HOLDER OF THE TREATMENT

Owner

Ediltec Insulation Spa

Address

Via Giardini 474/M - 41124 Modena (MO)

PIVA / CF

01932170366 / 01362830356

Contacts

Legal representative

Stefano Sboarina

Privacy reference

Marino Borsari (m.borsari@ediltec.com)

Data Protection Officer

Non presente

Treatment co-owners

No co-owner present

If you wish to request further information on the processing of your personal data or for the possible exercise of your rights, you can contact the Privacy Contact person indicated above directly in writing.

CATEGORIES OF INTERESTED PARTIES

List of categories of interested

customers or users, potential customers, self-employed workers, suppliers

TREATMENT CARRIED OUT

Treatment - Client / Supplier Management Master Data

Decription

Treatment - Client / Supplier Management Master Data

ORIGIN, PURPOSE, LEGAL BASIS AND NATURE OF DATA PROCESSED

Origin

Data collected from the interested party.

Purpose

1. Customer management

For purposes 2: Processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same Legal basis2. Fulfillment of tax and accounting obligations 3. Supplier management

For purposes 1, 3:

Personal data processed Treatment is necessary to fulfill a legal obligation to which the data controller is subject.

Tax code and other personal identification numbers, Telephone contact, Bank details, Tax and accounting data, Residence address, E-mail address, Name, address or other elements of personal identification, Sex m / f

The "special" data (sensitive data) are those defined by the articles 9 and 10 of Regulation 2016/679 / EU ("GDPR"). These data are processed in compliance with the indications of the GDPR as well as in light of the General Authorizations issued by the Authority for the protection of personal data.

Particular data processed

-

Legal basis art. 9

RECIPIENTS OR CATEGORIES OF PERSONAL DATA ADDRESSEES

Categories of recipients

The disclosure of your personal data, based on the legal bases envisaged by Article 6 of Regulation 2016/679 / EU, to the following third parties is provided:

Consultants and freelancers also in partnership, Companies and businesses, Banks and credit institutions, Ministries (economy and finance), Chambers of commerce, industry, crafts and agriculture, Revenue Agency, Public Administration

These bodies, organizations, companies and professionals act as Data Processors appointed by Ediltec Insulation Spa or they are themselves the Data Controllers of the personal data transmitted to them.

Your personal data, or the personal data of third parties in its ownership, may also be communicated to external companies, identified from time to time, to which Ediltec Insulation Spa entrusts the execution of obligations deriving from the assignment received to which only the data will be transmitted necessary for the activities required of them. All employees, consultants, temporary workers and / or any other "natural person" who, authorized to the treatment, carry out their activity on the basis of the instructions received from Ediltec Insulation Spa, pursuant to art. art. 29 of the GDPR, are designated "Data Processors" (hereinafter also "Appointees"). Appointees or Managers, possibly appointed, Ediltec Insulation Spa gives adequate operating instructions, with particular reference to the adoption and compliance with security measures, in order to guarantee the confidentiality and security of data. Precisely in reference to the aspects of protection of personal data you are invited, pursuant to art. 33 of the GDPR to inform Ediltec Insulation Spa of any circumstances or events from which a potential "breach of personal data (data breach)" may arise, in order to allow an immediate assessment and the adoption of any actions aimed at countering this event by sending a communication to Ediltec Insulation Spa at the addresses indicated above.

The obligation of Ediltec Insulation Spa to communicate the data to Public Authorities on specific request remains.

TRANSFER ABROAD

Transfers to foreign countries (outside the EU) or to international organizations

No transfer to foreign countries or to international organizations

The transfer of your personal data abroad can take place if it is necessary for the management of the assignment received. For the processing of the information and data that will be communicated to these subjects, the equivalent levels of protection adopted for the processing of personal data of their employees will be required. In any case, only the data necessary to achieve the intended purposes will be communicated and the regulatory instruments envisaged by Chapter V of the GDPR will be applied.

METHODS, LOGIC OF TREATMENT AND STORAGE TIMES

Duration of processing

The data will be processed for the entire duration of the established contractual relationship and also subsequently, for

Your data is collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles and provisions of art. 5 c 1 of the GDPR. the fulfillment of all legal obligations, as well as for future commercial purposes.

The processing of personal data takes place through manual, IT and telematic tools with logics strictly related to the same purposes and, in any case, so as to guarantee their security and confidentiality.

NATURE OF THE PROVISION

The processing of personal data will be carried out for the following purposes:

Purposes that do not require consent

- Customer management

Purposes that require consent - Fulfillment of tax and accounting obligations - Supplier management

-

Only with your explicit consent to appear at the bottom of this information, the data, whose purpose requires consent, will be processed. The provision of data is in any case optional and will not entail any prejudice in relation to the contractual relationship in place with the Data Controller

For the data collected and used for needs related to the execution of activities related to the contractual relationship and the observance of the legal obligations indicated, your consent is not required. Failure to communicate the aforementioned personal data will make it impossible to follow up the report in question. For the data collected and used for the legitimate interest of the Data Controller, your consent is not required (letter f, article 6, of the GDPR). The communication of the personal data referred to above is optional but necessary for the execution of the services offered by the Data Controller. Any refusal to communicate such data will make it impossible to provide all or part of the services requested.

RIGHTS OF INTERESTED PARTIES

(Articles 15 to 22 of the GDPR)

Right of access

The interested party has the right, according to the provisions of articles from 15 to 22 of the GDPR to request the holder access to their personal data.

Right of rectification

The interested party is entitled, in accordance with the provisions of articles from 15 to 22 of the GDPR to request the owner to rectify their personal data.

Right of cancellation

The interested party is entitled, in accordance with the provisions of articles from 15 to 22 of the GDPR to request the holder to cancel their personal data.

Right of limitation

The interested party has the right, according to the provisions of articles from 15 to 22 of the GDPR to request the holder to limit the data concerning him.

Opposition right

The interested party has the right, according to the provisions of articles from 15 to 22 of the GDPR to oppose their treatment.

Portability right

The interested party has the right, according to the provisions of articles from 15 to 22 of the GDPR to exercise their right to data portability.

Right of revocation

The interested party has the right, in accordance with the provisions of articles from 15 to 22 of the GDPR to exercise their right to revoke the consent.

Right to complain

According to the provisions of art. 77 of the GDPR to exercise its right to complain before the supervisory authority.

AUTOMATED PROCESS

Is there an automated process?

NO

Automated processes or profiling methods

-

Legal basis

-