Information Notice Pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679
We inform you that, for the purpose of establishing and executing ongoing contractual relationships with you, our organization is in possession of your data, acquired verbally, directly, or through third parties, and classified as personal data under European Regulation 2016/679 (GDPR). According to this regulation, data processing will be carried out based on principles of fairness, lawfulness, transparency, and protection of your privacy and rights. Pursuant to Article 13 of GDPR 2016/679, we provide the following information:
Nature of the Data Processed:
We process your personal, tax, and economic data necessary for the performance of ongoing or future contractual relationships with your company, as well as for effective management of business relationships.
The data is processed without your express consent (Art. 24 letters a, b, c of the Privacy Code and Art. 6 letters b, e of the GDPR) solely and exclusively for the following Service Purposes: to fulfill pre-contractual, contractual, and tax obligations arising from current relationships with you; to comply with obligations imposed by law, regulation, EU legislation, or an order from an Authority; to exercise the rights of the Data Controller, such as the right to legal defense.
We do not possess any data that can be classified as sensitive or judicial (Arts. 9 and 10 of the GDPR).
Purpose and Duration of the Processing:
Your data will be processed for the entire duration of the contractual relationship and thereafter, to comply with contractual and legal obligations, including fiscal ones, and for effective financial and commercial relationship management, as provided for in Art. 4 of the Privacy Code and Art. 4 no. 2) of the GDPR.
The Data Controller will process personal data for the time necessary to fulfill the above purposes and, in any case, for no longer than 10 years after the termination of the relationship for Service Purposes.
Methods of Processing:
Processing will be carried out using manual and/or electronic and telematic tools with organizational and processing logic strictly related to the purposes stated above, and in any case, in such a way as to ensure the security, integrity, and confidentiality of the data, in accordance with the organizational, physical, and logical measures provided by current regulations.
Obligation or Option to Provide Data:
With regard to data we are required to know in order to comply with legal obligations, failure on your part to provide such data makes it impossible for us to establish or continue the relationship, to the extent that such data is necessary for its execution.
Access to Your Data:
The following categories of individuals may have access to your data, as data processors or persons in charge of processing, appointed by our company, the data controller: managers, directors, auditors; internal secretarial staff; personnel in charge of accounting and invoicing; personnel responsible for marketing services; agents and representatives.
Data Communication and Disclosure:
Your data will not be disclosed to unspecified parties by making it available or for consultation. However, your data may be communicated, to the extent of their respective and specific responsibilities, to entities and generally to any public or private subject to whom communication is mandatory (or permitted by law or secondary or EU legislation) or necessary. Your data may also be communicated to our consultants, within the limits necessary to perform their tasks within our organization, and under a confidentiality and data security agreement.
Your Rights:
As the data subject, you have the rights set forth in Article 7 of the Privacy Code and Article 15 of the GDPR, specifically the rights to:
I. obtain confirmation as to whether or not personal data concerning you exists, even if not yet recorded, and receive intelligible communication of such data;
II. obtain information on:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied in case of processing using electronic tools;
d) the identity of the data controller, data processors, and designated representative as per Art. 5, para. 2 of the Privacy Code and Art. 3, para. 1 of the GDPR;
e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, as data processors or persons in charge;
III. obtain:
a) the updating, rectification, or, where interested, integration of the data;
b) the deletion, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed;
c) certification that the operations described in points a) and b) have been made known, including their content, to those to whom the data was communicated or disclosed, except where this proves impossible or requires means clearly disproportionate to the right protected;
IV. object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning you, even if relevant to the purpose of collection;
b) to the processing of personal data concerning you for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication via automated calling systems without operator intervention, by email and/or traditional marketing methods via telephone and/or postal mail.
Where applicable, you also have the rights provided by Articles 16–21 of the GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority. At any time, you may obtain confirmation of the existence or otherwise of personal data concerning you and be informed of the purposes on which the processing is based. You may also request the deletion, anonymization, or blocking of data processed unlawfully, as well as the updating, rectification, or, if you have an interest, integration of the data. You may also object, for legitimate reasons, to the processing of your data.
We kindly ask you to promptly inform the company's relevant office of any changes to your personal data in order to comply with Art. 11 letter (c) of the aforementioned regulation, which requires that collected data be accurate and therefore updated.
Data Controller and Processor:
The Data Controller is TECNOMEC s.r.l., with registered office at Via Saragat, 1 – 20834 Nova Milanese (MB), Italy.
The Data Processor, to whom you may refer to exercise your rights and/or for any clarifications regarding personal data protection, can be contacted at: info@tecnomec.tech.