INFORMATIVE REPORT FOR CUSTOMERS
IN ACCORDANCE WITH EU GENERAL DATA PROTECTION REGULATION (GDPR) 2016/679 OF 27 APRIL 2016
on the protection of natural persons with regard to the processing of personal data
EU Regulation 2016/679, which came into effect on 25 May 2018, in governing the right to privacy has established that the collection and processing of any personal data must be preceded by an informative report and, when needed, by the free consent expressed by the data subject whom the data refer to.
Hence, we hereby wish to inform you that, in accordance with art. 7 of the aforementioned regulation, the personal data collected from this form or from a business card, will be processed in compliance with the following principles.
Principles which can be applied to the processing of personal data (art. 5 GDPR): the data will be processed in a lawful, fair and transparent manner, they will be collected for specific, explicit and legitimate purposes, they will be adequate, relevant and limited to what is necessary, they will be exact and updated, if needed; they will be stored for a limited period of time and necessary for the purposes for which they are processed, and they will be processed in a manner that ensures appropriate security.
Personal data processing means, in accordance with art. 4, par. 2, among other things and in particular, their collection, recording, organisation, storage, consultation, alteration, disclosure or dissemination, including their erasure and destruction.
The Data Controller is the Company General Vapeur Srl, which is part of the Menikini Group (hereinafter referred to as GV), with registered office in Strada per Castelletto, 19-21 20080 Albairate (MI), acting through their legal representative.
DATA PROTECTION OFFICER (DPO)
The Data Protection Officer has not been appointed yet, as it is not needed.
PURPOSES OF THE PROCESSING
The personal data collected may be processed by GV or by other recipients listed below in order to:
a) Manage supplier-customer relations, within the existing contractual relation, as well as for the purposes related, from warranty management and assistance to the necessary accounting and fiscal purposes between the parties involved;
b) Send technical and marketing communications for information purposes and for the mutual interest of the parties involved;
c) Allow GV to create internal and provisional statistics in order to optimise the Group's business activities;
d) Allow GV to carry out their own business activities.
MANDATORY PROVISION OF DATA
The provision of data is mandatory and not providing them may undermine the effectiveness of the existing contract or the achievement of the intended contractual purposes.
METHODS OF DATA PROCESSING
In relation to the stated purposes, your data are subject to manual, automated and computerised processing, for reasons that are closely related to the purposes themselves, and, in any case, in order to ensure data security and confidentiality. Please note that your data will not be subject to automated decision-making processing, including profiling.
The data collected will be provided to companies that are part of the group, associated companies or third parties, as well as public and private bodies, always for the same purposes or for potential legal obligations related to the same purposes. The data will not be communicated to third parties which are not part of the group for purposes other than those indicated, and in no event does or will GV "disclose" the data provided for other purposes.
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
The data we process may be subject to transfer or storage on a database − also belonging to a third party − always regarding the aforementioned purposes. In any case, they will not leave the European Union.
SPECIAL CATEGORIES OF PERSONAL DATA
In accordance with articles 26 and 27 of Italian Legislative Decree 196/2003 and pursuant to articles 9 and 10 of EU Regulation nr. 2016/679, we wish to inform you that we will not collect and, therefore, process such data which can be defined as "special categories of personal data", i.e. data disclosing " racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation".
DURATION OF DATA RETENTION.
For the stated purposes, the data will be stored for accounting and fiscal purposes, and as a legal obligation for a maximum of 10+1 years from the end of the contractual relation.
RIGHTS OF THE DATA SUBJECT
Articles 7 c. 3) and articles 15 to 21 of the Regulation set out the rights of the data subject, i.e. access, rectification, erasure, restriction, communication, portability, right to object, withdrawal of consent and right to lodge a complaint with the Data Protection Authority.
MODALITIES FOR THE EXERCISE OF THE RIGHTS OF THE DATA SUBJECT