in accordance with ART. 13 and ART. 14 of the GDPR (EU) 2016/679
Published: May 25, 2018
Dear customer/supplier,
The European Regulation on the protection of personal data (GDPR) in Article 13, paragraph 1, imposes the obligation to inform the data subject, in the case of direct and indirect collection of their data, about the fundamental elements of processing. The undersigned Company fully complies by informing you that:
Purposes
Data is collected for the following purposes:
- execution of obligations arising from a contract of which you are a party or to comply, prior to the execution of the contract, with your specific requests;
- compliance with legal, regulatory, and community obligations;
- customer management (customer administration; administration of contracts, orders, shipments, and invoices; reliability and solvency checks);
- supplier management (supplier administration; administration of contracts, orders, arrivals, invoices; selections based on the needs of the company);
- management of disputes (contractual breaches; warnings; settlements; debt recovery; arbitrations; judicial disputes);
- conducting market research;
- sending advertising material;
- promotional activities.
Methods of Processing
In relation to the aforementioned purposes, the processing of personal data is carried out using paper, IT, and telematic tools in such a way as to guarantee you the security and confidentiality of the data, as well as full compliance with the Law.
The legal basis is based on:
- your explicit consent for one or more specific purposes;
- contractual or pre-contractual necessity;
- legal obligation to which the undersigned Company is subject.
The indirect sources from which personal data originates are agents and web portals.
Nature of Data Provision and Consequences of Refusal to Respond
The provision of data is:
- mandatory based on law, regulation, community legislation;
- conditional on the ability to effectively fulfill contractual obligations undertaken;
- optional for the purposes of: conducting market research, sending advertising material, carrying out promotional activities.
Your possible refusal to respond will result in our inability to:
- • fulfill the contract;
- effectively fulfill the contractual obligations undertaken;
- conduct market research;
- send advertising material;
- carry out promotional activities.
Communication
The above data may be communicated to the only categories of subjects indicated below:
- • postal entities or other mail delivery companies;
- banks and credit institutions;
- debt collection companies;
- law firms;
- insurance companies;
- maintenance/repair companies for IT equipment;
- professional firms and/or companies and/or associations of businesses and entrepreneurs that provide us with specific accounting and/or tax services;
- distributors.
The data will not be disseminated.
The following individuals may become aware of the data:
- • executives, directors, and auditors;
- accounting and billing staff;
- technical office staff;
- staff involved in the marketing of goods/services;
- operational personnel;
- agents and representatives;
- self-employed workers, project workers, occasional workers.
Retention Period
The retention period for personal data contained in databases related to processing for contractual purposes coincides with the duration of the contractual relationship, while that related to the fulfillment of legal obligations is prescribed by law. In relation to the purposes of conducting market research, sending advertising material, and promotional activities, the retention period for data will be a maximum of 10 years.
Rights of the Data Subject
You are informed of your right to request access to your personal data, to rectify, delete the same, to limit the processing of data concerning you, to data portability, and to object to their processing. Since the processing is also based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal. You have the right to lodge a complaint with a supervisory authority.
Download the data subject withdrawal form >> CLICK HERE
Download the data access request form >> CLICK HERE
Data Controller
The data controller is DoraBaltea Group s.r.l., located in Arezzo (AR), Via Fratelli Lumiere, 80.
Reference email: info@dorabaltea.com
Arezzo, 25/05/2018