Dear Customer / Provider,
We’d like to inform you how, on behalf of art. 13 of EU Regulation 2016/679 (General Data Protection Regulation – hereinafter “GDPR 2016/679”), containing provisions to protect persons and other subjects regarding the processing of personal data, the personal data you provide will be processed by Salvioni S.p.A.
The processing of personal data will take place in compliance with the aforementioned regulations, in particular, according to the principles of lawfulness, correctness, transparency and protection of your privacy and your rights, with particular reference to integrity, confidentiality, personal identity and the right to protection of personal data.
1. Data Controller
The Data controller is Salvioni S.p.A. with registered office in via Durini, 3 – 20122 Milano (MI).
E-mail address to contact the owner: info@salvioniarredamenti.it
2. Types of data collected
The provision of personal data is necessary for the stipulation of contracts, for their modifications and any other relationship with Salvioni S.p.A.
Among the personal data collected, may include:
a) personal data of the customer or the legal representative and the company contact person of the client / supplier company;
b) contact data of the customer or legal representative and company contact person of the client / supplier company;
c) data necessary for tax / civil obligations (such as tax code, bank details or single certification of suppliers);
d) data necessary for deliver the products (such as, for example, the customer’s delivery address).
3. Purpose of the processing for which the data are intended
The personal data you provide will be used for the following purposes:
a) comply with legal obligations, regulations, community legislation, civil and tax regulations;
b) complete the requested services, fulfill any contractual obligations, and allow effective management of the relationship with the counterparty in order to respond to requests for information, assistance, suggestions and / or needs reported by your person.
4. Nature of the provision and legal basis of the processing
The processing of personal data is necessary for the performance of contracts and for their execution.
Any refusal to provide them will make it impossible to proceed with the employment relationship or the obstacle / impediment to the continuation of the ongoing relationships.
5. Processing methods
The processing will be carried out in an automated and / or manual form, using methods and tools that complying with the measures according to Art. 32 of the GDPR 2016/679, by specially appointed persons, in compliance with the provisions of art. 29 of the European Regulation. Security measures shall be employed to ensure the confidentiality of the subject to whom such data refers and to prevent undue access by third parties and/or unauthorised personnel.
The Data Controller shall take appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data.
6. Data retention
In compliance with the principles of lawfulness, purpose limitation and data minimization (according to Article 5 of GDPR 2016/679), the retention period of your personal data is established in a period of time not exceeding the achievement of the purposes for which they are collected and processed, respecting however the times prescribed by law (normally set at 10 years). At the end of the storage period, Personal Data will be deleted. Therefore, at the end of this term, the rights of access, cancellation, rectification as well as the right to data portability can no longer be exercised.
7. Scope of communication
Personal data collected will not be communicated; in relation to the purposes above, they may be communicated to the following categories of recipients:
a) public entities to which the data must be communicated by law (social security and welfare institutions, financial offices, etc.);
b) subjects – public or private – if the communication is necessary or functional to the performance of our activity;
c) our consultants, within the limits necessary to carry out their professional assignment on behalf of the undersigned company.
8. Transfer of data to extra-EU countries
The Data Controller does not transfer personal data to extra-EU countries; However, it reserves the possibility of using cloud services and in which case the service providers will be selected among those who provide adequate guarantees, according to art. 46 GDPR 2016/679.
9. Rights of data subject
At any time, according to articles 15-22 of the GDPR 2016/679, you may exercise the right to:
a) request confirmation of the existence or not of your personal data;
b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the period of storage;
c) obtain the rectification and erasure of data;
d) obtain the restriction of processing;
e) obtain data portability, i.e. receive them from the Data Controller, in a structured, commonly used and machine-readable format, and transmit them to another Data Controller without hindrance;
f) oppose the processing at any time and also in the case of processing for direct marketing purposes;
g) oppose an automated decision-making process relating to individuals, including profiling;
h) lodge a complaint with the Control Authority (Privacy Guarantor).
10. Information not contained in this policy
Further information in relation to the processing of Personal Data could be requested at any time from the Data Controller using the contact details.