Privacy Policy | Falegnameria Adriatica
INFORMATION ON HANDLING OF PERSONAL DATA
pursuant to art. 13 Leg. Dec. No. 196/03 and EU Regulation No. 679/2016679/2016
The company Falegnameria Adriatica s.r.l. with registered offices in Stella di Monsampolo del Tronto (AP), Contrada San Mauro 5, Tax code and VAT Reg. No. 00979710449 (hereafter indicated as the, “Handler”), as data handler, hereby informs you pursuant to art. 13 of Leg. Dec. No. 196 dated 30.6.2003 (hereafter indicated as the “Privacy Code”) and art. 13 of EU Regulation No. 2016/679 (hereafter indicated as “GDPR”) that your data will be processed in the following manners and for the following purposes:
1.Subject of the Data Processing
The Handler processes the personal data, identification (for example, name, surname, company name, address, telephone, e-mail, banking and payment details) - hereafter indicated as, “personal data” or simply “data”) communicated by you on concluding contracts for purchase of goods and services produced by the Handler.
2. Purpose of the Data Processing
Your personal data is processed::
without your express consent (art. 6, letters b), c) f) GDPR of the Privacy Code), given that these are "common" types of data, and for the following Service Purposes:
1. to finalise contracts for the goods and services provided by the Handler
2. to fulfil the pre-contractual, contractual and fiscal obligations deriving from existing relations with yourself
3. to fulfil the obligations envisaged by law, by regulations, by EU regulations or by an order from the Authorities (for example regarding money laundering);
4. to exercise the Handler's rights, for example the right to defence in Court.
without your express consent (art. 6, letters b), c) f) GDPR of the Privacy Code), given that these are "common" types of data, and for the following Service Purposes:
1. to finalise contracts for the goods and services provided by the Handler
2. to fulfil the pre-contractual, contractual and fiscal obligations deriving from existing relations with yourself
3. to fulfil the obligations envisaged by law, by regulations, by EU regulations or by an order from the Authorities (for example regarding money laundering);
4. to exercise the Handler's rights, for example the right to defence in Court.
3. Processing methods
Personal data is processed using the operations indicated in art. 4 no. 2) of the Privacy Code and GDPR, more specifically: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blockage, communication, deletion and destruction of data. Personal data is processed both on paper and electronically and/or in an automated form.
Each treatment of data is carried out by the holder in compliance with the methods set out in articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures.
4. Data conservation period
The data processed by the Handler, without prejudice to legal requirements (for example the period for which fiscal and accounting documents must be kept on file, set at 10 years), is held until the interested party expressly requests cancellation and in any case is verified periodically, also using automatic procedures, to guarantee that it is up to date and actually complies the purposes of the data processing. If the purpose for which the data was obtained no longer exists (see art. 2), the data is cancelled, unless otherwise expressly requested by the interested party.
5. Data access
Personal data may be accessed for the purposes indicated under art. 2:
- by employees and associates of the Handler or any companies in the Handler's Group, who are charged with and/or internally responsible for handling and/or system administration;
- by any third party companies or other individuals (for example, credit institutes, professional practices, consultants, insurance companies to provide insurance services, etc.) performing outsourcing activities on behalf of the Handler, in their capacity as external data handling officers.
6. Data communication
Without the need for express consent art. 6 letters b), c) and f) GDPR as established by the Privacy Code, the Handler may communicate personal data to supervisory Bodies, Court Authorities, credit institutes, insurance companies in order to provide insurance services, and to those parties required by law to be notified in order to carry out the operations indicated. These persons will process the data, acting as independent data controllers.
The personal data provided will not be distributed.
The personal data provided will not be distributed.
7. Transfer of data outside the EU
The personal data is stored on servers located at the Handler's operational headquarters, as indicated above, or on cloud servers, in any case within the European Union. It is understood that the Handler, should this be necessary, will be entitled to move its servers outside the EU. In this event, the Handler guarantees as of this time that transfer of data outside the EU will take place in compliance with applicable legal requirements, subject to stipulation of the standard contractual clauses envisaged by the European Commission.
8. Nature of the data supplied
It is compulsory to provide the data for the purposes indicated in art. 2. In the absence of this data, we will be unable to provide you with the services indicated in art. 2.
