Pursuant to art. 13 of EU Regulation 2016/679 (GDPR), in accordance with the principle of transparency, the following information is provided in order to make the Customer aware of the characteristics and methods of data processing.
a) Identity and contact details of the Data Controller and the DPO
We inform you that your data, as a customer, will be processed by the company Ergolines lab s.r.l. S.U. based in Area Science Park, Bldg. R3, Padriciano, 99 34149 Trieste, Italy e-mail: ergolines@legalmail.it Tel. +39 040 375 5422 e-mail: infosteel@ergolines.it.
The DPO appointed by the Owner is the company Resolve Srl SB based in Viale dell’INDUSTRIA 21 – 35129 PADOVA. You can contact the DPO by sending an e-mail to the address: dpo@ergongroup.it
b) Purpose of the processing, legal basis, and legitimate interest
The processing of personal data requested to the data subject is made for the following purposes:
-
-
- to execute obligations deriving from a contract to which the Customer is a party;
- to fulfil, before the execution of a contract, specific customer’s requests;
- to administrate suppliers / customers, contracts, orders, arrivals and invoices;
- to fulfil legal obligations in terms of civil, fiscal and accounting laws;
- to manage any arising of contractual liability disputes.
-
The legal basis of the processing for the purposes referred to in points 1,2 and 3, is its will to finalize the contract and the processing is necessary for the execution of a contract of which the Customer is a party and for the execution of pre-contractual measures adopted at the request of the same (Article 6 No. 1 letter B – GDPR).
The processing for the purposes referred to in points 4 and 5 are necessary for the pursuit of the legitimate interest of the data controller to comply with the contractual obligations signed between the parties as well as for the need to fulfil legal obligations (Article 6 No. 1 letter c and f -GDPR).
Any refusal to provide some data may make it impossible to execute the contract of which the customer is a party.
c) Optional processing of data for promotional and commercial purposes
With the explicit consent of the Customer, the data of the same may also be processed by Ergolines lab s.r.l. S.U. for purposes of commercial promotion of services and products also by sending newsletters.
The legal basis of this processing is the consent expressed with the signature (Article 6 No. 1 letter a – GDPR).
d) Recipients or possible recipients of the personal data
The data are processed within the institution by authorised data processing officers under the responsibility of the Data Controller for the purposes set out above.
The data may also be disclosed to third parties who provide instrumental services such as freight transport companies, legal, tax and commercial consultancy companies, IT technical services, communication and e-mail services, commercial agents.
Furthermore, the updated list of any external Data Processors is available at the headquarters of the Data Controller.
e) Data transfer to a third country
The Data Controller will not transfer the data to a third country or to an international organization.
f) Data storage period
The data are stored in paper and / or electronic form for the period necessary to achieve the purposes for which they were collected and in compliance with legal obligations. The data used for the purposes referred to in point c) will be subject to review after 24 months from the date of registration in order to assess the need to continue with the processing or to proceed with their cancellation.
g) Rights on data
It should be noted that the interested party, where the conditions are met, can exercise the following rights:
-
-
- to access their personal data; right to rectify or cancel this data or limit the processing that concerns it;
- to object to the processing and the right to withdraw consent for the processing purposes that require it, without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
- right to data portability (law applicable only to data in electronic format), as regulated by article 20 of the GDPR.
-
With regard to the methods of exercising the aforementioned rights, the interested party may submit a specific request by means of a written communication to the email address infosteel@ergolines.it.
h) Complaint
If you believe that the processing of your personal data is in violation of the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the Data Protection Authority (Privacy Guarantor).
i) Data communication
We inform you that the communication of personal data for the purposes referred to in point b) is a legal and / or contractual obligation or a necessary requirement for the conclusion of a contract.