Subject: INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to Legislative Decree 196/2003 and EU Regulation 2016/679 – G.D.P.R. –
Dear Customer, pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter T.U.) and pursuant to art. 13 of EU Regulation no. 2016/679 (hereinafter G.D.P.R.) and in relation to the personal data of which EFINOX SRL with registered office in Via N. Tartaglia, 8 ā 25064 Gussago (BS) VAT no. 03277390179 Fiscal code: 03277390179 hereinafter referred to as the āData Controllerā will come into possession with the entrustment of your practice/practices and which will be the object of processing, we inform you of the following:
- Purpose of data processing:Ā the āData Controllerā uses the personal data of the subjects interested in the processing (hereinafter the āInterested Partiesā), and in particular of the customers for the following purposes:
a) customer census and registration of the same in the customer list;
b) assessment relating to the reliability of the customer (financial solidity, economic and organizational capacity, references, professional qualifications, regularity of contributions, insurance coverage, conflicts of interest, anti-corruption and anti-money laundering obligations);
c) management of contracts stipulated with customers relating to the provision of work or services and the sale of products/services, including the activity relating to accounting records and registrations, the fulfillment of obligations provided for by Laws, Regulations or Community Regulations governed by Provincial and Regional Competent Bodies and by Supervisory and Control Bodies;
d) assessment of the customer with regard to the services requested by the Data Controller;
e) legal obligations connected to civil, fiscal and accounting regulations; fulfillment of obligations arising from contracts entered into; assistance and technical support regarding the products and services purchased by you, including after-sales; administrative management of relationships;
f) sending promotional communications regarding discounts, offers, services or commercial, innovations made to products and/or services;
The legal basis for the processing of personal data is the execution of a contract and the provision of the requested service/product for the purposes referred to in letters a), b) and c) and the consent of the interested party for the purposes referred to in letters d), e) and f). - Data processing methodsĀ : the Data Controller informs that: a) for the purposes indicated above, the data of the interested party will also be processed with computer, paper and manual tools, in compliance with the rules of confidentiality and security established by law, with methods and procedures strictly necessary to pursue the purposes described above. The firm/Company carries out the processing directly through subjects belonging to its own organization or by using subjects external to the firm/Company itself. These subjects will process the data:
a) in accordance with the instructions received from the Company to which they belong as data controllers or persons in charge, among which we indicate the employees or collaborators of the company itself assigned to the company structures within the scope of the functions to which they are assigned and exclusively for the achievement of the specific purposes indicated in this information.
b) in complete autonomy as separate Data Controllers; - Provision of dataĀ : the provision of data is optional. However, failure to provide personal data for the purposes referred to in point 1 letters a), b) and c) may prevent the Data Controller from concluding or correctly executing the contract with the Data Subject, also by virtue of fulfilling specific regulatory obligations (e.g. Provincial and regional competent bodies, Public Security bodies and Supervisory and Control Bodies). Failure to provide data for the purposes referred to in point 1 letter c) may prevent the provision of Supplier Services, and any subsequent opposition or revocation of consent to the processing of personal data for the aforementioned purposes will result in the immediate suspension of the use of the related services. Any refusal to consent to the processing for the additional purposes referred to in point 1 letters d), e), f) will not entail any consequences, except for the impossibility of: being informed about promotional communications, discounts, offers, services or events of EFINOX SRL and receiving commercial communications of interest from EFINOX SRL
- Data communication:Ā the interested party’s data will not be disclosed. Within the EFINOX SRL organization, the data may be communicated:
a) employees and external collaborators of EFINOX SRL authorized by the company itself to process the data;
b) credit institutions, registration service companies, contractors of works and jobs or service providers, notaries, lawyers, consultants and debt collection companies, auditing companies;
c) subjects to whom the communication is due in compliance with any collective agreements (e.g. trade unions) or specific regulatory obligations (e.g. Public Security Bodies or other Public Authorities). - Data storage methods:Ā personal data will be stored on a server located within the European Union. Personal data collected for the processing purposes indicated in letters a), b) and c) of point 1, will be stored for the entire duration of the contract and, subsequently for a period not exceeding the limitation period provided by law. Personal data collected for the processing purposes indicated in paragraph 1 letters d), e) and f) will be stored until the interested party revokes consent to receiving commercial communications from EFINOX SRL, or requests the deletion of their data, except for the exceptional need to retain the data to defend the rights of EFINOX SRL in relation to disputes in progress at the time of the request, or upon indication of public authorities or provincial or regional competent bodies.
- Rights of the Interested Party:Ā the Interested Party pursuant to art. 7-10 of the TU and art. 15-21 of the GDPR has the right to:
a) obtain the cessation of processing in cases where his/her personal data are processed for direct marketing purposes, also in relation to services identical to those already provided by our Company (so-called right to object);
b) obtain information in relation to the purposes for which the personal data are processed, the period of processing and the subjects to whom the data are communicated (so-called right of access);
c) obtain the rectification or integration of inaccurate personal data concerning the interested party (so-called right of rectification);
d) obtain the deletion of personal data concerning the interested party in the following cases:(I) the data are no longer necessary for the purposes for which they were collected;
(II) the interested party has withdrawn his/her consent to the processing of the data if they are processed on the basis of his/her consent;
(III) the interested party has opposed the processing of personal data concerning him/her in the event that they are processed for our legitimate interest;
(IV) the processing of his/her personal data is not compliant with the law; However, the retention of personal data by EFINOX SRL is lawful if it is necessary to allow it to fulfill a legal obligation or to ascertain, exercise or defend a right in court (so-called right to erasure);e) obtain that the personal data concerning the interested party are stored without any other use being made of them in the following cases:
(I) the data subject contests the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
(II) the processing is lawful but the data subject opposes the erasure of the personal data by us;
(III) the personal data are necessary for the establishment, exercise or defence of legal claims;
(IV) the data subject has objected to the processing and we are awaiting verification as to whether the legitimate grounds of the Data Controller override those of the data subject (so-called limitation rights);f) receive in a commonly used, machine-readable and interoperable format the personal data concerning the Data Subject, if they are in force of a contract or on the basis of his/her consent (so-called right of portability); the Data Subject also has the right to contact the Guarantor for the protection of personal data, in order to assert his/her rights in relation to the processing of personal data.
- The Data Controller, pursuant to the law, isĀ EFINOX SRLĀ , with registered office in Via N. Tartaglia, 8 ā 25064 Gussago (BS) VAT no. 03277390179 Fiscal code: 03277390179 which can be contacted for reports at the telephone number: 030/321259, e-mail address:Ā [email protected]Ā .