The Regulation (UE) 2016/679 concerns personal data privacy in order to protect the freedom and rights of the data subjects. It imposes a series of obligations to whoever “processes” personal data referred to the subject. Among the most important requirements, there is the obligation to inform the data subjects and acquire (in the prescribed cases) their consent to data processing, particularly for the data processing that imply data communication to other subjects.
In view of the above, our Company informs you, in compliance with Article 13 of the GDPR, that it collects and processes data concerning your Company without your expressed consent [Article 6, Letters b) and e) of the GDPR, Aritcle 24, Letters a), b), c) of the Italian Privacy Law], for purposes that are related to the ordinary management of business relationships and, more precisely, for lists’ compilation, accounting management, invoicing, creditor management, and the fulfilling of the current law obligations.
Your data will also be processed for strictly corporate reasons, such as statistics and market research. Only with your specific and separate consent, (as expressed by Article 7 of the GDPR and Articles 23 and 130 of the Italian Privacy Law), your data would be processed for the following Marketing purposes:
- Send commercial or advertising material (related to our Company’s services and/or aimed at Customer satisfaction surveying) using mail, e-mails, newsletters, phone and SMS;
- Send commercial or advertising material (related to Third Parties’ services) using mail, e-mails, newsletters, phone and SMS;
Data processing operations are those indicated by Article 4 of the Italian Privacy Law and Article 4 n. 2) of the GDPR. More precisely, those operations are: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Your data are processed in paper, electronic and automated way.
The Data Controller will process data for the time necessary to fulfil the above-said purposes (anyway, not over 10 years since the cessation of the business relationship for administrative/accounting purposes. Not over 2 years for eventual marketing purposes).
Data processing could be done through manual and computer tools, in compliance with the necessary measures to grant information security and privacy.
Your data could be communicated to third parties, only for technical and operative needs, strictly connected to the above-said purposes. In particular, data could be communicated to:
a) Institutions, Professionals, Companies or other structures entrusted with the data processing related to the fulfilment of administrative, accounting and management obligations linked to our ordinary economic activities (also for debt collection purposes);
b) Public authorities and administrations for purposes related to the fulfilment of legal obligations;
c) Banks, Financial institutions or other subjects to which the data communication is made necessary for our Company’s activities in relation with the fulfilment of the contractual obligations towards you.