Pursuant to art. 4 and 24 of EU Reg. 2016/679, the Data Controller is DAPHNE IMPIANTI SRL, with registered office Via del Piano, 73 fraz. Talacchio 61022 Vallefoglia (PU) Italia, tel. +039 0721 476322, fax +039 0721 476459, E-mail email@example.com, PEC. firstname.lastname@example.org, in the person of the legal representative.
2. PURPOSE AND LEGAL BASIS OF TREATMENT
The personal data provided will be processed, in compliance with the conditions of lawfulness art. 6 of EU Reg. 2016/679, for the following purposes:
a) compilation and conservation of the identification card containing your personal data as a new customer;
b) conclude the contracts with our company;
c) management of the commercial relationship with our company;
d) fulfill the pre-contractual, contractual and tax obligations deriving from relations with you in place, including communication to transport companies and couriers;
e) comply with the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as for anti-money laundering);
f) exercise the rights of the Owner, for example the right to defense in court;
g) start and manage economic transactions;
For the points a), b), c), d), e), f), g) the treatment is necessary to the execution of a contract (article 6 paragraph 1 letter b) and to fulfill a legal obligation (Article 6 paragraph 1 letter c). For this reason the processing is considered lawful and therefore explicit consent is not required.
3. DATA STORAGE TIME
The data collected will be processed using manual, computerized or telematic tools, with respect for the purposes for which they were collected and in a manner suitable for guaranteeing security and confidentiality. Personal data will be kept for the time necessary for the specific fulfillment of the aforementioned purposes, also taking into account the respect of the deadlines imposed by law for the purpose of judicial protection of the User's interests and of the Data Controller. Therefore, in compliance with the provisions of art. 5 paragraph 1 letter e) of EU Reg. 2016/679, the retention of personal data provided depends on the purpose of the processing; however, the storage time can’t exceed ten years.
4. ADDRESSEES OR CATEGORIES OF DATA ADDRESSEES
The personal data provided will be communicated to recipients, who will process the data as managers (Article 28 of EU Reg. 2016/679) and / or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of EU Reg. 2016/679),for the purposes listed above in point 2. Precisely, the data will be communicated to:
- consultants for accounting, budgeting and tax compliance
- banks, or legal advisors for the management of receipts andpayments deriving from normal commercial activities and / or from the execution of contracts in progress
- natural or legal persons providing specific services, such as dataprocessing, customer satisfaction surveys, administrative consultants, tax and / or accounting consultants;
5. DATA TRANSFER TO A THIRD COUNTRY
The Data Controller will not transfer your personal data to a third country or to an international organization. However, it reserves the right to use cloud services; in which case, the service providers will be selected among those who provide adequate guarantees, as required by art. 46 of the EU Reg. 2016/679.
6. NATURE OF THE CONFERRALITY AND REFUSAL
Interested parties can’t refuse to give the Data Controller the personal data necessary to comply with the laws that regulate commercial transactions and taxation. The provision of further personal data may be necessary to improve the quality and efficiency of the transaction. Therefore, the refusal to provide the data required by law will prevent the correct execution of the contract, while the provision of additional data may compromise all or part of the processing of other requests and the quality and efficiency of the transaction. The provision of personal data is therefore necessary for a correct and efficient management of the contractual relationship. Therefore, any refusal to provide the data may compromise the contractual relationship in whole or in part.
7. RIGHTS OF THE INTERESTED
You can assert your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, by contacting the Data Controller at email@example.com. You have the right, at any time, to ask the Data Controller to access your personal data, to rectify it, to cancel it, to limit its processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, eg profiling), as well as to the portability of your data. Without prejudice to any other administrative and judicial appeal, if you believe that the processing of data concerning you, violates the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data and, with reference to art. 6 paragraph 1, letter a) and art. 9, paragraph 2, letter a), has the right to revoke the consent given at any time. In the case of request for data portability, the Data Controller will provide you in a structured format, in common and legible, by automatic device, the personal data concerning you, without prejudice to paragraphs 3 and 4 of the art. 20 of the EU Reg. 2016/679.
8. AUTOMATED DECISION MAKING PROCESSES
The Data Controller does not carry out processing that consists of automated decision-making processes on the data of natural persons clients, or of natural persons operating in the name and on behalf of clients, legal entities.