Pursuant to art. 13 of EU Regulation 2016/679 (hereinafter referred to as “GDPR 2016/679”) containing provisions for the protection of individuals regarding the processing of personal data, we herewith inform you that the personal data provided by you shall be subject to processing in compliance with the aforementioned regulations and the obligations of confidentiality imposed on the undersigned Company.
Legal basis of the processing
The personal data provided are processed according to the law, in order to fulfil a contract or in the pre-contractual phase.
Purposes of the processing
a) Execution of the obligations deriving from the contract of which you are a party or to fulfil specific requirements before or after the execution of the contract;
b) Fulfilment of legal obligations of an administrative, accounting, statutory, tax and regulatory nature and national and European Union regulations;
c) Provision of an effective management of commercial relations (acquisition of data and pre-contractual information, assessment of creditworthiness and solvency, etc.);
d) Protection of contractual rights and management of any dispute;
In the event that circumstances indicate the need to modify or integrate said purposes, we will make sure to promptly inform you.
Nature of the provision of data and consequences regarding the refusal to provide the data requested
The provision of your personal data is necessary and, as a result, your refusal to provide them or refusal for their subsequent processing shall imply the impossibility of establishing relations with the undersigned Company.
Methods of processing
The processing shall be carried out in automated/written form, with appropriate tools, adopting technical and organizational measures suitable for guaranteeing an appropriate level of security in relation to the risk.
The processing does not provide for automated decision-making.
Data Retention Period
Your data shall be held for no longer than the periods laid down by law or, if greater, by contractually imposed obligations.
Scope of communication and dissemination
Individuals or legal entities or categories of individuals or legal entities to whom your data shall be communicated or to whom they may be communicated, include, purely by way of example:
e) Public Bodies and Offices in general,
f) Banks, Credit Institutes, other credit centres,
g) Insurance companies,
h) Notaries, lawyers and professional firms and consultants in general,
i) The Central Credit Register, companies providing commercial data and the evaluation of creditworthiness and debt recovery companies,
j) The Tax Office,
k) Companies providing marketing support services,
l) Associated companies and subsidiaries,
m) Sub-contracting enterprises,
n) Our staff tasked with processing exclusively for the fulfilment of the purposes already referred to.
In all other cases, the communication of data shall be made only subject to the giving of your consent.
The personal data in our possession shall not be disseminated.
Transfer of personal data
Your personal data shall not be transferred to foreign countries not belonging to the European Union without your express consent.
Data subject’s rights
Pursuant to GDPR 2016/679, you may exercise the following rights at any time:
a. request confirmation of the existence or not of your personal data;
b. obtain indications regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom personal data have been or shall be communicated; the period of storage or criteria used to establish this;
c. cancel consent to processing;
d. obtain the modification, cancellation of data or the limitation of processing;
e. submit a complaint to the Italian Data Protection Authority;
f. obtain portability of the data, or receive them from the Data Controller in a structured form, for common use and readability by automated devices, and transmit them to another data controller without impediments, in the event that the processing is carried out with automated means and if technically feasible;
g. oppose processing at any time;
h. oppose an automated decision-making process relating to individuals, including profiling.
The data subject may exercise the aforementioned rights by contacting the Data Processor.
Data Controller and Processor
The Data Controller is C.M.B. Società Cooperativa Muratori e Braccianti di Carpi – Via Carlo Marx no. 101 – 41012 Carpi (MO).
The Data Processor is Dr. Paolo Zaccarelli – e-mail: email@example.com