GALUPPINI SRL Unipersonale
Via Casaloldo 68/a 46042 Castel Goffredo MN
Tel. e Fax 0376 780945 Mail: info@galuppini.it
C.Fisc. e P.Iva 00571240209
INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA - CUSTOMERS / SUPPLIERS
pursuant to and for the purposes of art. 13 of the 2016/679 EU Regulation
(General regulation on the protection of personal data)
Dear Customer / Supplier, pursuant to article 13 of EU Regulation 2016/679 in the following "Regulations" and in relation to personal data concerning you. company, as the data controller, as a result of the existing contracts, would like to provide you with the following information.
1. Extreme identification of the data controller
The data controller is GALUPPINI S.R.L. Unipersonale with registered office in via Casaloldo, 68 / A - 46042 Castel Goffredo (MN) and operational headquarters at the same address. The contact details are as follows: Telephone (+39) 0376 780945 E-mail: info@galuppini.it. It is specified that in consideration of the fact that the data controller is established within the European Union, it is not necessary to appoint the representative of the data controller.
2. Contact details of the data protection officer
Following verification of the applicability of the provisions of art. 37 of the Regulations, the appointment of the Data Protection Officer was excluded, as the company does not fall under any of the cases contemplated.
3. Purposes of the processing for which the data and legal basis are intended
The treatment is aimed at carrying out the following activities: - Fulfillment of legal and / or contractual obligations, completion of customs and habits, regarding the commercial activity of the company; - Accounting and administrative processing; - Management of legal obligations and disputes; Compliance with current legislation on health and safety at work; - Requirements related to the application of the internal management system to the company. The legal basis of the processing consists of the following elements: contract for the acquisition / supply of goods or services, Legislative Decree 81/2008 and s.m.i. as regards the current legislation on health and safety at work and the regulations related to the application of the Civil Code and the Criminal Code. The processing is carried out by means of operations or operations complexes and in particular: collection, recording, organization, storage, processing, modification, comparison, interconnection; selection, extraction, consultation, communication, blocking, cancellation and destruction; it is carried out with or without the aid of electronic means; it is carried out by the owner's organization and by a trusted company, whose list is available from the Owner, who are our direct collaborators and who work in complete autonomy as separate external data processing personal data controllers, obliged to fulfill on their own and according to a contract with the Ns. company to the legislation on the protection of personal data protection. Personal data are not subject to disclosure.
4. Legitimate interests of the Data Controller
In the event that treatments are carried out pursuant to art. 6, paragraph 1, letter f), they will take place exclusively for the satisfaction of the legitimate interests of the data controller.
5. Recipients of personal data
The personal data collected may be communicated to: - all subjects to whom the right of access to such data is recognized by virtue of regulatory provisions; - to our collaborators in the field of their respective duties; - to all those natural and / or legal persons, public and / or private when the communication is necessary or functional to the performance of our activity and in the manner and for the purposes illustrated.
6. Transfer of personal data abroad
The data controller does not intend to transfer personal data to third countries or international organizations outside the European Union.
7. Period of retention of personal data
The time limit for the retention of data for tax purposes currently in force (10 years) is taken as a parameter.
8. Rights of the interested party
The interested party has the right (Section III Rights of the interested party) to ask the data controller to access personal data and to correct or delete them, as well as the limitation or opposition to their processing and the portability of data. To exercise these rights, reference should be made to the contact data previously mentioned.
9. Revocation of consent
The interested party has the right to revoke the express consent pursuant to art. 6, paragraph 1, letter a) and of the art. 9, paragraph 2, point a).
10. Right to Complaint with the Control Authority
The interested party has the right to lodge a complaint with the Supervisory Authority, which can be reached at the following addresses: Guarantor for the protection of personal data - Piazza di Monte Citorio n. 121 00186 ROMA Fax: (+39) 06.69677.3785 Telephone switchboard: (+39) 06.696771 E-mail: garante@gpdp.it Certified mail: protocollo@pec.gpdp.it. References and how to exercise the right of complaint are reported on the website of the Privacy Guarantor http://www.garanteprivacy.it.
11. Communication of personal data
The communication and subsequent processing of personal data is a necessary condition for the completion of the contract in place with the Ns. society. Failure to communicate will result in the non-applicability of the contract.
12. Automated decision-making process
Personal data collected will not be subjected to automated decision-making processes, including profiling.