Information on the processing of personal data under the EU Regulation 2016/679 for Customers and Suppliers
MARELLI FAN srl, in his capacity as holder of personal data processing, Pursuant to the EU Reg.to effects 2016/679 (below GDPR), hereby informs that the aforementioned regulation provides for the protection of interested parties regarding the processing of personal data and that such treatment will be based on principles of fairness, lawfulness, transparency and protection of confidentiality and the rights of the interested.
data processed
The personal data processed, by way of example and not exhaustive, are the following:
● identification data of the interested (name, surname, date and place of birth, fiscal Code, business name, P.IVA);
● other identification data needed for management of the relationship and communications (other addresses-headquarters, local units, Bank account details, e-mail address and P.E.C., fax, phone numbers);
● economic activity;
● technical drawings and elaborate.
The data are collected from the data subject pursuant to Article. 13 the GDPR or were previously provided by the addressee for the execution of a contract or to meet a request of his.
Other data consist of information from public records, lists or acts to anyone, (public data such as, for example, Data resulting from the inclusion in the Register of Companies or R.E.A. held by C.C.I.A.A., Albi inscriptions, lists).
Type of treatment
The methods of data processing will be the following: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, utilization, communication, erasure and destruction of data.
treatment and the obligation of providing data Purpose
In particular, the data will be processed for the following purposes:
● conclusion and execution of contracts for the sale of the products supplied by the Owner and purchase agreements by third parties of products or services supplies;
● execution of pre-contractual obligations or under the contract or to fulfill, before or after the execution of the same, to the involved requests;
● obligations required by law for tax and accounting;
● administrative / accounting management;
● management of complaints and litigation (payment reminders, disputes), and to exercise the right of
legal defense.
The provision of data is obligatory for the treatments that the owner must make to fulfill obligations
Pre-contractual and contractual towards the party, and legal obligations, rules and regulations.
Failure to provide such data may lead to failure or partial execution of the contract and / or the interruption of the relationship. The Data Controller, Moreover, that any non-communication, or miscommunication,
of the required information, It can cause the impossibility of the Holder to guarantee the fairness of treatment
same.
With reference to the identification data (name, surname, organization or company affiliation) management staff in the organization of the interested, the data will be processed for the purpose of ensuring compliance with corporate security procedures (is. filming video surveillance for the protection of legitimate interests and company assets, application of obligations with regard to safety at work, etc.).
legal basis
The processing of personal data has legal basis: (i) nell’art. 6, by. 1, became. b) the GDPR (the treatment is necessary
execution of a contract which the person concerned is a part or the execution of pre-contractual measures taken at the request of the same); (ii) nell’art. 6, by. 1, became. c) the GDPR (the processing is necessary for compliance with a legal obligation to which the data controller is subject); (iii) nell’art. 6, by. 1, became. f) the GDPR (the treatment is necessary to achieve the legitimate interest of the Holder).
Processing methods
Personal data are processed manually by means of paper files is by means of electronic instruments,
computerized and automated. Each treatment is carried out in accordance with the procedures laid down in Articles. 6, 32 the GDPR and through the adoption of appropriate security measures provided for in a particular way to prevent access to the data to unauthorized persons.
Communication
The data will be processed only as expressly authorized by the Data.
The data may be disclosed for the purposes of the treatment in:
● employees;
● Officers duly appointed third parties to process [is. consultants and professionals (is. accountant for bookkeeping); insurance; maintenance company of computer equipment];
● public and / or private entities for which the disclosure of information is mandatory or necessary in compliance with legal requirements, or otherwise to the administration of the functional relationship;
● government-owned businesses;
● banks and credit institutions;
● insurance companies;
● freight forwarders, transporters, post, logistics agencies.
spread
The personal information will not be disclosed in any way.
Transfer
The personal data may be transferred, limited to the above purposes, in EU countries.
Anyhow, if this should happen for organizational reasons Holder (e.g. use of cloud space for purposes of filing and storing data etc.) It will be carried out in accordance with the instructions contained in Chapter V Articles. 44,45,46 the GDPR.
