INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA
in accordance with Regulation (EU) 679/2016 and Article 13 of Legislative Decree 196/2003
TREATMENT OF PERSONAL DATA RELATING TO CUSTOMERS AND SUPPLIERS
OROS Srl (hereinafter the “Company” or the “Holder”), with registered office in Camposampiero (PD) – Via A. Tentori, 62 – 35012 – Italy and operational headquarters in FELTRE (BL) – Via Camp Lonc 5 / A – 32032 – Italy, VAT NUMBER 03494170289, represented by Mr. Luca De Boni, Legal Representative, as Data Controller, wishes to inform you that in accordance with art. 13 of the European Regulation 679/2016 (GDPR) and article 13 of the Decree 196 / 2003 is required to provide determinate information regarding the methods and purposes of the processing of your personal data which the Data Controller may obtain. According to the law, this treatment will be based on principles of correctness, lawfulness and transparency and protection of your privacy and your rights.
1.Typology and source of the processed data
The Company is the owner of the processing of personal data communicated by the Interested part and necessary for the business collaboration: economic, commercial, financial and / or insurance activities, etc. Personal data may be requested directly from the interested part or at the Company’s headquarters for concluding the contract and for receiving / providing information on available products.
2.Finality of the treatment
Data processing is carried out by the Company for processing its activities:
a) for operational, functional, managerial, commercial, administrative and accounting needs, for the processing and storage of personal data;
b) for any marketing purposes entirely optional (advertising and / or promotional campaigns etc.) your data may be communicated to external specialized companies, to achieve the conferred target and to start sales initiatives through interviews, letters, telephone or through automated communication systems such as sending e-mail, fax, SMS, MMS, etc.
3.Modality of the Treatment
The data will be processed by the Company at its own offices, using IT, telematic and manual tools to store, manage and transmit the data, according to the principles of correctness, lawfulness and transparency provided by the applicable law on the protection of personal data, and protecting the privacy of the interested parts through technical and organizational security measures to ensure an adequate level of security. In carrying out the processing activities, the Company commits to:
• ensure the accuracy and updating of the processed data, receive quickly adjustments and/or integrations requested by the interested parts;
• notify to the interested parts, in times and in records provided by the regulations in force, of any violation of personal data;
• guarantee the compliance of processing operations with the applicable arrangements.
The Company commits to reduce the use of personal data to a minimum, to avoid its treatment if the objectives pursued can be achieved through appropriate procedures that allow the individual to be identified only in case of need.
4.Conservation of data
The data supplied by the interested parts will be stored and processed for a period of time not exceeding the achievement of the purposes for which they were collected, or to comply with specific regulatory and / or contractual obligations.
5. Communication, distribution and transfer of data
The Data will be processed, within the limits of what is necessary, by authorized personnel, properly teached and trained, by the Data Controller and by third parties who provide services to the Data Controller and process data for treatment for the fulfillment of legal obligations. More generally, in carrying out its ordinary business activities, the data may be disclosed to parties that perform control, auditing and certification of the activities requested by the owner, consultants and freelancers in the context of tax assistance services, judicial and in in the case of corporate transactions for which it is necessary to assess the corporate assets, bodies and public administrations, as well as to subjects legitimated by law to receive such information, Italian and foreign judicial authorities and other public authorities, for the purposes connected with the fulfillment of legal obligations , or for the performance of obligations assumed and arising from the contractual relationship, including for the need for defense in court. The data may be transferred to Member States of the European Union and / or to third countries not belonging to the European Union.
6. Obligation to provide personal data and consequences in case of missed comunication
The provision of data for the purposes referred to in point 2, lett. a), although not mandatory, it is essential for the management of the commercial relationship. Any refusal, even partial, to provide such data could make it impossible, in whole or in part, to provide the requested service and to execute the request by the interested party. The conferment of data is optional for all the purposes indicated in point 2, lett. b), with the consequence that any refusal to provide your data will involve in the simple impossibility of informing you about the products and / or services offered and about any promotional sales initiatives.
7. What are the rights of the interested party
The interested parts may exercise, in relation to the processing of the data described, the rights provided by the GDPR (articles 15-21), including:
• receive confirmation of the existence of data and access their content (access rights);
• update, modify and / or correct the data (right of rectification);
• request the cancellation or limitation of data processed in violation of the law including those
of which conservation is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to be forgotten and the right to limitation);
• oppose the treatment (right of opposition);
• propose a complaint to the Supervisory Authority (Guarantor for the protection of personal data www.garanteprivacy.it) in case of violation of the regulations regarding the protection of personal data;
• receive an electronic copy of the data concerning it as Interested, when such data have been returned in the context of the contract and request that such data be transmitted to another data controller (right to data portability).
To exercise these rights and / or to have more information on the processing of personal data, the interested party may contact the Data Controller by sending a communication to:
OROS Srl
Via Camp Lonc, 5/A
32032 – Feltre (BL) – Italia
E-mail: amministrazione@oros.it
Telefono 0439.878026
When contacting us, you must ensure that you include your name, email address / postal address and / or telephone number (s) to make sure that your request can be handled correctly.