JH Conceria del Chienti spa with registered office in via Willy Weber 24, 62029 Tolentino (MC), as Treatment’s Holder(hereinafter “Holder”), according to the article 13 of the European Regulation 679/16 (GDPR) and ss. Mm. ii, proceeds to the treatment of personal data relating to contracts and supply of products and services in compliance with the provisions concerning the individuals’ protection with regard to the treatment of personal data, as well as the free movement of such data.
1. PURPOSE OF THE TREATMENT
The treatment of personal data provided directly by the interested party and / or collected through the compilation of paper forms and / or available on the website managed by the Holder of the Treatment is aimed solely at the:
a) correct and complete execution of the contract for the supply of goods or services;
b) compliance of obligations established by laws related to the contractual relationship;
c) management of the contract, for example relationships with agents, representatives, clients and / or contractors;
d) possible external professional collaborations for the fulfillment of legal obligations;
e) protection of contractual rights;
f) inner statistical analysis.
2. THE LEGAL BASIS
With reference to the purposes referred to the previous paragraph, the provision of personal data is mandatory and is a necessary requirement for the fulfillment of the contract. Not duly provision causes the impossibility of receiving the performance requested in the contract and, therefore, the legal basis of the relative treatment is the correct execution of the same, according to the article 6, paragraph 1, lett. b) of the European Regulation 679/16 (GDPR)
3. METHODS OF TREATMENT
Personal data will be processed in paper form, computerized and telematic and inserted in the relevant databases that will be accessible to the persons in charge of data treatment.
The treatment may also be carried out by third parties who provides specific treatment, administrative or instrumental services necessary to achieve the before mentioned purposes.
All data treatment operations are carried out in such a way to guarantee the integrity, confidentiality and availability of personal data.
4. DATA PRESERVATION PERIOD
The Holder of the Treatment retains and processes personal data for the time strictly necessary to fulfill the purposes indicated or for the period imposed by the provisions in civil and fiscal matters. The data are processed for the time necessary to develope the performance requested by the User, or required by the purposes described in this document. The User can always, at any time, request the interruption of treatment or the deletion and / or limitation of data.
5. SCOPE OF NOTIFICATION AND CIRCULATION OF DATA
In relation to the purposes indicated in point 2, the data may be communicated to the following subjects:
- banking institutions for the management of receipts and payments;
- financial administrations or other public authorities in fulfillment of legal obligations;
- companies and law firms for the protection of contractual rights;
- agents, representatives;
- customer and / or contractor as part of the contract / subcontract
- external consultants
- other external companies responsible for carrying out activities related, instrumental or resulting to the execution of the contract.
6. DATA TRANSFER
If necessary for the performance of the purposes referred to paragraph 2, the personal data of the interested party may be transferred to countries belonging to the EU and / or to countries not belonging to the EU, in full compliance with the European Regulation 679/16 (GDPR), and with the provisions and decisions of the Privacy Authority on the matter, as well as by EU law.
7. RIGHTS OF THE INVOLVED PARTY
The articles 15, 16, 17 18, 20, 21,22 of European Regulation 679/16 (GDPR) confer to any involved party the following rights:
Art. 15-Right of access
The involved party has the right to obtain from the Holder of the Treatment the proof that it is or not underway a treatment of his personal data and eventually to obtain the access to personal data and to information regarding the treatment.
Art. 16 – Right of rectification
The involved party has the right to obtain from the Treatment’s Holder the correction of his inaccurate personal data without undue delay. Taking the purposes of the treatment into account, the data subject has the right to obtain the integration of his incomplete personal data, also by providing an additional declaration.
Art. 17 – Right to cancel (right to be forgotten)
The involved party has the right to obtain from the Treatment’s Holder the cancellation of his personal data without undue delay and the Treatment’s Holder is obliged to do it. Art. 18 – Right to limit the treatment
The involved party has the right to obtain from the Treatment’s Holder the limitation of treatment in the case of the following hypotheses:
a) the involved party contest the correctness of his personal data, for the period necessary for the Treatment’s Holder to verify the accuracy of such data;
b) the treatment is unlawful and the involved party opposes the cancellation of his personal data and asks instead that its use is been restricted;
c) though the Treatment’s Holder no longer needs his personal data for treatment purposes, the involved party need them to verify, exercise or defend a right in court;
d) the involved party opposed the treatment pursuant to Article 21, paragraph 1, awaiting verification of the possible prevalence of the Treatment’s Holder licit reasons with respect to those of the involved party.
Art. 20 – Right to data portability
The involved party has the right to receive, in a structured format, in common use and readable by automatic device, his personal data provided to a Treatment’s Holder and has the right to transmit such data to another Treatment’s Holder without impediments from Treatment’s Holder by whom have been supplied.
Exercisig its rights of the portability of data pursuant to paragraph 1, the involved party has the right to obtain direct transmission of personal data from one Treatment’s Holder to another, if technically feasible.
Art. 21 – Opposition right
The involved party has the right to oppose at any time, for reasons connected with his particular situation, to the treatment of his personal data pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.
Art. 22 – Right not to be subjected to automated decision making process, including profiling
The involved party has the right not to be subjected to a decision based noly on automated treatment, including profiling, which produces legal effects concerning him or which significantly affects his person.
8. HOW TO EXERCISE RIGHTS
You can exercise your rights at any time by sending a communication:
- by e-mail, to the address firstname.lastname@example.org
- or by post A.R., to: JH Conceria del Chienti spa, via Willy Weber 24, 62029 Tolentino (MC) ITALY
9. UPDATE OF THIS INFORMATION
This information may change. Any substantial changes will be transmitted to the involved parties by notice or publication on the company website.
10. IDENTIFICATION DETAILS OF THE HOLDER OF THE TREATMENT, MANAGER AND PERSONS IN CHARGE
The Treatment’s Holder is JH Conceria del Chienti Spa.
The updated list of supervisors and persons in charge of the treatment is shielded and available at the headquarters of the Treatment’s Holder.