ADVISORY NOTICE AND CONSENT OF PERSONAL DATA PROCESSING
( Art. 13 and 14 of EU Regulation 2016/679)
Idromatic Srl situated in Via Petrarca Borgoforte 127, Borgo Virgilio, Mantua , Italy (hereinafter referred to as "Controller"), as the data controller, is informing you, pursuant to art. 13 Lgs.D. 30.6.2003 No. 196 (hereinafter referred to as "Privacy Code") and art. 13 EU Regulation No. 2016/679 (hereinafter referred to as "GDPR") that your data will be processed in fulfilment of the aforementioned regulation and according to the modes and for the following purposes:
The controller processes personal, identifying data (for example, name, surname, company name, address, telephone, e-mail, bank and payment details - hereinafter referred to as "personal data" or even "data") that you have provided in agreement to contracts for the services of the controller.
PERSONAL DATA PROCESSING CONTROLLER AND MANAGER
The controller of the personal data is Idromatic srl. The role of data processing manager has been assigned to Mr. Renato Lorenzini whom the interested party can contact at any time, at 0376 / 648756 or e-mail address: firstname.lastname@example.org to avail of his/her rights listed in these regulations.
Your personal data is processed without your express consent (art. 24 letter a), b), c) Privacy Code and art. 6 letter b), e) GDPR), for the following service purposes: - to fulfil the legal obligations related to contractual and tax relations arising from the contracts with you, - to fulfil the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as, for example, against money laundering), - to exercise the rights of the controller, for example the right to defence in court.
PROCESSING METHOD AND ACCESS TO DATA
Your personal data will be processed in paper, computer and telematic form and entered in the relevant databases that only the controller and his employees have access to. As for data processed in electronic form, note that all suitable and appropriate security measures have been adopted to protect the rights, freedoms and legitimate interests of the data subject as per art. 22 par. 3 of EU Reg. 2016/679, aimed at minimising the risks of loss or destruction, unauthorised access, processing without consent and straying from the purposes that it is carried out for. The controller will process personal data for the time necessary to fulfil the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes of service.
In relation to the processing purposes, the data may be disclosed to the following subjects or to the categories of persons indicated below: -Official accounting and/or labour consulting firms, related to the profession of corporate assistance when providing the data is due by law, or is in the interest of the subject (natural or legal person), - Other recognised firms or professionals related to the profession of corporate assistance when providing the data is due by law, duly appointed for this form of processing in full compliance with the minimum measures in force, or in the interest of the data subject (natural or legal person); - Institutions such as INPS and INAIL.-The data controller can provide your data for the purposes referred to in art. 2 to Vigilance Bodies (such as IVASS), Judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom the data must be provided by law for the fulfilment of said purposes. Said subjects will process the data in their capacity as independent data controllers.The data controller is also informing you that it can transfer part of customer personal data to a third non-EU country or to a non-EU international organisation.
THE RIGHTS OF THE DATA SUBJECT
In relation to the aforementioned processing, the data subject has the right to request access to his/her personal data, to rectification, to cancellation, to anonymisation or blocking of data processed in violation of the law, including data that does not need to be kept for the purposes it was collected or subsequently processed for, to the limitation or opposition of processing that concerns them, as well as being entitled to data portability.
THE RIGHT TO WITHDRAW CONSENT
If processing is based on consent, the controller informs the data subject that he/she has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to withdrawal.
THE RIGHT TO LODGE COMPLAINTS
The controller informs the data subject that he/she has the right to lodge complaints with a control authority
THE COMPULSORY OR OPTIONAL NATURE OF DATA PROVISION
The provision of data and the relative processing are compulsory for the management of contractual aspects, relating to fulfilments of a fiscal nature; it follows that any refusal to provide data for such purposes may make it impossible for the data controller to proceed with the relative commercial relationships and legal obligations. The provision of data and its relative processing are considered optional in the other cases, without any consequence.
THE EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS
The data controller informs the data subject that on this site there is no automated decision-making process, therefore there is no particular profiling system.
The Data Controller processes the Personal Data of Users and Data Subjects by adopting appropriate security measures to prevent the unauthorised access, disclosure, modification or destruction of Personal Data. Processing is carried out using electronic tools with organisational methods strictly related to the purposes indicated below.
In some cases, in addition to the controller, external subjects may have access to the Data (such as third party technical service providers, postal carriers, hosting providers, IT companies, communication agencies). The updated list of these subjects can always be requested from the Data Controller.