Pursuant to art. 13 of EU Regulation 2016/679 (GDPR), in accordance with the principle of transparency, the following information is provided in order to make the Customer aware of the characteristics and methods of data processing.
a) Identity and contact details of the Data Controller and the DPO
We inform you that your data, as a customer, will be processed by the company Ergolines lab s.r.l. S.U. based in Area Science Park, Bldg. R3, Padriciano, 99 34149 Trieste, Italy.
E-mail: ergolines@legalmail.it Tel. +39 040 375 5422 E-mail: infosteel@ergolines.it
The DPO appointed by the Owner is the company Resolve Srl SB based in Viale dell’INDUSTRIA 21 – 35129 PADOVA. You can contact the DPO by sending an e-mail to the address: dpo@ergongroup.it
b) Purpose of the processing, legal basis, and legitimate interest
The processing of personal data requested to the data subject is made for the following purposes:
-
-
- to execute obligations deriving from a contract to which the Customer is a party;
- to fulfil, before the execution of a contract, specific customer’s requests;
- to administrate suppliers / customers, contracts, orders, arrivals and invoices;
- to fulfil legal obligations in terms of civil, fiscal and accounting laws;
- to manage any arising of contractual liability disputes;
- to promote by mail and/or paper mail products or services similar to those already purchased by the customer (soft-spam).
-
The legal basis of the processing for the purposes referred to in points 1,2 and 3, is its will to finalize the contract and the processing is necessary for the execution of a contract of which the Customer is a party and for the execution of pre-contractual measures adopted at the request of the same (Article 6 No. 1 letter B – GDPR).
The processing for the purposes referred to in points 4 and 5 is necessary for the pursuit of the legitimate interest of the data controller to comply with the contractual obligations signed between the parties as well as for the need to fulfil legal obligations (Article 6 No. 1 letter c and f -GDPR).
The provision of data for the above-mentioned purposes is mandatory and the refusal may make it impossible to execute the contract of which the customer is a party.
The legal basis of the processing for the purpose referred to in paragraph 6 is the Controller’s interest in using the Customer’s e-mail address to send a limited number of commercial communications that may be appropriate and in line with the products or services previously purchased (Art. 6. no. 1 lett. f – GDPR). The provision of personal data for this purpose is optional and the Customer always has the right to object in the manner provided in paragraph g).
c) Optional processing of data for promotional and commercial purposes
With the explicit consent of the Customer, the data of the same may also be processed by Ergolines lab s.r.l. S.U. for purposes of commercial promotion of services and products also by sending newsletters.
The legal basis of this processing is the consent expressed with the signature (Article 6 No. 1 letter a – GDPR).
d) Recipients or possible recipients of the personal data
The data are processed within the institution by authorised data processing officers under the responsibility of the Data Controller for the purposes set out above.
The data may also be disclosed to third parties who provide instrumental services such as freight transport companies, legal, tax and commercial consultancy companies, IT technical services, communication and e-mail services, commercial agents.
Furthermore, the updated list of any external Data Processors is available at the headquarters of the Data Controller.
e) Place of processing and data transfer to a third country
The data is processed and stored at the Data Controller’s premises as well as on the Controller’s servers located in the EU.
The Controller ensures that when using suppliers established outside the EEA, the processing of personal data by these parties is carried out in accordance with applicable law. Transfers are carried out in compliance with appropriate safeguards, such as adequacy decisions, standard contractual clauses approved by the European Commission or other safeguards provided for in the GDPR.
f) Data storage period
The data are stored in paper and / or electronic form for the period necessary to achieve the purposes for which they were collected and in compliance with legal obligations. The data used for the purposes referred to in points b.6) and c) will be processed until consent is withdrawn or opposition to processing is opposed.
g) Rights on data
It should be noted that the interested party, where the conditions are met, can exercise the following rights:
-
-
- to access their personal data; right to rectify or cancel this data or limit the processing that concerns it;
- to object to the processing and the right to withdraw consent for the processing purposes that require it, without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
- right to data portability (law applicable only to data in electronic format), as regulated by article 20 of the GDPR.
-
With regard to the methods of exercising the aforementioned rights, the interested party may submit a specific request by means of a written communication to the email address infosteel@ergolines.it
h) Complaint
If you believe that the processing of your personal data is in violation of the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the Data Protection Authority (Privacy Guarantor).