INFORMATION ON PROCESSING OF PERSONAL DATA

art. 13 of EU Regulation 2016/679

The EU Regulation 2016/679 sets out rules on the protection of individuals with regard to the processing of personal data and the free circulation of such data. In compliance with the transparency principle (art. 5), Instalmec S.r.l., as data controller, provides you with the following information, according to art. 13 of the Regulation:

Contact details of the data controller

Modes of treatment

The personal data provided by you (personal data, contact details, bank and fiscal data) will be handled, by paper, telematic and computer tools, in the respect of the rules on the protection of personal data, and with technical and organizational measures so as to guarantee the corresponding integrity, confidentiality and availability.

Purpose of the processing and legal basis

Your personal data will be handled for the following purposes:

• 1) client data: reply to the requests of information, quotations and managing of orders;
• 2) supplier’s data: request of information, quotations, issue of purchase orders, managing subcontracting contracts;
• 3) fulfil the consequent fiscal, accounting and administrative obligations;
• 4) fulfil the obligations provided by law, European regulations or measures of the judicial authority;
• 5) exercise or defend a right in court.

The judicial basis for the finalities provided for at point 1, 2) is the execution of the contract to which the person concerned is a party, or pre-contract measures adopted upon request of the interested party. The communication of the data for the abovementioned purposes is a necessary requirement for the execution of the agreement, a failure to confer the data will result in the inability of the data controller to satisfy Your requests and offer our services.

The judicial basis for the finalities provided for at point 5) is the legitimate interest of the data controller or third parties, provided that the interests or rights and fundamental freedoms of the interested person do not prevail.

Categories of addressees

Your data will be treated by those authorised for the processing and communicated to the following categories of users:

• credit institutes for the management of takings and payments, debt recovery companies;
• professionals, consultants, suppliers (e.g. email provider, administrators of the system, website managers);
• competent authorities for fulfilment of legal obligations.

Please contact the data controller to request the list of the categories responsible for data processing.

Transfers to a third country / international organisation

Your data will not be communicated to third countries / international organisations, unless it is specifically provided for by the national law or the European Union.

Data retention

Your personal data will be stored for the time necessary to fulfil the purposes for which it was collected. Hereafter follow the storage timing for the various purposes listed above:

• Data referred to in points 1), 2) and 3) will be kept for the duration of the contractual relation and also afterwards for the fulfilment of all legal requirements related to fiscal, accounting and administrative needs.
• Data referred to in points 4) and 5) will be kept for a period of time determined by the legal obligation or for a time reasonably necessary to enforce or defend a right under Italian and European regulations.

Rights of the person concerned

As person concerned, you may exercise your rights (art. 15-22 of the EU Regulation 2016/679) at any time by sending a notice to the abovementioned contact details.

In particular, you may ask:

• to access your personal data;
• their modification;
• their cancellation;
• the limitation of their treatment;
• the right to oppose to their processing;
• the right to data portability; that is the right to receive the personal data provided by you, in a structured format, of common use, readable on an automatic device. This right can be exercised if the processing is based on consent or contract and carried out by automated means.

Complaint to the supervisory authority

If the conditions are met, you have the right to complain to the data protection guarantor as supervisory authority. In order to know the complain modality you can visit the following link: http://www.garanteprivacy.it/web/guest/home.

Automated decisional process

The data controller does not use automated decisional processes, included the profiling.