9. Rights of the interested party
As the interested party, you have the rights indicated in art. 7 of the Privacy Code and art. 15 GDPR, more specifically the right:
1. to obtain confirmation of whether or not any personal data relating to yourself exists, even if not yet registered, and communication of that data in an intelligible form;
2. to obtain indications: a) on the origin of the personal data; b) on the purposes and methods used to handle it; c) on the logic applied in the case of processing using electronic tools; d) on the identity of the handler, the handling officers and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) on the individuals and categories of individual to whom the personal data may be communicated or who may be made aware of it as designated representative within the Country, officers or processors;
3. to obtain: a) updates, modifications or, if interested in doing so, additions to the data; b) deletion, transformation into anonymous form or blocking of data that is being handled in violation of the law, including data for which conservation is not necessary for the purposes for which the data was originally collected or subsequently processed; c) certification that those to whom the data was communicated or supplied have been made aware of the operations under letters a) and b), also as regards the contents, except in cases where this is found to be impossible or involves the need for resources that is manifestly disproportionate to the right being safeguarded;
4. to oppose, either fully or in part: a) for legitimate reasons processing of the personal data relating to you, even if relevant to the purpose of the collection; b) processing of the personal data relating to you to send advertising material or for direct sales or to carry out market research or commercial notices, using automatic call services without the intervention of an operator by e-mail and/or by traditional marketing means using the telephone and/or the postal system. It must be noted that the interested party's right of opposition, as described in point b) above, for direct marketing purposes using automatic means also extends to traditional means, without prejudice to the right of the interested party to oppose this even only in part. Consequently, the interested party may decide to receive communications only via traditional methods, or only automatic communications, or neither of the two types of communication.
5. Where applicable, the interested party likewise has the rights indicated in articles 16-21 GDPR (Right of correction, right of cancellation, right to restrict processing, right to data portability, right of opposition), as well as the right to complain to the Ombudsman for personal data protection, with headquarters in Rome, Piazza di Monte Citorio 121, www.garanteprivacy.it.
1. to obtain confirmation of whether or not any personal data relating to yourself exists, even if not yet registered, and communication of that data in an intelligible form;
2. to obtain indications: a) on the origin of the personal data; b) on the purposes and methods used to handle it; c) on the logic applied in the case of processing using electronic tools; d) on the identity of the handler, the handling officers and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) on the individuals and categories of individual to whom the personal data may be communicated or who may be made aware of it as designated representative within the Country, officers or processors;
3. to obtain: a) updates, modifications or, if interested in doing so, additions to the data; b) deletion, transformation into anonymous form or blocking of data that is being handled in violation of the law, including data for which conservation is not necessary for the purposes for which the data was originally collected or subsequently processed; c) certification that those to whom the data was communicated or supplied have been made aware of the operations under letters a) and b), also as regards the contents, except in cases where this is found to be impossible or involves the need for resources that is manifestly disproportionate to the right being safeguarded;
4. to oppose, either fully or in part: a) for legitimate reasons processing of the personal data relating to you, even if relevant to the purpose of the collection; b) processing of the personal data relating to you to send advertising material or for direct sales or to carry out market research or commercial notices, using automatic call services without the intervention of an operator by e-mail and/or by traditional marketing means using the telephone and/or the postal system. It must be noted that the interested party's right of opposition, as described in point b) above, for direct marketing purposes using automatic means also extends to traditional means, without prejudice to the right of the interested party to oppose this even only in part. Consequently, the interested party may decide to receive communications only via traditional methods, or only automatic communications, or neither of the two types of communication.
5. Where applicable, the interested party likewise has the rights indicated in articles 16-21 GDPR (Right of correction, right of cancellation, right to restrict processing, right to data portability, right of opposition), as well as the right to complain to the Ombudsman for personal data protection, with headquarters in Rome, Piazza di Monte Citorio 121, www.garanteprivacy.it.
10. Exercise of rights
Rights may be exercised at any time, by sending:
- a registered letter with receipt to Falegnameria Adriatica s.r.l., Contrada San Mauro 5, 63077 Stella di Monsampolo del Tronto (AP);
- an e-mail to the address info@faonline.it
- a certified e-mail (PEC) to the address info@pec.faonline.it
11. Handler, data processor and operatives
The Data Handler is the company Falegnameria Adriatica s.r.l., with registered offices in Stella di Monsampolo del Tronto (AP), Contrada San Mauro 5.
The updated list of officers and operatives responsible for data processing is kept at the Handler's operational headquarters.
The updated list of officers and operatives responsible for data processing is kept at the Handler's operational headquarters.