POLICY AND CONSENT REQUEST FOR THE PROCESSING OF PERSONAL DATA PURSUANT TO THE REGULATION EU 679/2016 AND CURRENT ITALIAN LEGISLATION IN FORCE
Our Company, in order to carry out its business needs to process some of your personal data. Therefore, pursuant to the art. 13 of the European Regulation 2016/679 – “Regulation on the protection of individuals s with regard to the processing of personal data and on the free movement of such data” (hereafter the “Regulation”), as well as the Italian regulation in force, we provide the policy related to the processing of your personal data below.
1. Purpose of the processing
Your personal data – belonging to the category of common and sensitive data – will be processed by Us:
a) for pre-contractual and contractual requirements, for the provision of services as stated by the contracts;
b) for administrative-accounting, operational and management needs relating to our business and monitoring of customer relations;
c) to comply with the provisions of law related to civil, fiscal or other kinds of rules, regulations or Community rules;
d) to send commercial, promotional and courtesy information and questionnaires to evaluate customer satisfaction and their qualification
2. Nature of the provision and legal basis
The provision of data for the purpose letter d), is not mandatory therefore any refusal has no consequence except for the impossibility to implement initiatives aimed at improving our service to you, as well as to keep your information updated on the developments of our offer, while the failure to provide data for all other purposes will make it impossible to establish the contractual relationship or its continuation.
With regard to the processing:
1. in the previous paragraph 1 point a); b) the related legal basis lies in the need to comply with the obligations contractually accepted and the provision of the services requested;
2. in the previous paragraph 1 point c) the related legal basis lies in the fulfilment of regulatory obligations;
3. in the previous paragraph 1 points d), the relative legal basis lies in the consent, except for commercial communications relating to products and/or services similar to those already purchased and/or signed by the customer for which the processing is based on a legitimate interest of the Controller;
3. Method of data processing
The processing of personal data for the purposes set out above are subjected to both paper and electronic and/or automated processing in compliance with the security and confidentiality rules provided for by law, by the Regulation, by subsequent regulations and by appropriate internal provisions.
4. Category of recipients
Personal data will be processed by third-party service providers named as Processors by the Controller and by employees or collaborators of our company, as subjects authorized to process personal data and instructed to do so by the controller within their respective job functions.
A complete list of persons, appointed by the Controller, in charge of processing personal data can be obtained by directly contacting the Controller, as indicated in the following paragraph 5. In particular, to: group companies, companies, collaborators and external professionals for specific technical-commercial, legal and administrative-accounting services for the execution of pre-contractual measures and/or contractual obligations, to the sales network (agents, dealers, sub-suppliers, subcontractors, etc. ..), to subcontractors; offices and public bodies for compliance with the law and for participation in tenders, credit institutions for the management of cash receipts and payments, the courts, Police Force and other public authorities, the Local Health Authority (ASL), Regions and other public bodies for the provision of contributions.
The Controller is : ANTANO GROUP S.R.L., located in Via delle Industrie, 10 – Zona Ind.le S. Eraclio di Foligno. You can contact the Controller at any time by directing your communication to the attention of the Controller for the protection of personal data to one of the following addresses: by sending an e-mail to email@example.com or by writing by post to the address of the headquarters provided above.
6. Transfer of personal data abroad and dissemination of data
Your personal data may be transferred abroad, mainly to European countries. However, they may also be transferred to non-EU countries in accordance with the applicable legal provision and taking measures which will guarantee the necessary levels of security. In particular, if the data are transferred to countries outside Europe and in the absence of European Commission adequacy decisions, the transfers will take place based on the “Standard Contractual Clauses” issued by the Commission itself, to guarantee correct processing. In any case, you may always contact the Controller at the addresses indicated in the previous paragraph 5, in order to have correct information about the transfer of your Data and the specific place of their collation. Your personal data will in no case be disclosed.
7. Your rights (articles 15,16, 17, 18, 20, 21 of the Regulation)
Pursuant to articles 15, 16, 17, 18, 20, 21 of the Regulation, you have the right to access your personal data, to obtain information about the processed data, the purposes and methods of processing; to obtain the rectification and updating of the data, to request the limitation of the processing carried out on personal data (including, where possible, the right to be forgotten and right to erasure); to object for legitimate purposes to the processing of data and exercise your right to data portability; right to lodge a complaint with the Supervisory Authority.
To exercise your rights, please direct the request to the company indicated above to the attention of the Controller, to the following address: Via delle Industrie, 10 – Zona Ind.le S. Eraclio di Foligno or by Email to the following address: firstname.lastname@example.org.
8. Personal Data retention times
The processed data will be retained in our protected archives for as long as necessary based on the requested Services.
Once the requested Activity has been completed, the data may be deleted or retained solely for documentation purposes of the activity carried out (if indispensable) or for historical and/or statistical purposes (in this case anonymously), except for tax information which will be retained for a period corresponding to the legal obligations. The contact data for marketing purposes will be used until the withdrawal of the specific consent. Any data relating to the protection of rights (including in a judicial context), will be retained once the court decision becomes res judicata or until final case status and, where necessary, until the subsequent executive phase.