Journal

Privacy Notice – Processing of Personal Data (EU Regulation 2016/679)

CONSENT TO DATA PROCESSING:
This notice provides information regarding the collection and processing of your personal data in accordance with EU Regulation 2016/679 (GDPR).

SUBJECT OF THE NOTICE:
This notice concerns the personal data processed by us, including data already collected and data that may be acquired in the future, either directly or through third parties (e.g., other entities, databases, public institutions, etc.).

PURPOSES OF THE PROCESSING

Your personal data is processed for the following purposes (Art. 6 GDPR):

1. Entering into contracts relating to the Controller’s services;

2. Fulfilling pre-contractual, contractual and tax obligations arising from the existing relationship with you;

3. Managing administrative, accounting, ordering, shipping, invoicing and service-delivery activities;

4. Complying with obligations established by laws, regulations, EU legislation or orders issued by Authorities (including, for example, anti-money-laundering requirements);

5. Exercising the Controller’s rights, including the right of legal defence;

6. Sending informational newsletters concerning the services offered by the Controller.

Providing your data is mandatory when required by law; in all other cases it is optional. Refusal to provide such data may result in the impossibility of establishing or continuing a proper contractual relationship.

METHODS OF PROCESSING

Data processing is carried out through the operations listed in Art. 4(2) GDPR, including: collection, recording, organisation, storage, consultation, processing, modification, selection, retrieval, comparison, use, interconnection, restriction, communication, erasure and destruction.

Personal data is processed both in paper format and electronically and/or through automated systems.

The Controller will retain your data for the time necessary to fulfil the purposes described above and, in any case, for at least 10 years from the termination of the contractual relationship, unless longer retention is required by law.

RECIPIENTS OF THE DATA AND DISCLOSURE SCOPE

Data may be communicated, strictly for the purposes described above, to the following categories of recipients:

— Central and local Government bodies, Public Authorities, and other institutions for legal obligations or contractual commitments;
— Sales agents, suppliers, customers, couriers and freight forwarders;
— Banks, financial institutions, leasing companies, credit-recovery, credit-protection and credit-transfer companies;
— Law firms, accounting firms, data-processing companies and consultancy firms.

Data will not be disseminated, but may be accessed by:

— our employees or collaborators, in their capacity as authorised personnel;
— staff of the data-processing centre appointed by the Controller.

DATA SUBJECT RIGHTS

Pursuant to EU Regulation 2016/679, you have the right to:

— obtain information regarding the origin of your personal data, the purposes and methods of processing, the logic applied in case of electronic processing, and the identification details of the Controller, processors and designated representatives; the subjects or categories of subjects to whom the data may be communicated or who may become aware of it as processors or authorised personnel;

— obtain the updating, rectification or, where interested, integration of your data; the erasure, anonymisation or restriction of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed; obtain confirmation that these operations have been notified to the subjects to whom the data was communicated, unless this proves impossible or involves disproportionate effort;

— object, in whole or in part, on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection; and object to the processing of your personal data for the purpose of sending commercial communications.

DATA CONTROLLER

The Data Controller is:
FORMEST s.r.l., Via Emilia Romagna 3/A, Saonara (PD), Italy.

The Data Processor is: Mr. Giampietro Salmaso.

EXERCISING YOUR RIGHTS

You may exercise your rights at any time by sending an email to:
privacy@formest.it