PRIVACY POLICY - Art. 13 EU REGULATION No. 679/2016

 

As Data Controller, BITUBO SRL (hereinafter, the "Company" or the "Data Controller") wishes to inform you, pursuant to art. 13 of European Regulation 2016/679 concerning the protection of personal data ("Regulation") and to the national legislation, including the individual provisions of the Supervisory Authority (The Italian Data Protection Authority), where applicable, that the personal data provided by you will be processed in compliance with the legislative and contractual provisions in force for the purposes and with the methods indicated below.

In some circumstances, some data may also be collected from third parties, where necessary - ART 14 REGULATION

 

1. 1.    Type of personal data

The Data Controller may collect and process, even through external collaborators, the customer’s / supplier’s personal data, such as his/her name and surname, contact details, tax and banking data.

 

1. 2.    Purposes and legal grounds for processing

The aforementioned data will be processed exclusively for purposes related to the establishment, management and execution of the contractual relationship including, for example, the administrative management of contracts; the management of payments and invoices; the management of any dispute; group reporting, internal controls (security, quality of services, integrity of assets), management control, certification, as well as for the fulfilment of legal and regulatory obligations (e.g. tax and accounting obligations, obligations deriving from the regulations on health and safety at work).

Therefore, the above-mentioned provision of personal data is necessary to allow compliance with legal and contractual obligations, with the consequence that any refusal to provide them does not allow the execution and management of the contractual relationship with the Data Controller.

For the purposes of processing personal data for the goals set out above, it is not necessary to acquire a specific consent from the interested parties, as the treatment is based on the legal basis pursuant to art. 6, par. 1, point b) of the Regulation.

 

1. 3.    Data processing methods

Personal data will be processed by the Company and its staff with electronic (and manual) systems, according to the principles of law and protecting the privacy of the interested party and his/her rights through the adoption of appropriate technical and organizational measures to ensure a level of security adequate to the risk.

 

1. 4.    Data retention

Personal data will be stored by the Data Controller and by any data processor exclusively in compliance with the aforementioned purposes and for the time strictly necessary to fulfil the purposes for which the data are collected. The data necessary for the fulfilment of civil and fiscal obligations will be retained for the entire duration of the contractual relationship and also after the termination of the contract, in compliance with these obligations (for example, the statutory obligation to keep invoices and company documentation for at least 10 years pursuant to Article 2220 of the Italian Civil Code).

The data will be stored according to appropriate technical and organizational measures to guarantee the integrity and confidentiality of the same. Where the need to process the supplier's personal data no longer exists, his/her data will be deleted or made suitably anonymous, unless the storage of the data for a longer period of time is deemed necessary for reasons of public interest.

 

 

 

 

1. 5.    Communication, dissemination and transfer of data

The aforementioned personal data may be disclosed only for the purposes stated above to certain third parties, including legal and accounting consultants, banks, transport service providers, associated companies, subsidiaries and parent companies, within the limits established by the aforementioned purposes of data processing or for reasons of internal organization.

Other subjects may become aware of personal data as data processors or persons in charge of the processing, such as our employees, who are assigned the tasks necessary for the execution of the contract signed by you, as well as the data processors appointed by the company and tasked on the basis of the agreement concerning the processing of personal data.

An updated list of data managers is available on request. Under no circumstances will the processed personal data be disseminated.

Some third parties, to which the personal data of the customer / supplier are transmitted, may reside outside the European Union ("EU"). If the recipient of the personal data resides in a country that does not guarantee an adequate level of protection, the company will take all appropriate measures to ensure that the transfer of personal data outside the EU is adequately protected as required by the law on the protection of the applicable personal data (see EU Standard Contractual Clauses).

 

1. 6.    Rights of the interested party

The customer / supplier may at any time exercise his/her rights pursuant to art. 15 et seq. of (EU) Regulation 2016/679, including:

• receive confirmation of the existence of his/her personal data and access their content (access rights);
• update, modify and / or correct his/her personal data (right to rectification);
• request the deletion or restriction of processing of the data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or otherwise processed (right to be forgotten and the right to restriction of processing);
• object to processing of personal data (right to object);
• withdraw his/her consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
• submit a complaint to the Supervisory Authority in case of violation of the regulations regarding the protection of personal data;
• receive a copy of the data concerning him/her in electronic format, given in the context of the work contract and request that such data be transmitted to another data controller (right to data portability).

The right of the interested party and any request for further information can be exercised, without any formality, by contacting the Data Controller at the following address: VIA A. VOLTA 24 35037 TEOLO, or via email: privacy@bitubo.com

The Data Controller is BITUBO SRL with registered office in VIA A. VOLTA 24 35037 TEOLO in the person of the Legal Representative pro-tempore.

 

 

 

 

 

 

 

 

 

CONSENT TO THE TREATMENT OF SPECIAL CATEGORIES OF PERSONAL DATA

 

I, the undersigned (name and surname) ___________________________________________,

 

as legal representative of the company ____________________________,

 

having read the above information, consent to the processing of particular categories of data

by BITUBO SRL

 

Date________________ Readable signature _________________

 

 

CONSENT TO THE PROCESSING OF PERSONAL DATA FOR PURPOSES OF

DIRECT MARKETING

 

I, the undersigned (name and surname) __________________________________________,

 

as legal representative of the company ____________________________,

 

having read the above information, consent to the processing of my personal data by

BITUBO SRL for direct marketing purposes by the Data Controller

in order to carry out informative, commercial,

advertising and promotional activities even by sending communications through the use of electronic or hardcopy media.

 

Date_______________ _ Readable signature__________________