Privacy policy pursuant and for purposes of GDPR EU 2016/679 regarding the protection of personal data processing.
Dear Customer/Supplier
In compliance with the European Regulation n. 2016/679 on the subject of protection of personal data, we are providing the following information on the collection of personal data with references to existing contractual terms:
Purpose of processing personal data
The collection and the processing of data are realized:
- to fulfil the contractual, administrative and tax related obligations resulting from the relations between us in place.
- to fulfil current and binding legislative, mandatory, regulatory obligations;
Your personal data will be processed for the full duration of the relation and afterwards, for the fulfilment of all legal obligations and for the minimum duration required by law.
Modality of processing personal data
The processing of data for the purposes mentioned above is done with automatic methods, using electronic and magnetic format, and non-automatic methods, on paper, in compliance with the regulations of confidentiality and security required by law. The personal data collected are not used for promotional purposes.
The management and storage of personal data will take place in the territory of the European Union.
Place of processing personal data
The data are currently processed and archived at the company’s registered office: Via Di Castello, 89 - 50019 Sesto Fiorentino (FI).
Furthermore the data are processed on behalf of the Undersigned, by professionals and/or companies in charge of carrying out technical, managerial and administrative activities.
1 Mandatory or optional nature of the data provision
Some data are indispensable for the establishment of the contractual relationship or per its fulfillment. The provision of data to the undersigned is obligatory only for the data for which there is a regulatory or contractual obligation.
Data disclosure
The collected and processed personal data may be communicated exclusively for the purposes aforementioned to:
Entities to which the communication is mandatory in order to meet specific legislative requirements;
Third party companies or other entities (including and not limited to credit institutions, professional consult firms) who carry out activities on behalf of the undersigned;
Employees of our company;
Retention period of personal data
All of the aforementioned data will be kept for the full duration of the relation and the time necessary to fulfill the purposes related to legal obligations.
Your rights
With relation to the provided personal data, the Data Subject can exercise the rights pursuant to art. 15-21 of the EU Regulation n. 2016/679, and specifically has the right to obtain from the data controller the confirmation whether or not a Processing of data concerning the data subject is in progress and, in this case, to obtain an access to the personal data and to the following information:
- the purpose of the processing;
- the categories of personal data in question;
- the recipients or the categories of recipients to whom the personal data have been or will be communicated;
- the expected retention period of the personal data;
Furthermore the Data subject has the right to:
- Ask the data controller to rectify or delete personal data or limit the processing of personal data concerning the data subject or to oppose their processing
- to lodge a complaint with the Guarantor Authority;
- the provision of data, including the sensitive ones in the established hypotheses and in case of judicial ones, is mandatory for the fulfilments required and sanctioned by the law, otherwise the provision is optional but necessary and any refusal by the interested party makes it impossible for the Data Controller to follow up on establishing the relationship and its punctual execution;
2 Agreement
The agreement to the processing of the aforementioned is not necessary as they are collected to fulfill the legal obligations and/or to execute the obligations resulting from the existing contract or from the alleged percontractuals.
Data Controller
The Data Controller of your personal data is our company Fior di Maggio di Finocchi Serena, located in Via Di Castello, 89 - 50019, SESTO FIORENTINO (FI).
The rights mentioned above may also be exercised by you by sending:
- an email to a pec address (certified email) fiordimaggiosnc@pec.it
- a registered letter with a return receipt to: Fior di Maggio di Finocchi Serena - Via Di Castello, 89 - 50019 Sesto Fiorentino (FI).