INFORMATION ON THE PROCESSING OF CLIENTS’ AND SUPPLIERS’ PERSONAL DATA
Art 13 – 14 GDPR Regulation EU 2016/679
The following information is provided on the processing of personal data transmitted to the Company:
1. Data Controller and Data Protection Officer (DC/DPO)
The Data Controller is the company Marcolin S.p.A., with registered office in Zona Industriale Villanova 4, 32013 Longarone (BL), VAT Reg. No. 00298010257 (hereinafter for the sake of brevity “the Company” or the “Data Controller”).
The Company has also appointed a Data Protection Officer (DPO) who can be contacted at: email@example.com.
2. Type of data processed, purposes and legal basis for processing
Generic personal data (contact details, name and surname, personal information, role, email address) of the Client/Supplier/client’s personnel are collected and processed for pre-contractual purposes, for the performance of the contract and for administrative-accounting-tax related obligations linked to invoicing. Unless the addressee objects, email addresses may also be used for the transmission of commercial information related to the scope of the contract.
The legal basis for the processing of the data is therefore that of fulfilling contractual and legal obligations as well as that of sending commercial information by email, the Data Controller’s legitimate interest as of article 130 of the Italian Privacy Code.
3. Disclosure of data to third parties - Recipients of the data
The Company may disclose the data for the purposes indicated above to: i) subjects in the company entrusted with the processing; ii) subjects outside the company belonging to the following categories: external consultants, service companies (transport, shipment, marketing and IT services, tax and debt collection services), the company’s sales network (agents), banks, control and supervisory bodies; iii) other Group companies.
4. Data transfer to third countries
The data processed could be transferred to third countries. If data is transferred, such transfer will be performed in accordance with the regulation concerning the transfer of data to third countries applicable at the time of the transfer.
5. Processing methods and data retention times and criteria
The data will be processed in printed and digital format and will be retained for the period necessary for the accomplishment of the purpose(s) indicated above and, after fulfilment of such purpose(s), for the further time-limit set by law regarding the retention of contracts and administrative data and/or for defence purposes in legal proceedings if necessary (ten years from the last use and/or event interrupting the statute of limitations). Data for the transmission of commercial communications will be used until the data subject withdraws consent.
6. Transmission of Data
The transmission of data is obligatory for the performance of the contract and for legal purposes. Non-transmission of data will make it impossible to fulfil the purposes indicated above. Instead, processing for the transmission of commercial communications is optional and the data subject can object to such processing.
7. Data subject’s rights, Withdrawal of Consent and Complaint to the Supervisory Authority
The data subject has the right to request access to his or her personal data, rectification, cancellation and restriction of the data, to object to the processing and to exercise the right to data portability at any time.
In any case, the data subject has the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
In the case of an alleged infringement, the data subject, assumptions existing, also has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement.
8. Profiling and automated decision-making processes
The processing is not performed using automated decision-making processes (e.g. profiling).
9. Contacts and questions
Send an email to the address indicated below to receive the complete list of designated representatives appointed for each area and activity and of the Data Processors/to obtain more information about the transfer of data to countries outside the EU, about the mechanisms and protection of the transfer of data as of article 44 et seq. of the GDPR/to exercise the right to withdraw consent already given/to exercise your rights (access, rectification, cancellation, restriction, objection, portability: firstname.lastname@example.org.