Information document Clients under article 13 reg. EU 2016/679 GDPR-information for processing of personal data collected from the data subject
In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) we provide the necessary information regarding the processing of personal data provided. This is an information that is provided pursuant to art. 13 of EU Reg. 2016/679 and subsequent national adaptation legislation (European regulation for the protection of personal data)
Personal data that can be processed: «personal data»: any information concerning an identified or identifiable natural person («concerned»); an identifiable natural person can be identified, either directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online ID or one or more characteristic elements of his physical identity, physiological, genetic, psychological, economic, cultural or social; (C26, C27, C30)
HOLDER OF TREATMENT, pursuant to articles 4 and 24 of the EU Reg. 2016/679 is Saccheria Reggiana srl with headquarters Via Galileo Galilei 25 – 42027 Montecchio Emilia (Re) Italy in the person of the legal representative mail tel. + 039 0522-865424
e-mail: firstname.lastname@example.org RESPONSIBLE FOR TREATMENT, List of data processors pursuant to arts. 4 and 28 of EU Reg. 2016/679 is constantly updated and available by writing email@example.com or at the registered office of Saccheria Reggiana srl in Via Galileo Galilei 25 – 42027 Montecchio Emilia (Re) Italy
PURPOSE AND LEGAL BASIS OF TREATMENT The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to art. 6 b) EU Reg. 2016/679 for the following purposes: -treatment necessary in the context of a contract or for the purpose of concluding a contract and related administrative, accounting and pre-contractual activities.
ADDRESSEES OR CATEGORIES OF DATA ADDRESSEES
The personal data provided will be communicated to recipients, who will process the data as managers (Article 28 of EU Reg. 2016/679) and / or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of EU Reg. 2016/679), for the purposes listed above. Precisely, the data will be communicated to: the sales / distribution network on the territory; – subjects that provide services for the management of the information system and communication networks (including e-mail); – studies or companies in the context of assistance and consultancy relationships; – competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request; – in the case of administrative and accounting purposes, the data may eventually be sent to commercial information companies for the assessment of solvency and payment habits and / or subjects for credit recovery purposes. The subjects belonging to the aforesaid categories perform the function of Data Processing Manager, or operate in complete autonomy as separate Data Controllers. The list of data processors is constantly updated and available by writing to firstname.lastname@example.org or at the registered office in Via Galileo Galilei 25 – 42027 Montecchio Emilia (Re) Italy
TRANSFER DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES Personal data provided will be transferred to countries belonging to the European Union and to countries outside the EU, in order to comply with the aforementioned purposes. The data will be transferred according to Article 44 – General principle for the transfer; Article 45 – Transfer on the basis of an adequacy decision; Article 46 – Transfer subject to adequate guarantees, specifically the data will be transferred: – to third countries international organizations for which the Commission has intervened with an adequacy assessment (Article 45 EU Reg. 2016/679) – to third countries or organizations international organizations that have provided adequate guarantees and in which the person concerned has rights to action and effective reminder (Article 46 EU Reg. 2016/679, also with contractual clauses and the other provisions referred to in Article 46, paragraph 3 ) – to third countries or international organizations on the basis of binding corporate rules for companies belonging to the same business group (Article 47 of the EU Reg. 2016/679)
– towards third countries international organizations on the basis of exceptions in specific situations (Article 49 of the EU Reg. 2016/679) The interested party may obtain information on the guarantees for data transfer by writing an email to email@example.com PERIOD OF CONSERVATION OF DATA OR CRITERIA FOR DETERMINING THE PERIOD
The processing will be carried out in an automated and manual way, with methods and tools aimed at guaranteeing maximum security and confidentiality, by subjects specifically appointed to do so. In compliance with the provisions of art. 5 paragraph 1 letter e) of Reg. UE 2016/679 the personal data collected will be stored in a form that allows identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The retention of personal data is 10 years due to legal obligations.
RIGHTS OF THE INTERESTED PARTIES You can assert your rights as expressed in the EU Regulation 2016/679, by contacting the Data Controller, sending an e-mail to firstname.lastname@example.org or writing to the office of the owner indicated above.
You have the right, at any time, to ask the Data Controller to access your personal data (Article 15), the correction (Article 16) or the cancellation (Article 17) of the same, or the limitation of processing (Article 18) Withdrawal of consent: the processing has no legal basis in the consent but in the contract; To oppose the treatment and to exercise the other rights you can write to email@example.com You have the right to lodge a complaint with a supervisory authority; The communication of personal data is a contractual obligation. Failure to provide personal data will make it impossible to conclude the contract. There is no automated decision-making process.
Date of update 06-08-2018
Saccheria Reggiana srl