Cartigliano, 30 October 2018
Dear Customer,
Pursuant to Art. 13 of Regulation EU no. 2016/679, in relation to the personal data that will come into the possession of Officine di Cartigliano S.p.A. as a result of the contractual relations with you, we would kindly ask you to read the following.
Officine di Cartigliano S.p.A. will process your personal data in accordance with principles of lawfulness, fairness and transparency, restriction of purpose, data minimisation, accuracy, restriction of storage, integrity and confidentiality, accountability of the Controller.
The controller is Officine di Cartigliano S.p.A. – with registered office in 36050 CARTIGLIANO(VI), Via San Giuseppe, 2 – VAT number 00167890243 – tax code 00167890243 R.E.A. VI-80062 – amministrazione@cert.cartigliano.com – tel. 0424 592526 – fax 0424 590515
In addition to the Controller, other internal and external processors of OFFICINE DI CARTIGLIANO S.P.A. might process your personal data.
In order to satisfy legal obligations or for reasons strictly functional to fulfilment of the obligations deriving from the working relationship, your data may be communicated to:
A precise list of processors and their assignments is kept at the company head office.
The data we may process in our activities, for which you must promptly notify any rectifications, supplements and/or updates, is:
The personal data is processed on paper, electronically and/or using telematic means. It is managed internally in full compliance with Italian Legislative Decree no. 196/03, as revised by Italian Legislative Decree no. 101/2018. The Controller adopts appropriate security measures to prevent unauthorised access, theft, alteration, loss or destruction of the personal data.
The personal data is processed to allow Officine di Cartigliano S.p.A. to supply its services. The data may be used to contact you, if required by the contractual relationship.
The personal data will be processed for direct marketing purposes only after you have given your specific consent.
The personal data will also be processed to satisfy legal requirements, such as tax and accounting obligations.
In certain cases, of which you will be informed, failure to provide your personal data could make it impossible for Officine di Cartigliano S.p.A. to supply the service requested.
Officine di Cartigliano S.p.A. will process your personal data in all the following cases:
Your personal data will be stored for the validity period of the contract and subsequently for the time for which Officine di Cartigliano S.p.A. is subject to the obligation of keeping the data for taxation purposes or for other purposes imposed by law, and also for the limitation period for any legal actions. The limit imposed by Officine di Cartigliano S.p.A. is 10 years, after which the data will be erased.
Your personal data will not be disclosed or subject to any automated decision-making process, including profiling. Your data will not be transmitted to third countries.
As the data subject, you may exercise the following rights at any time:
You may exercise these rights by sending written notice via PEC (certified public e-mail address) to amministrazione@cert.cartigliano.com or via registered letter with acknowledgement of receipt to Officine di Cartigliano S.p.A. in 36050 CARTIGLIANO (VI), Via San Giuseppe, 2
If you deem this necessary, you may contact the Personal Data Protection Authority to protect your rights, using the following contacts:
Personal Data Protection Authority
Piazza Montecitorio no. 121
00186 Rome
For general information, send an e-mail to protocollo@pec.gpdp.it
Personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data subject:
Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Processor: the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller