Statement pursuant to arts. 13 and 14 of Regulation (EU) 2016/679 and Leg. Decree 196/03 as amended.
Regulations applicable regarding the protection of personal data
Types of personal data
1. Dear SUPPLIER the undersigned company, as Data Controller, with reference to the stipulation and/or performance of contractual relations, informs you that the data defined in the applicable regulations as 'personal' and directly provided by you, also verbally, or collected by third parties (commercial information companies, registers, public lists or data bases, associative bodies, other public bodies, etc.), basically consisting of company name or denomination, registered office, VAT number, tax code, telephone and fax numbers, e-mail address, name and surname, mobile phone number, the latter data regarding your reference persons involved in the commercial relationship, and data relevant to economic and commercial activities including bank sorting code and financial solvency, can be subject to processing in compliance with the applicable regulations regarding the protection of personal data and the obligations of equity, legitimacy, transparency, and confidentiality.
Purpose of processing, legal basis, and provision of personal data
2. The data will be processed for the following purposes:
- Precontractual performance, for example, requesting offers, orders, or quotations, and contractual performance in relation to your products and/or services;
- Administrative, financial, organizational, and commercial management of the legal relationship in force, including incidental statistical measurements, and correlated compliance with civil, fiscal, and accounting laws, EU regulations and standards;
- Archiving for the purpose of keeping accounting records;
- Protection of the contractual rights of the undersigned company, also in cases of dispute;
- Fulfilment of obligations deriving from rulings of legally authorized bodies and supervisory authorities.
For the purposes as defined above, processing is necessary for fulfilment of legal obligations and the execution of the contract in force or precontractual measures with the purpose, for example, of negotiating or formulating quotations, offers, or orders.
Consequently, the processing of your data for the purposes in question, does not require your explicit consent and the incidental refusal to provide said data will render it impossible for the undersigned company to proceed in the legal
relationship.
Form and duration of processing
3. The processing of your data will be conducted by means of hard copy documents and archives and electronic and/or telematic instruments in compliance with the provisions of law intended to guarantee the confidentiality and security of the same, as well as the precision, updating, and relevance of the data in relation to all the above mentioned purposes and in order to avoid access and subsequent processing by parties without prior authorization.
Your personal data will be retained by the undersigned for the entire period of existence of the legal relationship, and upon its termination your data will be retained in order to fulfil regulatory or legal obligations (such as maintenance of accounting records, filing of contractual documents for incidental disputes or contractual responsibilities) for a period of 10 years, or longer in the case of exercise of the rights of defence by the undersigned company, after which the data will be cancelled or rendered anonymous.
Distribution, transfer, and communicatio n of the data
4. Save communications conducted in fulfilment of obligations of law, or EU regulations and standards, your data will be processed by employees and collaborators of the undersigned company in relation to their specific work responsibilities, and may be communicated in Italy to: i) banks and other subjects operating in the banking sector; ii) public authorities or institutions; iii) computer and business consulting companies; iv) credit recovery and insurance companies; v) professionals and/or companies providing services and consulting (for example, in the accounting, tax, legal, logistical, or transport fields, etc.); vi) other controlling, subsidiary and/or associated companies in the group; vii) and subjects who need to access your data for the performance of the legal relationship in force. In all cases, only the personal details strictly necessary for the purposes for which they were collected will be transferred, and this in full compliance with the required security and confidentiality of the data. These categories of subjects process the data for the purposes defined above acting as autonomous Data Controllers.
Rights of the interested party
5. In relation to personal data you may, at any time, exercise the rights provided for in arts. 15 to 22 of Regulation (EU) 2016/679, by simple written request addressed to the Data Controller by e-mail, regular post, certified e-mail, or through a
delegated person pursuant to the methods provided for in art. 12 of Regulation (EU) 2016/679 and the limitations provided for in Title I – Chapter III of Leg. Decree 196/2003 as amended, in order to: (i) obtain access to the personal data for the purpose of establishing the origin of the same, the purpose of processing, the logic applied to the processing by electronic instruments, data categories, recipients (or categories of recipients) to whom the same will be communicated, period of retention, and their communication in intelligible form; (ii) obtain the correction, amendment, or cancellation of the data, or limitation of processing;
(iii) oppose the processing of your personal data; (iv) obtain the portability of the data when pertinent; (v) withdraw consent at any time; (vi) submit a complaint, pursuant to art. 77 of Regulation (EU) 2016/679, when you sustain that processing regarding you violates the applicable regulations as regards the protection of personal data, to the Italian Data Protection Authority or competent authority of the EU member state in which you normally reside or work, or in the place in which the presumed violation took place. Furthermore, the list of subjects or categories of subjects to whom the data are communicated or who come into possession of the same acting as Data Processors and/or authorized subjects, is available to you at the offices of the Data Controller.
Finally, the Data Controller informs you that the communication of the data, following your request or the exercise of your rights, could be made against prior reimbursement of expenses.
Contact data and updating of this statement
6. The Data Controller of your data is the undersigned company, with registered office and contact data as reported in the header of the present statement.
The Internal Privacy Reference Person as regards the processing of personal data is: Dr ZANARDI FEDERICA, Via Certani 7, Loc. Budrio (BO), Italy, Tel. 0030 051801981 - e-mail federica@mzaspiratori.com - CEM mzaspiratorispa@ticertifica.it
The Data Controller will keep the present statement regularly up to date. The revision reference in the page header indicates the most recent date the statement was updated. The Data Controller also undertakes to make statement updates public through the website http://www.mzaspiratori.eu/ or make them available on specific request.