Automated Decision Making
The Holder shall not adopt automated decision making, including profiling, referred to in Article 22, paragraphs 1 e 4, of the EU Regulation. 679/2016.
the data retention period
We report that, in accordance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Article. 5
the GDPR, the period of storage of personal data is necessary for the execution of the service requested
and for the management of administrative activities, on time bill to tax obligations, accounting and regulatory. If personal data are processed for two different purposes, retain such data will not cease until the purpose for the term longer, However, we will not treat the personal data for the purposes for which the retention period has failed.
Owner of data processing
The owner of the data processing, under the Law, FAN is MARELLI srl, based in 37036 Saint martin
Buon Albergo (VR), Viale del Lavoro n. 28 (P.IVA 03125860233), email info@marelliventilazione.com, PEC marelliventilazione@pec.it.
At any time, the interested party has the right to obtain cancellation (right to be forgotten), the limitation, update, correction, portability, the opposition to the processing of personal data concerning him, and in general exercise all rights provided by Articles. 15, 16, 17, 18, 19, 20, 21, 22 the GDPR, better illustrated below.
To exercise such rights must be sent request written in free form is at MARELLI VENTILATION S.r.l., based in 37036 San Martino Buon Albergo (VR), Viale del Lavoro n. 28 or at PEC marelliventilazione@pec.it.
The exercise of the rights as an interested party is free to Article. 12 the GDPR. However, in the case of requests manifestly unfounded or excessive, also for their repetitiveness, the owner may charge a reasonable contribution expenses, in light of the administrative costs to handle the request, or deny the satisfaction of the request.
** ** **
rights of
In relation to the treatments described in the information, as an interested party can, in accordance with Articles 15 -21 the GDPR, exercise the following specific rights: (a) right of access (art. 15 GDPR): it is the right to obtain confirmation of whether or not an ongoing processing of personal data relating to you and, then, gain access to
Your personal data, and more information; (b) right of reply (art. 16 GDPR): right to obtain from the data
Treatment correction of inaccurate personal data relating to you without undue delay and / or completion of incomplete personal data, Also providing a supplementary statement; (c) Cancellation right (right to be forgotten - Article. 17 GDPR): the right to know, without undue delay, deletion of personal data, in the presence
certain conditions (is. the data are no longer needed for the purposes for which they were collected or otherwise processed;
withdrawal of consent and there is no other legal basis for treatment; opposition to treatment; illegal data processing; existence of a legal obligation or delete the personal data was collected regarding the provision of services of the society of the i nformation in art. 8, by. 1, GDPR; (d) right to treatment limitation (art. 18 GDPR) : the right to know the limitation of treatment, When: (i) the applicant disputes the accuracy of the personal data, for the period necessary to lare tito to verify the accuracy of such data; (ii) the processing is unlawful and the data subject opposes deletion of personal data and would instead suggest that the use is limited; (iii) although the data controller no longer needs them for purposes of processing, personal data are necessary to determine the person, exercise or defense of a legal claim; (iv) the person concerned is opposed to treatment pursuant to Article. 21, by. 1 GDPR, in the waiting period of the verification on the possible reasons for the prevalence of the legitimate holder of the treatment compared to those of the person concerned; (e) right to data portability (art. 20 GDPR): right to receive, in a structured format, of common use and readable by an automatic device, personal information about you provided to the Owner and the right to send it to another holder unimpeded, if the treatment is based on consensus or on a contract and is carried out with means automat izzati. Moreover, the right to know that your personal data is transmitted directly from the Holder to another controller if this is technically feasible; (f) right to object (art. 21 GDPR): right to object to the processing of personal data concerning, unless there are legitimate reasons for the owner to continue treatment which prevail over interests, on the rights and freedoms of or for ascertaining, exercise or defense of a right in sed and judicial. Where personal data are processed for direct marketing purposes, the person has the right to object at any time to treatment, including profiling, insofar as it is connected to this direct marketing. In particular, You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affecting in a similar way on your person, except that this decision is necessary for the conclusion or performance of a contract between you and the Holder, or is authorized by European Union law or the Italian law, or relies on your express consent; (g) right to withdraw consent - right to withdraw consent to the processing of your data at any time, remaining stops the lawfulness of the processing based on consent before the withdrawal; (h) right to complain to the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Roma (RM).
