Privacy policy and data processing statement
CUSTOMERS AND SUPPLIERS POLICY PURSUANT TO EU 2016/679 REGULATION AND TO PERSONAL DATA PROTECTION IN FORCE LAW
P.M. Italia S.r.l., as Data Controller, provides you information concerning Your personal data processing pursuant to in force law, particularly referring to Article 13 of EU Regulation 2016/679 (GDPR), relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data.
Personal data collected, administrative, fiscal, accounting, commercial, identification and judicial directly referred to the Customer/Supplier (when natural person) or, for the identification and judicial data, to other related subjects (collaborator, employee, representative) communicated in execution of relationship with the Controller and in observance and respect of disposition about processing and protection of personal data, are utilized by the Controller in compliance with the principles of decency and … and the regulation to fulfill purposes related to the execution of pre-contractual or contractual relationship. The legal reference of data processing is reacheable into the execution of precontracual negotiation or into the execution of agreement in which the Customer/Supplier has a role, or into the fulfillment of legal obligation to which the Controller is subjected. Personal data won’t be object of automated processing. The processing of personal data for the purposes mentioned above does not require Yours written consent (Article 6 letters B and E of GDPR).
Personal data collected won’t be divulged or propagated; communication to third parties different to Controller, to Processors and Recipients pointed and nominated ex artt. 28 of 2016/679 EU Reg. is established to public authority for legal compliance and fulfillment and, if necessary for the above purposes, to third subects and companies like accounting or fiscal consultants, legal consultants, business consultants, accounting auditors, banks, third parties for IT supplying and services, involved intro the correct and regular pursue of the above described purposes. In any case the third parties processing will take place into the principles of decency and respecting in force law.
Personal data provision is compulsary to the purpose of precontracual negotiation, to agreement stipulation and management, to the fulfillment of legal obligation. The deny to provide personal data will determine partial or total impossibility to stipulate the agreement.
Personal data won’t be transferred to third countries non belonging to EU and which don’t guarantee an adeguated personal data protection level. In the case, to grant the contract execution, it is necessary to transfer personal data to non EU countries or countries which don’t guarantee an adeguated personal data protection level, it will be performed only after the settlement of an agreement between the Controller and third part subjects with appropriate protection clauses and warranties for personal data protection (ex. Standard agreement clause approved from EU Commission) or only with specific requirement in compliance to Italian and EU in force law.
The Controller of data processing is P.M. ITALIA S.r.l. legal head office in Via Bizzarri n. 31, 40010 Sala Bolognese (BO), P.I. 03446781209, mail [email protected], website www.pm-italia.com, in person of Mr. DEGLI ESPOSTI VENTURI ROBERTO legal representative. Data Protection Officer is Mr. RIGHI MATTIA.
Acting as interested part, You have the rights of art. 15 GDPR, specifically: 1. obtain the confirmation of the existance or not of Your personal data, also if not already registered, and their communication in an intelligible way; 2. obtain the indication of:
a) personal data origin; b) data processing purpose and modality; c) the applicated logic in case of data processing with electronical instruments; d) identifying information of Controller, of person in charge and designated representative in force of art. 5, clause 2 Codice Privacy and art. 3, clause 1, GDPR; e) person and categories of individuals to which presonal data could be communicated or that could be aware of in quality of designated representative or authorized person;
3. obtain:
a) data update, rectification or, when You have interest, integration; b) erasure, transformation to anonymous status or to block processed data in violation of law, included data for which conservation is not necessary in relation to the purpose they have been collected or successively processed; c) the attestation that for operation mentioned al letters a) and b) are made aware to whose whom data have been communicated, except for the case that fulfillment reveals to be impossibile or need an excessive amount of resources in relation to the protected right;
4. object, entirely or in part:
a) for legitimate reasons, to Your personal data processing, even if pertinent to the purpose of the collection; b) to Your personal data processing for the purpose of sending advertising material, direct selling, market researches, commercial communications, using automated phone call systems without operator intervention, using e-mail and/or using traditional marketing methods using phone and/or postal service. The right of objection of Data Subject, exposed at above point b), for direct marketing purposes using automated methods, is extended to traditional methods and remains valid the right to object even only partially. So Data Subject could decide to receive communications only by traditional methods or only by automated ones or neither. Where applicable, Data Subject has the rights specified in art. 16-21 GDPR (the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object processing), and also the right to complain to supervisory authority.
Data will be stored for the necessary time to fulfill administrative, accounting, fiscal purpose due to the contractual relationship and due to legal duties, anyway into the prescriptional terms fixed for rights and duties of the processing. Criteria to estabilish the period of storage are setted by Italian prescription law, civil and fiscal law concerning administrative-accounting data, also in legal protection of Controller lawful interests. Processed data will be stored by the Controller at the legal head office of P.M. Italia S.r.l..