INFORMATION ON PERSONAL DATA PROCESSING – CUSTOMERS/SUPPLIERS
In accordance with and by effects of Article 13 of the EU Regulation 2016/679
(General Regulation on the protection of personal data)
Dear Customer/Supplier, in accordance with Article 13 of the EU Regulation 2016/679, in the following “Regulation” and in relation to personal data that concerns you, our company, in the capacity of data controller, according to the existing contracts wishes to provide you the following information.
1. Personal details of the data controller
The data controller is MECLUBE s.r.l. with registered and operative office in strada Pavesa, 13, 46023 GONZAGA (MN) - fraz. Bondeno. Contact data are the following: Telephone: (+39) 0376 595006 Fax. (+39) 0376 54144 E-mail: amministrazione@meclube.com. It should be noted that, in consideration of the fact that the data controller is located inside the European Union, the appointment of the representative of the data collector is not necessary.
2. Contact data of the data protection’s responsible
Upon verification of the applicability of the requirements of Article 37 of the Regulation, the nomination of the data protection’s responsible has been excluded, as the company does not fall within the scope of any of the conditions.
3. Purpose of data processing and juridical base
The treatment is aimed to the completion of the following activities: - Fulfilment of legal or contractual obligations, completion of uses and habits on the commercial activity of the company; - Accounting and administrative elaborations; - Managing of legal obligations and proceedings; - Obligations connected to the current legislation for health and safety in the workplace; - Obligations related to the application of the Internal Managing System of the company; - Delivery of communications on promotions and offers. The treatment’s juridical base is composed by the following elements: contract on the purchase/supply of goods and services, the Legislative Decree 81/2008 and subsequent amendments for what concerns the current legislation for matters of health and safety in the workplace and the normative related to the application of the Civil Law and Criminal Code. The treatment is carried out by operations or operational complexes, specifically: collection, registration, organization, conservation, elaboration, modification, comparison, interconnection; selection, extraction, consultation, communication, block, cancellation and destruction; it is carried out with or without the use of electronics; it is performed by the organization of the Holder and from trusted companies, of which the list is available at the Holder, they are our direct collaborators and they operate in complete autonomy as distinct external holders of the personal data treatment, obliged to perform independently according to a contract with our company following the normative for the protection of personal data. Personal data are not subject to disclosure.
4. Legitimate interests of the Data controller
Treatments under Article 6, paragraph 1, letter f), are to be carried out with the sole purpose of meeting the legitimate interests of the Holder of the treatment.
5. Receivers of personal data
Personal data gathered can be communicated to: - all subjects which faculty of access to said data is recognized by regulatory measures; - to our collaborators in their respective fields; - to all those physical people and/or juridical, public and/or private when the communication proves to be necessary or functional to the course of our activity, following the procedures and objectives previously listed.
6. Transfer of personal data abroad
The data controller does not intend to carry out the transfer of personal data towards third countries or international organizations outside of the European Union.
7. Storage time of personal data
The parameter used is the current limit of storage time of personal data for fiscal purposes (10 years).
8. Rights of the data subject
The data subject has the right (Heading III Rights of the Subject) to ask the Holder of the treatment the access to the personal data for their correction or cancellation, including the limitation or opposition to their treatment and their transferability. To exert said rights it is necessary to refer to the contact data previously mentioned.
9. Withdrawal of consent
The subject has the right to withdraw the consent expressed under Article 6, paragraph 1, letter a) and of Article 9, paragraph 2, letter a).
10. Rights of complaint to the Supervisory authority
The subject has the right to express a complaint to the Supervisory authority, reachable at the following contacts: Guarantee for the protection of personal data – Piazza di Monte Citorio n. 121 00186 ROMA Fax: (+39) 06.69677.3785 Phone: (+39) 06.696771 E-mail garante@gpdp.it Certified mail: protocollo@pec.gpdp.it . References and procedures to exert the right of complaint are shown in the Guarantee of Privacy’s website http://www.garanteprivacy.it.
11. Communication of personal data
The communication and the subsequent treatment of personal data is the necessary condition of the existing contract with our company. The absence of communication results in the non-applicability of the contract.
12. Automated decisional process
The personal data collected will not be subjected to automated decisional processes, including the profiling.