This information is provided, pursuant to art. 13 GDPR 2016/679 - "European Regulation on the protection of personal data", to individual companies and professional suppliers in any capacity of the Data Controller.
Identity of the Holder
The Data Controller is F.lli Alberto e c. S.n.c. with registered office in Le Pont n. 2 - 11015 La Salle (AO), in the person of its pro tempore legal representative.
Data source
The personal data processed are those provided by the data subject at:
- visits or telephone calls;
- direct contacts;
- formulation of business proposals and estimates;
- transmissions and transactions after the order.
Purpose of processing
Personal data are processed for the performance of the necessary pre-contractual activities, the drafting and signing of the contract that regulates the supply and the proper performance of all the activities provided for in the contract. In particular, they are processed for the following purposes:
- exchange information of various kinds and with different means of communication (telephone, mobile phone, sms, e-mail, fax, paper mail) aimed at the execution of the contractual relationship, including pre- and post-contractual activities;
- make requests or process requests and proposals received;
- carrying out activities connected and instrumental to the management of the contractual relationship (managing, controlling the correct provision of services, managing payments, registering invoices, defining appointments and meetings);
- fulfil the accounting, civil and tax obligations.
Legal basis of processing
The data acquired for the achievement of the purposes indicated are lawfully processed as necessary:
- the performance of a contract to which the interested party is party or the execution of pre-contractual measures taken at the request of the same (purpose referred to in point 1 to 3);
- to fulfill a legal obligation to which the Data Controller is subject (purpose 4).
Recipients of data
The personal data processed by the Data Controller are not disclosed, or are not given to indeterminate subjects, in any possible form, including that of their provision or simple consultation. They can, instead, be communicated to the workers working for the Data Controller, to the external subjects who collaborate with it designated as Data Processors or authorized to the processing as operating under the authority of the Data Controller.
They may also be communicated, to the extent strictly necessary, to individuals who for the purpose of processing your requests must provide goods or perform on behalf of the Data Controller services or services. Finally, they can be communicated to persons entitled to access them by virtue of laws, regulations and Community regulations.
In particular, on the basis of the roles and duties performed, the workers have been entitled to process your personal data, within the limits of their competences and in accordance with the instructions given to them by the Data Controller.
The external subjects operating under the authority of the Data Controller have also been duly authorised according to the type of service provided, the processing carried out, the nature of the data processed.The external subjects to whom the Data Controller has entrusted the processing of personal data have been designated Data Processors.
Data transfer
Under no circumstances does the Data Controller transfer personal data to third countries or international organisations. However, it reserves the right to use services in the cloud; in which case, the service providers will be selected from those who provide adequate guarantees, as required by art. 46 GDPR 2016/679.
Data retention
The Data Controller stores and processes personal data for the time necessary to fulfil the purposes indicated. In this case, the data is kept for ten years after the cessation of supply.
Rights of the data subject
With reference to art. 15 - right of access, 16 - right of rectification, 17 - right to erasure, 18 - right to restriction of processing, 20 - right to portability, 21 - right of opposition, 22 right of opposition to the automated decision-making process of the GDPR , the data subject exercises his rights by writing to the Data Controller at the above address, or by e-mail at info@albertoserramenti.it, specifying the subject of his request, the right it intends to exercise and attaching photocopies of an identity document attesting the legitimacy of the request.
The Data Controller recalls in particular that each interested party can exercise the right of opposition in the forms and ways provided for by art. 21 GDPR.
Withdrawal of consent
With reference to art. 7 of GDPR 2016/679, the data subject can revoke the consent given at any time. However, the processing subject to this policy is lawful and permitted, even without consent.
Refusal to provide the data
Data subjects may not refuse to provide the Data Controller with the personal data necessary to comply with the rules of law or necessary for the performance of contractual obligations. Providing additional personal data may be necessary to improve the quality and efficiency of the supply relationship. Therefore, the refusal to provide the necessary data by law will prevent the execution of the contract; while the provision of additional data may compromise in whole or in part the management of orders.
Persons acting in the name and on behalf of suppliers may refuse to provide the Data Controller with their personal data. However, the provision of personal data is necessary for the proper and efficient management of the contractual relationship. Therefore, any refusal to supply may compromise the supply relationship in whole or in part.
Lodging of a complaint
You have the right to lodge a complaint with the supervisory authority of your country of residence.
Automated decision-making processes
In no case does the Data Controller carry out processing that consists in automated decision-making processes on the data of natural persons.
