Information pursuant to and for the purposes of art. 13, of EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data, as well as on the free movement of such data and which repeals Directive 95/46 / EC
We wish to inform you that the European Regulation n. 679 of 27 April 2016 on the processing of personal data provides for the protection of individuals with regard to the processing of personal data.
Pursuant to article 13 of the EU REG. 2016/679, we invite you, therefore, to take note of the following information note.
- 1. Identification details of the Data Controller
The Data Controller is Rastelli Rubinetterie srl with headquarters in Invorio in Via Regione Monticelli, 10/14
Communication references: Rastelli Rubinetterie srl, data Controller
- 2. Purpose of the treatment
The processing of the personal data provided is aimed solely at:
- a) execution of the contract;
- b) fulfilment of obligations under laws related to the contractual relationship;
- c) contract management, for example relations with agents, representatives, clients and / or contractors;
- d) any external professional collaborations for the fulfilment of legal obligations;
- e) protection of contractual rights;
- f) internal statistical analysis;
The legal basis of the processing is the execution of the contract.
- Processing methods
Personal data will be processed in paper, computerized and telematic form and entered in the relevant databases to which data processors will have access.
The treatment may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary for the achievement of the afore mentioned purposes.
All data processing operations are carried out in such a way as to guarantee the integrity, confidentiality and availability of personal data.
- Data retention period
The data provided will be kept for the entire duration of the contractual relationship plus 10 years.
- 5. Scope of communication and dissemination of data
In relation to the purposes indicated in point 2, the data may be communicated to the following subjects (merely by way of example):
– banks for the management of collections and payments;
– financial administrations or public institutions in fulfilment of regulatory obligations;
– companies and law firms for the protection of contractual rights;
– agents, representatives;
- Rights pursuant to art. 15, 16, 17 18, 20, 21 and 22 of the EU REG. 2016/679
We inform you that as an interested party you have the right to lodge a complaint with the Supervisory Authority, the rights listed below, which you can assert by addressing a specific request to the Data Controller and / or the data processor, as indicated in point 1.
Art. 15-Right of access. The interested party has the right to obtain from the data controller confirmation that personal data concerning him or her is being processed and in this case, to obtain access to personal data and information regarding the processing.
Art. 16 – Right to rectification. The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Art. 17 – Right to cancellation (right to be forgotten). The interested party has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller has the obligation to delete personal data without undue delay.
Art. 18 – Right to limit the treatment. The interested party has the right to obtain the limitation of the processing from the data controller when one of the following hypotheses occurs: a) the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the treatment is illegal and the interested party opposes the cancellation of personal data and instead requests that their use be limited; c) although the data controller no longer needs it for processing purposes, personal data are necessary for the interested party to ascertain, exercise or defend a right in court; d) the interested party has opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
Art. 20 – Right to data portability. The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit these data to another data controller without impediments from part of the data controller to whom you provided them. In exercising his rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 – Right to object The interested party has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) of) , including profiling based on these provisions.
ART. 22 – Right not to be subjected to automated decision-making, including profiling The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which affects in a way analogous significantly on his person.
The Data Controller