Information notice pursuant to Article 13 of the REGULATION (EU) 2016/679 (GDPR) – Processing of personal data collected from data subject
Pursuant to Reg. UE 2016/679 (General Data Protection Regulation) we provide you the due information concerning processing of collected personal data in accordance to art. 13 of the abovementioned Regulation.
Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30).
Personal data that will be processed for the mentioned purposes are: -first name, last name, address, tax code, VAT Number related to natural person processed by company for contract conclusion and subsequent fulfilment, in person of the legal representative who enters into an agreement on behalf of, and for the customer, as well as employees/advisors’ acting as handlers of him.
PURPOSES OF PROCESSING | LEGAL BASIS FOR THE PROCESSING | DATA RETENTION | NATURE OF UNDERWRITING
|PURPOSES OF PROCESSING||LEGAL BASIS FOR THE PROCESSING||DATA RETENTION||NATURE OF UNDERWRITING|
|A) Processing necessary for the fulfilling contractual and precontractual obligations and for related administrative and accounting purposes.||Contract
art. 6 lett. b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
art. 6 lett. c) GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject to.
|10 years or otherwise stated by law Art. 2220 C.C.||Personal data provision is necessary for the above mentioned purposes, in order to draw up the contract between parties and to purposes related to the management of administrative and accounting fulfillments. The refusal will prevent from giving effect to the contract.|
|B) SOFTSPAM: for commercial / promotional information via e-mail, to the email address supplied by a data subject in the context of the sale of a product or service, relating to products or services that are similar to those that have been the subject of the sale (Soft spam) – art. 130, par. 4 Italian Legislative Decree no. 196/03 / legitimate interest (art. 6 lett. f) Reg. UE 2016/679), until oppostion.||Legitimate interest - art. 6 lett. f) and recital 47 GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, relating to the communication of commercial / promotional information relating to products or services that are similar to those that have been the subject of the sale, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, taking into consideration the reasonable expectations of data subjects based on their relationship with the controller||Until opposition||Personal data provision is necessary for the purposes of the legitimate interests pursued by the controller. The data subject has the right to object anytime to personal data processing, without prejudice to the contract and the purpose A)|
RECIPIENTS OR CATEGORIES OF RECIPIENTS
Your personal data will be processed by third parties contractually involved with the Data Controller, and also with the following third parties: - entities that provide services for the management of the information system and telecommunications networks (including e-mail); - firms or companies which provide assistance and advice; - Public authorities to fulfil legal and regulatory obligations, if requested; in case of administrative and accounting purposes, data could be transmitted to business information companies for the evaluation of solvency and payment habits and/or to other subjects for debts collection. The subjects belonging to the above categories are considered data processor, or are acting independently as data controller. The list of the Data processors is constantly updated and it is available at the legal headquarter of the Data Controller.
DATA TRANSFER TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANIZATION
Personal data will not be transferred outside the European Union.
DATA SUBJECT RIGHTS
Without prejudice to any other administrative or judicial remedy, in case you consider your data processing in contrast with Reg. UE 2016/679, pursuant to article 15 lett. f) of Reg. UE 2016/679, you have the right to lodge a complaint with a supervisory authority – Italian Data Protection Authority (https://www.garanteprivacy.it/web/guest/home_en). In exercising your right to data portability, the Data Controller may provide your personal data in a structured, commonly used and machine-readable format. There is not any automated decision-making.
Last update: 05.06.2019
VAMP TECH SPA