INFORMATION ON THE PROCESSING OF PERSONAL DATA IN THE CASE OF CONTRACTS WITH CUSTOMERS, PURSUANT TO ART.
13 AND 14 OF REGULATION(UE) 2016/679 (“GDPR”)
COLACEM - S.p.A. |
DEFINITION OF “DATA” and DATA ORIGIN/SOURCE |
"Data" is meant as that relating to natural persons which are processed by the Company for the stipulation and execution of contractual relationships with its customers/clients - , natural persons - or, in case of legal persons ( “Customers”), data of their legal representative signing the contract for and on behalf of the Customer, as well as data of the customer’s employees / consultants involved in the activities specified in the contract. In this last case, the Data source is the customer itself. |
PURPOSES OF DATA PROCESSING |
LEGAL BASIS OF PROCESSING |
DATA STORAGE TERMS |
Purposes connected with the stipulation and execution of the contractual relationship between the Customer and the Company. |
Contract execution, for the legal representative’s Data. Legitimate interest in the Data of the Customer’s employees / consultants, who are involved in the activities specified in the contract. |
Contractual duration and 15 years . |
Performance of administrative and accounting obligations - such as the management of accounting and treasury, as well as billing (for example, invoices verification and registration), in compliance with the requirements of legislation in force. |
Need to fulfill a legal obligation the Company is subjected to.
|
|
Extrajudicial debt collection |
Legitimate interest |
|
If necessary, in order to ascertain, exercise and / or defend the rights of the Data Controller in Courts of Law |
Legitimate interest |
|
Marketing purposes (sending of commercial / promotional communications), through automated contact methods (such as e-mail, text messages or mms) and traditional ones (such as telephone calls with operator and traditional mail) on the Company's products / services, surveys on customer satisfaction, market surveys and statistical analysis. |
Consenso del legale rappresentante del Cliente (facoltativo e revocabile in qualsiasi momento). |
Contractual duration, and 15 years after contract expiration.
|
Once the abovementioned storage terms have elapsed, Data will be destroyed or made anonymous, consistently with technical cancellation and backup procedures. |
DATA PROVISION |
The provision of data is mandatory for entering into contract and / or for its execution. Refusal to provide the Data will not therefore allow to stipulate contractual relationships and / or to fulfill deriving obligations. |
CATEGORIES OF DATA RECIPIENTS |
Data may be disclosed to external subjects acting as data controllers, for instance, authorities and supervisory and control bodies and in general public or private subjects, who are entitled to request such Data .
|
Data can be processed, on behalf of the data controller, by external subjects appointed as data processors, who perform specific activities on the controller’s behalf , such as accounting, tax and insurance obligations, personnel management , correspondence, management of collections and payments, etc. |
SUBJECTS AUTHORIZED TO CARRY OUT DATA PROCESSING |
Data can be processed by employees of the company departments responsible for the performance of the aforementioned purposes, who have been expressly authorized to carry out data processing and who have received adequate operating instructions. |
TRANSFER OF PERSONAL DATA TO EXTRA-EUROPEAN COMMUNITY COUNTRIES |
Not Applicable |
RIGHTS OF THE PERSON CONCERNED - COMPLAINT TO CONTROL AUTHORITIES |
By contacting the Company via e-mail at privacy@financo.it , the person concerned can ask the Company to access data concerning him / her, as well as their deletion, correction of inaccurate Data, integration of incomplete data, deletion of data, limitation for data processing in the cases provided for by art. 18 GDPR, and to oppose, for reasons connected with their particular situation, to the processing carried out in the legitimate interest of the data controller. |
Furthermore, if data processing is based on consent or on the contract and is carried out using automated tools, the person concerned shall have the right to receive such Data in a structured, commonly used and automatically readable format, as well as, if technically feasible, to transmit them to another data controller without any impediment. |
The person concerned shall have the right to lodge a complaint to the competent Supervisory Authority in the Member State in which he or she normally resides or works, or in the State where the alleged violation has occurred. |
The person concerned shall have the right to revoke the consent given at any time for the marketing purposes and to oppose the processing of the data processed for the same purposes. The possibility remains for the person concerned, who prefers to be contacted for the aforementioned purpose exclusively through traditional methods, to oppose only the receipt of communication through automated methods. |