INFORMATION ON THE PROCESSING OF PERSONAL DATA IN THE CASE OF CONTRACTS WITH SUPPLIERS
PURSUANT TO REGULATION (UE) 2016/679 (“GDPR”)”
Colacem Albania Sh.P.K. info@al.colacem.com |
DEFINITION OF “DATA” and DATA ORIGIN/SOURCE |
"Data" is meant as that relating to natural persons which are processed by the Company for the stipulation and execution of contractual relationships with its suppliers, such as data of the supplier’s legal representative signing the contract for and on behalf of the supplier, as well as data of the supplier's employees / consultants involved in the activities specified in the contract. In this case, the Data source is the supplier itself. "Data" is also meant as that relating to consultants / suppliers - natural persons – which are processed by the Company for the stipulation and execution of the contractual relationship. |
PURPOSES OF DATA PROCESSING |
LEGAL BASIS OF PROCESSING |
DATA STORAGE TERMS |
Purposes connected with the stipulation and execution of the contractual relationship between the supplier and the Company. |
Contract execution, also for the Supplier legal representative’s Data . Legitimate interest in the Data of the Supplier’s employees / consultants, who are involved in the activities specified in the contract. |
Contractual duration and 15 years, after contract expiration. In the case of a legal dispute, for the entire duration of the same, until expiration of enforceability terms of practicability of appeal actions. |
Performance of administrative and accounting obligations - such as the management of accounting and treasury, as well as billing (for example, invoice verification and registration ), in compliance with the requirements of legislation in force. |
Need to fulfill a legal obligation the Company is subjected to. |
|
If necessary, in order to ascertain, exercise and / or defend the rights of the Company in Courts of Law. |
Legitimate interest |
|
Once the abovementioned storage terms have elapsed, Data will be destroyed or made anonymous, consistently with technical cancellation and backup procedures. |
DATA PROVISION |
The provision of data is mandatory for entering into contract and / or for its execution. Refusal to provide the Data will not therefore allow to stipulate contractual relationships and / or to fulfill deriving obligations. |
DATA RECIPIENTS |
Data may be disclosed to external subjects acting as data controllers, for instance, authorities and supervisory and control bodies and in general public or private subjects, who are entitled to request such Data. Data may also be disclosed, as data controllers, to subjects who need to access such data for accessory purposes connected with existing relationships within the limits strictly necessary to carry out any auxiliary tasks (mention is made by way of example of credit institutions and forwarding agencies) and, with the same limits, to our consultants, upon our letter of appointment imposing their obligation to confidentiality and security. |
SOGGETTI AUTORIZZATI AL TRATTAMENTO |
Data can be processed by employees of the company departments responsible for the performance of the aforementioned purposes, who have been expressly authorized to carry out data processing and who have received adequate operating instructions. |
TRANSFER OF PERSONAL DATA TO EXTRA-EUROPEAN COMMUNITY COUNTRIES |
Not applicable |
RIGHTS OF THE PERSON CONCERNED - COMPLAINT TO CONTROL AUTHORITIES |
By contacting the Company via e-mail at info@al.colacem.com, the person concerned can ask the Company to access data concerning him / her, as well as their deletion, correction of inaccurate Data, integration of incomplete data, deletion of data, limitation to data processing in the cases provided for by art. 18 GDPR, and to oppose, for reasons connected with their particular situation, to the processing carried out in the legitimate interest of the data controller. |
Furthermore, if data processing is based on consent or on the contract and is carried out using automated tools, the person concerned shall have the right to receive such Data in a structured, commonly used and automatically readable format, as well as, if technically feasible, to transmit them to another data controller without any impediment. |
The person concerned shall have the right to lodge a complaint to the competent Supervisory Authority in the Member State in which he or she normally resides or works or in the State where the alleged violation has occurred. |