INFORMATION PROVIDED PURSUANT TO ART. 13-14 OF Reg. 2016/679 (GENERAL DATA PROTECTION REGULATION)
All data will be processed in accordance with the principles of lawfulness, correctness and confidentiality provided for, will be collected only for the intended purposes, and will be adequate, relevant and limited to the purposes for which they are processed.
The data controller
The data controller is the company Chimar s.r.l, with its registered office in Crema, Via Pesadori 5, which can be contacted to exercise the rights referred to in Art. 12 and/or for any clarification on the protection of personal data, sending an e-mail to the following: firstname.lastname@example.org.
Description and type of data processed
Pursuant to article 13 of GDPR 2016/679, we inform you that the requested data belong to the category of personal data, specifically:
• name, last name, corporate name, telephone, email address, billing address (if different from shipping address), shipping address, tax code e/o VAT NUMBER, IBAN code.
These data must be provided at the time of the request for quotation, purchase and/or sale and related invoicing.
Purpose of personal data processing
The personal data provided will be subject to, in connection with legal, tax, insurance and business obligations:
- Processing for the collection and payment of invoices;
- Processing for the purposes of administrative, fiscal, accounting and legal obligations.
We inform you that, in view of the purposes of data processing mentioned above, the submission of data is compulsory and therefore, failure to provide this data or partial or incorrect conferment may result in the impossibility of providing the requested services.
Where the person providing the data is under 16 years of age, such processing is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility, for whom the identification data and copies of identification documents are also acquired.
Consent to personal data treatment
Express consent is not required for the above-mentioned processed data, as referred to in art. 6 letter b) of Reg. 2016/679 because “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”. It is understood that consent to the processing of personal data connected to the need to propose or send products, services, information/newsletter must be expressed by clicking the appropriate box on the website during registration, purchase requests, newsletter subscription.
Methods of processing
The data will be processed using manual and/or computerised and telematic tools with organisational and processing logics strictly related to the purposes and in any case in such a way as to guarantee the security, integrity and confidentiality of the data in compliance with the organisational, physical and logical measures provided for under existing rules. No automated data processing is envisaged.
Transfer of processed data
We inform you that the data of the person concerned and the information related to their activities are not transferred to third parties.
Duration of treatment
Personal data shall be processed for the entire duration of the contractual relationship or mandate and, in the event of revocation and/or other termination of the relationship, shall be kept within the prescriptive terms indicated in Article 2220 of the Civil Code.
Rights of data subjects
You have the right to be informed in a transparent manner about how we process and protect your data, the processing of personal data will be carried out in accordance with Art. 15 of EU Reg 2916/679, in particular, data subjects will be able to obtain confirmation as to whether or not data relating to them is being processed and they will be able to assert their rights under the law.
The subjects may, at any time, exercise their rights:
- To access personal data;
- to obtain the rectification or erasure of their personal data or the restriction of the processing of their personal data so far as this does not conflict with other legal provisions;
- to object to the processing of personal data;
- to object to the portability of data;
- to withdraw consent where this does not conflict with other legal provisions: withdrawal of consent shall not affect the lawfulness of processing based on consent given before withdrawal;
- to file a complaint with the supervisory authority (Privacy Authority).
You may exercise your rights by sending a request by email to email@example.com.