which can be reached at the following addresses: Personal Data Protection Authority – Piazza di Monte Citorio n. 121 00186 ROME Fax: (+39) 06.69677.3785 Telephone switchboard: (+39) 06.696771 E-mail: garante@gpdp.it Certified mail: protocollo@pec.gpdp.it . The references and methods for exercising the right to lodge a complaint are reported on the website of the Privacy Authority http://www.garanteprivacy.it.
-
Communication of personal data
The communication and subsequent processing of personal data constitutes a necessary condition for the completion of the contract in force with our company. Failure to communicate will result in the non-applicability of the contract.
-
Automated decision making
The personal data collected will not be subjected to automated decision-making processes, including profiling.
