INFORMATION FOR THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH EU REGULATION N 679/2016
Data controller
CHEMEIA s.r.l.
Via Aldo Moro, snc25017 Lonato del Garda (BS)
Phone: +39 030 9133155
Mail: chemeia@chemeia.it
Purpose of processing:
Your personal data, freely disclosed and acquired by reason of the holder’s activity, will be processed lawfully and fairly for the following purposes:
– contractual; – accounting and taxation; – informational, business and marketing.
The data processed (which may be both common and identifying in nature) are up-to-date, relevant, complete and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.
Method of treatment:
The data will be processed, in accordance with the necessary security and confidentiality, through the following methods: collection of data from the data subject, collected and recorded for specific, explicit and legitimate purposes and used in further processing operations in terms compatible with these purposes, processing carried out with the help of manual, electronic tools.
Legal basis for processing:
The legal basis for the processing of your personal data is based on the performance of contractual functions for accounting, tax, informational and commercial purposes.
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in the processing of data is given by having to respect and honor the contractual obligations signed between the parties and develop its social purposes. The lawfulness of processing is based on the manifestly expressed consent of the data subject, documented in written or manifest form.
Mandatory or optional nature of providing data and consequences of refusal to respond
The nature of your provision of data is mandatory in order for the data controller to provide the contractual services required for contractual, accounting and tax purposes. In case of refusal, the Holder will not be able to fulfill contractual obligations.
The nature of provision for informational, commercial and marketing purposes is optional.
Disclosure of data to third parties
Your personal data will be processed by the Data Controller, any Data Processors appointed by him/her, and any strictly authorized data processors. Your data may be communicated as a result of inspections or audits (if requested), to all inspection bodies in charge of audits and controls inherent to the regularity of legal compliance.
Your data may also be communicated to external professional companies/studies that provide labor assistance and consulting or to the data controller’s collaborators in accounting, administrative, fiscal, tax and financial matters, to public administrations for the performance of institutional functions within the limits established by law or regulations. Your personal data are not subject to dissemination.
Storage times
The Holder will process personal data for as long as necessary to fulfill contractual, accounting, tax purposes.
Your personal identifying information will be processed until you revoke it.
Existence of an automated decision-making process
There is no automated decision making.
Security
The Owner has taken appropriate security measures to protect your data against the risk of loss, misuse or alteration.
Intention of the Personal Data Controller
The Data Controller will not transfer your personal data to a third country or international organization.
Rights of the data subject:
The data subject has the right to:
obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet registered, and their communication in intelligible form;
obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet registered, and their communication in intelligible form;
Getting the indication:
Of the origin of personal data;
Of the purposes and methods of processing;
Of the logic applied in the case of processing carried out with the aid of electronic instruments;
Of the identification details of the data controller, the data processor and the designated representative under Art. 5, paragraph 2, Privacy Code and Art. 3, paragraph 1, GDPR;
Of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, as managers or appointees;
obtain:
updating, rectification, or, when there is interest, integration of data;
the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
A statement that the operations referred to in paras. (a) and (b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this is found to be impossible or involves the use of means manifestly disproportionate to the right protected;
Oppose in whole or in part:
for legitimate reasons to the processing of personal data concerning him/her, even if relevant to the purpose of collection;
to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
In particular, the data subject may at any time request from the Data Controller access to personal data and the rectification or erasure of personal data or the restriction of processing concerning him or her or object to its processing, as well as the right to data portability. The data subject has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation and has the right to lodge a complaint with a supervisory authority.
Ways of exercising rights
The interested party may, at any time, exercise the rights reserved to him, enshrined in Art. 15 of EU Regulation 2016/679 – Right of access to personal data.
The exercise of rights can be exercised by writing to the e-mail address: chemeia@chemeia.it
The full text of EU Regulation 2016/679 is available at www.garanteprivacy.it.
