Information on processing personal data pursuant to Articles 13-14 of EU Regulation 2016/679
Data subjects: Customers/Suppliers
The undersigned company notifies that,for the needs of the business it carries out and relatively to its personal data, it is the Controller of data qualified as personal data pursuant to EU Regulation (Reg. 2016/679 dated 27 April 2016).
The aforementioned regulation establishes the right of every person to the protection of personal data concerning them. The processing of personal data must therefore be based on compliance with the principles of lawfulness, correctness, transparency, relevance and limitation in such a way as to guarantee the adequate security of personal data.
Art. 1 –Processing purposes and methods
We therefore inform you that such data will be processed with the support of paper, computerized or telematic means to manage customers/suppliers.
The provision of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to supply it in whole or in part can give rise to the impossibility for the company to execute the contract/agreement or to correctly perform all the fulfilments.
The legal basis of the processing is constituted by the obligations established by national and Community legislation
Art. 2 – Notification
Without prejudice to notifications carried out to fulfil legal and contractual obligations, all collected and processed data may be notified within the EU and transferred to non-EU countries exclusively for the purposes specified above to the following recipient categories:
- Professionals or service companies for business administration and management that operate on behalf of our company;
- Credit institutions;
- Public bodies (Revenue Agencies, …)
- Judicial and Police Authorities
The subjects belonging to the categories to which the data may benotified will process the data and use it, according to the circumstances, as Data Processors expressly appointed by the Controller pursuant to law, or rather as independent Controllers.
The undersigned company appoints all employees pro tempore andcollaborators, including occasional ones, who perform tasks that involve the processing of personal data as “persons authorized” to process.
Art. 3 – Data retention
Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Article 5 of the GDPR, the retention period of your personal data is in accordance with regulatory requirements.
Art. 4 Rights of the data subject
With regard to all the personal data processed, you may at any time, exercise the rights provided by the GDPR, namely: right of access, rectification, deletion (“right to be forgotten”), limitation of processing, data portability, opposition, as well as generally all the rights provided by Articles 15-22 of the aforementioned Regulation, within the limits and under the conditions provided therein.
You also have the right to lodge a complaint with the competent Supervisory Authority or with the Guarantor for the protection of personal data.
Art. 5 Data Controller and Data Protection Officer
The Controller of your Personal data isDIAMANTINO TOWN HOUSE – Via Goito 2/b – 35142 Padova
Padova, 31 marzo 2019
The Data Controller
DIAMANTINO TOWN HOUSE
DIAMANTINO TOWN HOUSE
Sede Legale: Via Goito 2/b – 35142 Padova – Sede Operativa: Piazza Dei Signori 28 – 35139 Padova