This information is provided, pursuant to art. 13 GDPR 2016/679- "European Regulation on the protection of personal data", to the customers (natural persons or individual companies) of the Data Controller.
Identity of the Holder
The Data Controller is F.lli Alberto e c. S.n.c. with registered office in Le Pont n. 2 - 11015 La Salle (AO), in the person of its pro tempore legal representative.
Data source
The personal data processed are those provided by the data subject at:
- visits or telephone calls;
- direct contacts;
- formulation of proposals and estimates;
- transmissions and transactions after the order.
Purpose of processing
Personal data are processed for the execution of the necessary pre-contractual activities, the definition and acceptance of the service that regulates the provision and the proper performance of all the activities provided. In particular, they are processed for the following purposes:
- Processing requests for information on products/services, preparation of offers and quotes;
- exchange information of various kinds and with different means of communication (telephone, mobile phone, sms, e-mail, fax, paper mail) aimed at the execution of the contractual relationship, including pre- and post-contractual activities;
- carrying out of the activities connected and instrumental to the management of the contractual relationship (performance execution, performance billing, appointment and meeting definition)
- manage, control the correct provision of services;
- carry out any debt collection activities;
- manage any disputes;
- fulfil the accounting, civil and tax obligations.
Legal basis of processing
The data acquired for the achievement of the purposes indicated are lawfully processed as necessary:
- the performance of a contract to which the interested party is party or the execution of pre-contractual measures taken at the request of the same (purpose referred to in point 1 a 4);
- for the pursuit of a legitimate interest of the Data Controller: recovery of the claim (purpose 5), protection of interests in court (purpose 6);
- to fulfill a legal obligation to which the Data Controller is subject (purpose 7);
Recipients of data
The personal data processed by the Data Controller are not disclosed, or are not given to indeterminate subjects, in any possible form, including that of their provision or simple consultation. They can, instead, be communicated to the workers working for the Data Controller, to the external subjects who collaborate with it designated as Data Processors or authorized to the processing as operating under the authority of the Data Controller. In particular, on the basis of the roles and duties performed, the workers have been entitled to process your personal data, within the limits of their competences and in accordance with the instructions given to them by the Data Controller.
They may also be communicated, to the extent strictly necessary, to individuals who for the purpose of processing your requests must provide goods or perform on behalf of the Data Controller services or services. Finally, they can be communicated to persons entitled to access them by virtue of laws, regulations and Community regulations.
The external subjects operating under the authority of the Data Controller have also been duly authorised according to the type of service provided, the processing carried out, the nature of the data processed. The external subjects to whom the Data Controller has entrusted the processing of personal data have been designated Data Processors.
Data transfer
The Data Controller does not transfer personal data to third countries or to international organisations. It also reserves the right to use services in the cloud; in which case, the service providers will be selected from those who provide adequate guarantees, as required by art. 46 GDPR 2016/679.
Data retention
The Data Controller stores and processes personal data for the time necessary to fulfil the purposes indicated. In this case, customer data is retained until the administrative prescription.
Rights of the data subject
With reference to art. 15 - right of access, 16 - right of rectification, 17 - right to erasure, 18 - right to restriction of processing, 20 - right to portability, 21 - right of opposition, 22 right of opposition to the automated decision-making process of the GDPR , the data subject exercises his rights by writing to the Data Controller at the above address, or by e-mail at info@albertoserramenti.it, specifying the subject of his request, the right it intends to exercise and attaching photocopies of an identity document attesting the legitimacy of the request.
The Data Controller recalls in particular that each interested party can exercise the right of opposition in the forms and ways provided for by art. 21 GDPR.
Withdrawal of consent
With reference to art. 7 of the GDPR, the data subject may revoke any consent given at any time. However, the processing subject to this information is lawful and allowed, even in the absence of consent, as necessary for the execution of a contract to which the interested party is party (the relationship of supply of products and/or services) and other legal bases mentioned above.
Refusal to provide the data
The interested party may not refuse to provide the Data Controller with the personal data necessary for the civil, accounting and tax obligations connected with the supply or service.The provision of additional personal data, although optional, is however necessary for a correct and efficient management of the contractual relationship. Therefore, any refusal to provide data may compromise the contractual relationship in whole or in part.
Automated decision-making processes
In no case does the Data Controller carry out processing that consists in automated decision-making processes on the data of natural persons.
