INFORMATION FOR CUSTOMERS AND SUPPLIERS PURSUANT TO ART. 13 OF REG. EU 679/2016 (GDPR)
for the purposes provided for by EU Regulation no. 2016/679 concerning the protection of individuals with regard to the processing of personal data, A.T.G. Srl, informs you, as a subject interested in the processing, that the personal data you provide and acquired by the company will be processed in compliance with the legislation provided for by the aforementioned EU Regulation 679/2016 (GDPR) and the consequent rights and obligations.
Holder of the treatment
The Data Controller is the A.T.G. Srl (hereinafter also referred to as “A.T.G.” or “Company”), with registered office in Beverate di Brivio (LC), via ai Campi, 8 / A Tel + 39 039 53.20.732, VAT and Tax Code 01850340132, e-mail email@example.com
Type of processed data
We inform you that the following personal data concerning you will be processed:
– common data, including identification data (name, surname, address, VAT number, Tax Code), personal data necessary to execute the contract or to execute contractual and pre-contractual measures and contact details (email, certified e-mail address, contact details fixed and mobile telephone numbers) and tax (relating to invoicing, payments and collection and the fulfilment of legal obligations and for the supply of goods and services)
Processing methods: The personal data referred to you will be contained in paper documents and / or files and digital archives processed concerning you and processed in compliance with the principles of lawfulness, relevance, transparency and correctness within the limits of what is necessary for the execution of the relations deriving from contracts or pre-contractual measures concerning you, as well as for the protection of the vital interests of the interested party or of another natural person.
Purpose and legal basis of the processing
The processing of your personal data is aimed at fulfilling the obligations deriving from the Contract and the Law, to implement pre-contractual measures and the execution of contracts for the purchase of goods and services, for the pursuit of tax obligations, as well as to fulfil the obligations of law related to civil, fiscal and accounting regulations, in the field of work safety and to what is established by laws, contracts and company regulations.
Personal data (e.g. email address of the interested party) may in fact also be collected for sending advertising material or other communications relating to goods and / or services, similar to those already purchased by the interested party pursuant to art. 6 par. 1 letter f) of the GDPR.
If the Data Controller uses, for the direct sale of its products or services, the e-mail coordinates provided by the interested party in the context of the sale of a product or service, he or she may not request the consent of the interested party, if these are services similar to those sold and the interested party, adequately informed, does not refuse such use, initially or on the occasion of subsequent communications.
The interested party may object at the time of data collection and in any subsequent communication to the processing described above, including that relating to the receipt of the newsletters, by sending an email to firstname.lastname@example.org with the subject “NO COMMERCIAL COMMUNICATIONS “.
Consequences: If you do not consent to the processing of your personal data, it will be impossible to proceed with the conclusion of the contract or the execution of the pre-contractual measures required.
Your rights as an interested party: Pursuant to and within the limits of the legislation in force, you can exercise all faculties and rights provided for and governed by Chapter III of Regulation (EU) 2016/679 (GDPR) and, in particular pursuant to articles. 15-22 GDPR, you are granted: the right to transparency on the methods of treatment, to receive specific information regarding your data processed, to access your personal data held, to rectify or cancel the data, to limit the processing of their personal data, to receive “notifications” regarding the events referred to in the previous points, to the “portability” of personal data (where possible), to object to processing for specific and documented reasons, to lodge a complaint with the Guarantor Authority and to be informed about the existence of any data breaches concerning you (Data Breach), the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation.
How to exercise your rights as an interested party: The rights granted by law to the interested party and the right to access, update and delete the personal data provided can always be exercised free of charge, even at the Data Protection Contact person designated by the Data Controller.
The response to the requests of the interested parties takes place within 30 days of receipt of the request of the interested party duly presented or in the greater term equal to 90 days, giving prior notice to the interested party if to guarantee an integral response it is necessary to carry out particular operations complexity or to the use of another justified reason.
The reply takes place electronically and the interested party will receive an email reply to the address communicated when the request is exercised.
Recipients or categories to whom personal data may be transmitted:
External companies or people (some of whom also identified as data processors pursuant to Article 28 of the GDPR) who carry out activities strictly connected and instrumental to the management of the commercial and contractual relationship such as:
– definitely, authorized collaborators and employees of the Owner, within the scope of their duties;
– Partner company of A.T.G. Srl for the performance of the services covered by the relationships with individual Customers / Suppliers.
– External suppliers who carry out, as data processors, hosting services and technical maintenance of the IT systems and technological platforms used for the processing, within the limits of the processing necessary for the provision of the related services.
– Credit institutions, credit recovery companies, credit insurance companies, and commercial information companies, companies operating in the training and safety sector, occupational doctor, as well as professionals and / or consultants (accountant and law firm) whose support A.T.G. Srl uses it for purposes strictly related to those of collection and subsequent processing; Public and social security bodies.
Storage and communication times of personal data processed: your personal data will be processed for the time necessary for the execution of existing contracts, contractual measures, for the exercise of a legitimate interest of the Data Controller (for example the recovery of credit in his regards).
Your data may be stored, even after the termination of the aforementioned contractual relationships, for the fulfillment of legal obligations.
Contact details of the Data Protection Contact:
we inform you that you can assert all your rights as an interested party with a request addressed to the Data Controller, directly or through an authorized person, orally or by sending an e-mail message to this email address: email@example.com referred to our Data Protection Contact
The original Italian version will prevail (due to linguistic peculiarities) compared to the translated version.