Privacy statement for customers and suppliers
In relation to the processing of the personal data provided, we inform you that:
DATA CONTROLLER
The Data Controller is Doteco S.p.A., with registered office in Mirandola (MO), Fraz. San Martino Spino, Via E. Mattei n. 30, PEC: doteco-spa@pec.it (hereinafter also referred to as the “Data Controller“).
TYPE OF DATA PROCESSED, PURPOSES AND LEGAL BASIS OF PROCESSING
The following personal data will be collected and processed: personal data of a common nature (name, surname, personal data, position within the company, contact data) referring to: customer and supplier companies/bodies and representatives/employees/collaborators/sub-contractors of customers/suppliers, eventually communicated by these, for: a) pre-contractual purposes and the execution of contractual relations; b) administrative/accounting/fiscal and legal obligations relating to the invoicing and the management of contractual relations.
Hence, the legal basis of the data processing is: fulfilment of contractual obligations for the purposes referred to in letter a); legal obligations, for the purposes referred to in letter b).
COMMUNICATION OF DATA TO THIRD PARTIES – RECIPIENTS OF THE DATA
The Data Controller may communicate the processed data for the above-mentioned purposes to: i) persons in charge of data processing within the Data Controller; ii) external persons belonging to the following categories: external consultants and their appointees/service provider companies (transport and/or shipping companies)/banks, insurance companies and credit institutions/external companies that collaborate on marketing activities/ control bodies and organisations (customs); iii) other companies in PiovanGroup.
TRANSFER OF DATA TO THIRD COUNTRIES
The processed data may be transferred by the Data Controller to Third Countries. In this case, the transfer of data takes place in compliance with the regulations and guarantees applicable from time to time by the country of reference in accordance with Article 44 and subsequent of EU Reg. 2016/679.
PROCESSING METHODS, PERIOD AND DATA RETENTION CRITERIA
Data will be processed in printed or digital format. Data will be processed by the Data Controller for the period required for the execution of the afore-mentioned purposes, and at the end of these for a further period prescribed by law relating to the storage of contracts and administrative data and/or for defence in legal proceedings (ten years after the last use and/or event interrupting prescription).
PROVISION OF DATA
The provision of data is mandatory for the execution of contractual relations and for legal purposes. Failure to provide such data will make it impossible to fulfil the purposes listed above.
RIGHTS OF THE INTERESTED PARTY, REVOCATION OF CONSENT AND COMPLAINT TO THE CONTROL AUTHORITY
The data subject has the right at any time to request access to his/her personal data, to request rectification, deletion, limitation of the same, to oppose the processing and withdraw consent and to exercise the right to data portability whenever possible. In any case, the data subject has the right to revoke, at any time, any consent given to data processing, without prejudice to the lawfulness of processing based on the consent given before revocation.
In case of alleged violation, the data subject, having recourse to the conditions, also has the right to propose a complaint to a Data Supervision Authority in the EU member state where he/she resides habitually or in the EU state where he/she works or where the alleged violation occurred.
PROFILING AND AUTOMATED DECISION-MAKING PROCESSES
The processing is not carried out by automated decision-making processes (i.e. profiling).
CONTACTS AND REQUESTS
To know the complete list of external parties to whom the data are communicated, to have information regarding the transfer of data to non-EU countries, the mechanisms and protection of data transfer pursuant to Article 44 and subsequent of GDPR, to exercise the revocation of any consent given or to exercise your rights (access, rectification, cancellation, limitation, opposition, portability) please send a request to the following email: privacy.doteco@doteco.com.
Notice updated on 23/09/2024