We wish to inform you that the European Regulation nr. 2016/679 (“GDPR”) requires that the party carrying out personal data processing, shall inform the Concerned Party (i.e. the subject who the data refers to) about specific requisites qualifying the personal data processing. This must occur with fairness, lawfulness and transparency, protecting privacy and rights of the Concerned Party. In accordance with the aforementioned Regulation, we therefore provide you with the following information.
GENERAL PRINCIPLES OF PROCESSING
The processing will be carried out through collection, recording, organization, retention, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction. The processing will be carried out by the controller, by data protection managers and by persons authorized to the data processing.
Data will be processed in a lawful, correct and transparent manner; they will be collected for specific, explicit and legitimate purposes and treated in a manner that is not incompatible with those purposes. They will be adequate, relevant and limited to what is necessary in relation to the purposes which they are processed for, accurate and up-to-date. They will be treated with the utmost confidentiality, mainly with electronic and digital tools and stored both on computer media, on paper and any other suitable medium, in compliance with the principles established in the European Regulation on the protection of personal data. In any event, they shall be processed in such a way as to ensure adequate safety, including protection, through appropriate technical and organizational measures, against unauthorized or unlawful processing and against loss, including accidental loss.
IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
The Data Controller is TMB S.p.A., located in Monselice (PD), via Umbria 19, tax code and VAT 02506060280.
To exercise the rights provided by the Regulation and for any request relating to your personal data, you can contact the data controller, by sending a message to the following email address: firstname.lastname@example.org.
PURPOSE AND LEGAL BASIS OF PROCESSING
The processing of your data is necessary to the execution of the contract, which you are part of.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data shall not be distributed or disclosed to third parties. They can be processed by our authorized staff and by the controllers and can be disclosed to all those persons who necessarily need them, after the controller incontestably authorizes it, for the purposes related to the relationship with You. In particular, personal data related to this processing can be disclosed to:
- Public authorities;
- Professionals and/ or service companies for the company management, who work on our behalf;
- Credit institutions or debt collection agencies;
- Customers and/ or suppliers of our organization.
PERSONAL DATA RETENTION PERIOD
The criterion used to determine the data retention period is the one based on a limitation period for the exercise of rights related to the contractual relationship established, in accordance with the Italian Civil Code.
A longer period of retention might be eventually determined by requests made by the Public Administration or other judicial authority, governmental or regulatory, or arising from the participation of our company in legal proceedings involving the processing of personal data provided by You.
RIGHTS RECOGNIZED TO THE PARTY CONCERNED
The Controller gives the right to the Concerned Party to have access to personal data. In particular, the Concerned Party has the right to receive information about: a) the source of personal data; b) purposes and methods of data processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) updating or amendment; e) cancellation or limitation of data processing concerning the Party (transformation into anonymous form, blocking of processed data in violation of law, including those which do not need to be kept for the purposes which the data was collected for or subsequently treated). Moreover, the Concerned Party has the right to data portability.
RIGHT TO WITHDRAW CONSENT
The Concerned Party shall have the right to withdraw consent to personal data treatment. In any case, the withdrawal of consent shall not affect the lawfulness of processing based on consent given before its withdrawal.
RIGHT TO ISSUE A COMPLAINT
The Concerned Party has the right to issue a complaint to the Supervisory Authority, represented in Italy by the Data Protector Supervisor, based in Rome, Piazza Monte Citorio, 121.
MANDATORY OR OPTIONAL NATURE OF DATA PROVISION
The provision of your personal data for the specified purpose is mandatory. Your refusal to processing will make it impossible to follow up on any contractual relationship.
EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS
The processing in question does not provide for any automated decision-making processes.