NOTICE IN ACCORDANCE WITH REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Legislative Decree No. 196 of 30/06/2003, amended by Legislative Decree 10/08/2018 No. 101 published in the Official Journal of 04/09/2018, related on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"). In accordance with Articles 13 and 14 GDPR, we provide the following information:
1. Identity and contact details of the data controller and its representative
THE DATA CONTROLLER is the company GIORGIO BORMAC S.R.L., with registered office in via della Meccanica n. 25 CARPI (MO) - Cap. 41012, entered in the Register of Companies of MODENA under no. MO - 448608; VAT No.: 04168650366; Telephone: 059653274; E-mail: info@giorgiobormac.com ; Certified e-mail: gbormac@legalmail.it
THE REPRESENTATIVE OF THE DATA CONTROLLER is the legal representative pro tempore - currently Ms. Orlandi Rosanna, domiciled at the registered office of the Controller and in any case, the person who is indicated in the Register of Companies as the legal representative.
2. Contact details of the data protection officer
Not applicable.
3. Types of processed data
The Personal Data that may be collected and processed by the Data Controller during the relationship established, may refer to the following categories of interested party:
i) Individuals who are customers and suppliers of the Data Controller;
ii) individuals as legal representatives of companies that are customers or suppliers of the Data Controller;
ii) individuals who are employees, collaborators or consultants of customers or suppliers of the Data Controller.
The Data Controller will process the Personal Data of the aforementioned subjects that fall under the definitions in Article 4(1) of the Regulations, and in particular the identification data of the natural persons including, primarily and not exhaustively, first name, last name, domicile and/or residence, telephone numbers, e-mail address, chat or social contact, online identifier, tax code, VAT number., R.I. and R.E.A. registration no., registration no. in the Register, data and bank details.
4. Purpose of Processing
Personal Data will be processed for the following purposes:
a) to carry out activities preliminary and consequent to the execution of commercial contracts, i.e. to fulfil all contractual and pre-contractual obligations with reference to the data of the subjects provided for in paragraphs i), ii) and iii) of point 3);
b) to fulfil the obligations to which the Data Controller is subject, provided for by the laws in force (e.g. civil law obligations, fiscal and accounting obligations such as, bookkeeping, invoicing, sending data to the State financial administration) - with reference to the data of the subjects provided for in paragraphs i) and ii) of point 3);
c) to carry out the following activities, not personalized and without the creation and use of profiles, related to goods and services object of the Data Controller's activity: direct marketing activities, promotion, advertising and propaganda activities by means of sending illustrative and informative material of a commercial nature; with reference to the data of the subjects provided for in paragraph i) of point 3);
d) to carry out customer satisfaction surveys without creation and use of profiles.
5. Legal basis for processing
Personal Data for the purposes of (a) and (b), of point 4) are lawfully processed as they meet the conditions of Article 6(1)(b) and (c) ("processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken upon request of the data subjects and processing is necessary for compliance with a legal obligation"), while data for the purposes of (c) and (d) of 4) are lawfully processed because they meet the conditions of Article 6(1)(f) ("processing is necessary for a legitimate interest of the Data Controller").
6. Provision of data and refusal
The provision of data is necessary for the purpose of carrying out the contractual purposes mentioned in point 4), and the refusal of the data subjects to provide such data make it impossible to fulfil the above-mentioned purposes.
7. Method of processing
The processing is carried out through operations, with or without the aid of electronic instruments and consists of the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, deletion and destruction of data. The processing is carried out by the Data Controller, by internal subjects expressly authorized by it, or by one or more external data processors appointed by the Data Controller.
8. Target audience
The Personal Data, acquired by the Data Controller may be communicated for the purposes provided for in point 4) to the following subjects:
a) third parties and non-members, entrusted by the Data Controller with the performance of contractual obligations and protection of rights provided for in point 4) (e.g. suppliers, employees, collaborators, consultants, professionals, etc...) - with reference to the data of the subjects provided for in paragraphs i), ii) and iii) of point 3);
b) third parties commissioned by the Data Controller, as persons in charge of certain processing, for the performance of specific activities, referred to the fulfilling of obligations different but related to the contractual ones - with reference to data of the subjects provided for in paragraphs i) and ii) of point 3);
c) credit institutions and other financial operators - with reference to the data provided for in paragraph i) of point 3);
d) State Financial Administration and other Entities for legal obligations of the Data Controller - with reference to the data provided for in paragraph i) of item 3);
e) all other entities for which the communication is necessary for the proper fulfilment of legal obligations of the Data Controller - with reference to the data provided for in paragraph i) of point 3). The Personal Data are not subject to disclosure.
9. Transfer of Data Abroad
The Owner does not transfer Personal Data outside the European Economic Area.
10. Retention Period.
The Personal Information collected is retained only for as long as necessary to achieve the purposes provided for in point 4).
Access to information is limited only to those who need to use it for relevant purposes. Personal Data that are no longer needed, or for which there is no longer a legal basis for their retention, are permanently deleted.
Personal Data will be retained according to the aforementioned manner for:
a) the entire contractual term and after the termination of the contractual relationship, for 10 years as the ordinary limitation period, without prejudice to different retention periods provided by law;
b) in litigation cases for the entire duration of the same and until the exhaustion of the terms of admissibility of protection and appeal actions.
11. Rights of the Interested Party
The data subject may, at any time, exercise the rights according to the cases provided for in the third and eighth chapters of EU Regulation no.679/2016 and by any relevant regulations issued by the Italian State, in particular:
(a) the right to copy the personal data provided by you;
(b) the right to access the personal data;
(c) the right to obtain the rectification or erasure of the data or the restriction of the processing that concerns you;
(d) the right to object to the processing;
(e) the right to data portability;
(f) the right to withdraw consent, where applicable (withdrawal of consent does not affect the lawfulness of the processing based on the consent given before the withdrawal);
(g) the right to lodge a complaint with the supervisory authority.
The exercise of these rights is subject to certain exceptions aimed at safeguarding the public interest (e.g. prevention or identification of crimes) and our interests. In case you exercise any of the above rights, it will be our responsibility to verify that you are entitled to exercise them, and we will respond to you, as a rule, within one month.
You may exercise your rights by sending a request by email to privacy@giorgiobormac.com