In accordance with art. 13 of the UE regulation 679/2016
ARCHIUTTI SPA (Controller), as the processing controller, in accordance and for the effects of art 13 of the UE Regulation 679/2016 (Privacy regulation) and subsequent amendments and integrations, collect and then processes personal data of its customers and suppliers (data subject)
Data subject’s personal data are processed during the ordinary controller activity, in order to pursue the following purposes.
The processing of personal data takes place under the authority of the controller, by persons specifically put in charge, authorized and trained in processing method, in accordance with art. 29 of the Privacy Regulation, through manual, computerized or telematic tools, with logics strictly related to the purposes and in any case in order to guarantee the confidentiality and safety of personal data. The processing of personal data may also take place, on behalf of the controller, by the Data Processors specifically designated in accordance with art. 28 of the Privacy Regulation.
Personal data will be stored for a fixed period on the basis of nature and duration criteria written in the contract and also on the needs of protection of the interests of the data subject.
2.1 Purposes referred to previous paragraph 1, points 1., 2. and 3.
With reference to the purposes in paragraph 1, points 1, 2 and 3, the transfer of personal data is mandatory and it is a necessary requirement for the execution of the Contract; in fact, the missed contribution determines the impossibility to receive the service covered by the Contract itself and, therefore, the legal basis of the relative treatment is the correct execution and management of the Contract.
2.2 Purposes referred to paragraph 1, point 4 above.
With reference to the purpose in paragraph 1, point 4, the transfer is optional, and the missed contribution of the relative consent only determines the impossibility of receiving updates on promotional and marketing initiatives, also by sending advertising and / or promotional material (for example, newsletters).
In relation to the purposes of the process indicated above, and within the strictly relevant limits to the same, personal data of the subject party will be or may be disclosed to the following categories of subjects:
(i) to the Financial Administration and other public authorities, where required by law or upon their request;
(ii) to credit institutions for payment orders or other financial instrumental for the execution of the Contract;
(iii) to the external structures and / or companies of which the Controller relies on, whose aim is carrying out activities, instrumental or consequent to the execution of the Contract
(iv) to external consultants (for example, for the management of tax obligations), if not designated in written form by Data Processors;
(v) to external parties that perform control activities, such as auditing company, board of statutory auditors, supervisory body;
(vi) to factoring companies and / or specialized companies or law firms for the recovery of credits and / or for the protection of their interests / rights;
The above-mentioned subjects, to whom the personal data of the data subject will or may be communicated (as not expressly designated as Data Processors), will process personal data as Data Controllers in accordance with Codice Privacy and the Privacy Regulation, in complete autonomy, being unconnected to the original process performed by the controller.
The updated list of the indicated parties and the Data Processors can be provided by the data subject upon request.
The data of the data subject will not be diffused.
If it was necessary for the performance of the Contract, personal data of the data subject may be transferred to EU countries and / or not-EU countries, in full compliance with the provisions of the Privacy Regulation, the provisions and decisions of the authority responsible for privacy, as well as by the community legislation. In particular, the Controller must comply with the provisions of Decisions 2001/497 / EC, 2004/915 / EC and 2010/87 / EU (depending on the case), which require the subscription of the so-called "Standard contractual clauses" between the legal entities involved in the processing of non-EU data.
4. Rights of the data subject.
Articles 15 and seq. of the Privacy Regulation give the data subject the right to obtain:
The data subject also has the right:
To know the detailed and constantly updated list of subjects to whom the personal data of the data subject may be communicated and to exercise the rights set up in articles 15 and seq. of the Privacy regulation, the company can contact the Data Controller:
Indirizzo Via Postumia Ovest 200 - SAN BIAGIO DI CALLALTA
Tel: +39 04227947
Olmi di San Biagio di Callalta, 30/09/2019