TMB S.p.A., during the execution of a contract with third-party companies, or in the execution of checks, verifications or audits, or during commercial relations, may acquire personal data concerning employees working for such companies (hereinafter referred to as “Concerned Persons”).
In accordance with current legislation, TMB S.p.A. intends to inform Concerned Parties about methods in which personal data are processed, in accordance with Articles 13 and 14 European Regulation 679/2016 and Privacy Code as amended by Legislative Decree 101/2018.
The Data Controller is TMB S.p.A., located in Monselice (PD), via Umbria 19, tax code and VAT 02506060280.
PURPOSES OF PROCESSING
The processing of personal data of Concerned Parties by TMB S.p.A. aims at implementing the contract agreed with the employer or the execution of verification activities, control, audit, before or after the execution of the contract and the performance of the existing business relationship.
LEGAL BASIS FOR THE PROCESSING
The treatment of personal data of Concerned Parties is necessary to the pursuit of the legitimate interests of our company and precisely to execute the contract established between TMB S.p.A. and the company which the worker and the collaborator is part of, or in relation to negotiations for the contract agreement or in the context of verifications, controls or audits.
CATEGORIES OF PROCESSED PERSONAL DATA
Common personal data (in relation to employment relationship, job assignment, personal and tax data, contact details, etc.) are processed to the extent that processing is strictly necessary for the specified purposes.
Provided personal data shall be processed through hard-copy documents and/ or IT systems, which shall guarantee security and privacy of the processing.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data, which will come into possession of our Company, are not subject to disclosure. Those data might be communicated within the Company and be disclosed to authorized persons and to Data Processors, appointed by TMB S.p.A., to the extent that such disclosure is necessary for the specified purposes.
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
TMB S.p.A. will not transfer personal data to non-EU countries.
However, in case this happens, TMB S.p.A. ensures to transfer those data to non-EU countries deemed adequately safe by the European Commission (Art. 45 GDPR) or after conclusion of standard contract terms, approved by the European Commission.
Any exceptions to the above might happen only in accordance with art. 49 GDPR.
STORAGE PERIOD OF PERSONAL DATA AND CRITERIA USED TO DEFINE SUCH TIME
Personal data will be stored by our Company for the entire duration of the contract with the third party, and for ten years after the end of the validity of the contract and/ or in accordance with the legislation in force in civil, tax and administrative matters on data retention. A longer period of personal data retention might eventually be determined by requests made by the Public Administration or other judicial authority, governmental or regulatory, or from the participation of our company in legal proceedings involving personal data processing. Personal data processed by TMB S.p.A. before reaching a contract agreement with the third party will be stored for the time strictly necessary to negotiations and to enter into a contract and/ or to the pursuit of activities of verification, controls and audits.
SOURCE OF PERSONAL DATA
Personal data have been provided by the company which the worker and/or collaborator belongs to, or directly by the Concerned Party.
RIGHTS RECOGNIZED TO THE CONCERNED PARTY
The Controller gives the right to the Concerned Party to have access to personal data. In particular, the Concerned Party has the right to receive information about: a) the source of personal data; b) purposes and methods of data processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) updating or amendment; e) cancellation or limitation of data processing concerning the Party (transformation into anonymous form, blocking of processed data in violation of law, including those which do not need to be kept for the purposes which the data was collected for or subsequently processed).
The Concerned Party shall have the right to withdraw consent to personal data processing where provided.
In any case, the withdrawal of consent shall not affect the lawfulness of processing based on consent given before its withdrawal.
Moreover, the Concerned Party has the right to data portability.
He may at any time exercise the rights by sending:
- A registered letter to TMB S.p.A. Via Umbria 19 (35043) Monselice (PD)
- An email to: firstname.lastname@example.org
RIGHT TO ISSUE A COMPLAINT
The Concerned Party has the right to issue a complaint to the Supervisory Authority, represented in Italy by the Data Protector Supervisor, based in Rome, Piazza Monte Citorio, 121.
NON- EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS
Our company does not use any automated decision-making processes, which could produce significant legal effects for the Concerned Party.