INFORMATION PURSUANT TO EU REGULATION 2016/679

(GENERAL DATA PROTECTION REGULATION)
Data subjects: SUPPLIERS

 

Pursuant to Article 13 of EU Regulation 2016/679, and in relation to the personal data of which the undersigned data controller, Monari & Federzoni S.p.a., will come into possession with the entrustment of your assignment, I hereby inform you of the following:

  1. Data controller

The data controller is Monari & Federzoni S.p.a.

VAT/TAX CODE: 00282950369

Address: Via Carrate, 41030-Solara di Bomporto (MO)

Email: privacy@monarifederzoni.com

Pec: monari.federzoni@lamiapec.it

Tel: +39 059/801711

  1. Purpose of data processing

The processing is aimed at

  • full and correct execution of the contract
  • purchase of products and/or services
  • fulfilment of tax and accounting obligations;
  • Invoicing;
  • comply with the obligations incumbent on the company and provided for by current legislation (by way of example but not limited to: anti-money laundering, insurance, safety at work)
  • defend a right in court or before judicial authorities exercising jurisdictional functions;
  • protection of company assets (video surveillance).

  1. Legal basis of processing

The processing is lawful, insofar as

  • necessary for the performance of a contract to which you are party, or the performance of pre-contractual measures taken at your request
  • necessary to comply with a legal obligation to which the data controller is subject (e.g. keeping and maintaining accounting records in accordance with tax legislation and anti-money laundering, insurance, safety at work regulations)
  • necessary for the pursuit of the legitimate interest of the data controller, such as the protection of the company's assets (video surveillance), for the defence of its own right in court or before judicial authorities.

  1. Modalities of data processing

The processing is carried out, in the manner strictly necessary to fulfil the purposes indicated above, by means of some of the operations or the set of operations indicated in Article 4, no. 2) of EU Regulation 2016/679: collection, recording, organisation, structuring, storage, consultation, processing, adaptation, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. The operations may be carried out with or without the aid of electronic, telematic or otherwise automated tools.

  1. Provision of data

The provision of personal data is not a legal obligation, but a necessary requirement for the conclusion of the contract.

  1. Data retention

Personal data shall be processed and stored for as long as is necessary for the complete performance of the contract, as well as for the proper fulfilment of the obligations to store them for civil and tax purposes or for other purposes provided for by the laws or regulations indicated in point 2, as well as for the duration necessary for the pursuit of the legitimate interests of the data controller, for the purposes of defending its own rights in court or before the judicial authorities and in any case until the statute of limitations of the rights arising from the contractual relationship.

  1. Communication of data

Personal data may be communicated to, or come to the knowledge of, for the purposes referred to in point 2 and to provide, improve, protect and promote its services:

  • parties authorised to process the data;
  • data processors and other authorised parties, such as, by way of example but not limited to: accountants, consultants, suppliers of IT services, cloud computing services or assistance to the same, and their appointed technical staff, collaborators, persons in charge of occasional maintenance operations, all adequately trained in the protection of confidentiality
  • judicial or administrative authorities, for the fulfilment of legal obligations or the performance of tasks received
  • banking and insurance institutions;
  • parties that process data in performance of specific legal obligations.

  1. Profiling

Personal data are not subject to dissemination, nor to any fully automated decision-making process, including

  1. Transfer of data abroad

Personal data are not transferred to countries outside the European Union.

  1. Rights of the data subject

Pursuant to Articles 15-18 and 20-21 of EU Regulation 2016/679, you have the right to obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, and their communication in intelligible form. You have the right to be informed: a) of the source of the personal data; b) of the purposes and methods of the processing; c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; d) of the identification data concerning data controller and data processors; e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as data processors or persons in charge of the processing. You also have the right to obtain a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. You have the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning you, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys. You have the right to data portability, i.e. the right to receive in a structured, commonly used and machine-readable format the personal data concerning you and the right to transmit such data to another data controller without hindrance. You also have the right to lodge a complaint with a supervisory authority (in Italy, the Garante per la Protezione dei dati personali: www.garanteprivacy.it). You may exercise your rights by sending a written request to the data controller at the addresses (registered office, e-mail) indicated in point 1.

  1. Persons in charge of processing

The list of data processors, in relation to limited sectors and operations, constantly updated, is at your disposal by request addressed to the data controller, also through the contacts indicated in point 1.