PRIVACY NOTICE TO THE CUSTOMER
PURSUANT TO THE ARTICLES NO. 13 AND NO. 14 OF THE EUROPEAN REGULATION
GDPR – EU NO. 679/16
I.M.M. Hydraulics S.p.A., acting as autonomous Data Controller, informs you and your company, acting as data subject, of:
PURPOSES OF SPECIFIC PROCESSING
Data related to master data which will be requested (common data related to you as natural person or natural persons under or related to your company) are processed:
- immediately at the time of the signature of a contract or agreement with our company;
- from your documentation autonomously sent to our company (communications, e-mails etc.);
- directly from you as natural person;
- from natural persons under or related to your company;
- by autonomous third parties acting as data controllers to whom you bestowed the communication of your personal data to other third parties;
such processed data are stored within our database and they are aimed to:
- manage data within the Customer master file;
- manage contracts and the underlying commercial relationship between our company and the Customer;
- manage the accounting and administrative customer’s position;
- issue, record invoices and collect payments or issue documents required by laws and regulations;
- issue any other type of documents (corporate communications, summaries and elaborations, explicitly required by the Customer).
NATURE OF PROVIDING THE REQUESTED DATA
The requested personal data (common, commercial and identification type) are processed within the customer master file and stored within our company’s databases and processed both in an electronic and paper-based way. Providing data is not mandatory, but the denial to process the data will imply the inability, by our company, to fulfil the ordinary activities concerning the underlying commercial relationship.
AUTHORIZATION TO PROCESS DATA
The data you have provided are being processed by the “Persons in charge of the processing” of I.M.M. Hydraulics S.p.A. in the way defined by our “Data Processors” in accordance with policies and regulations established by our “Data Controller” and pursuant to the current legislation (GDPR EU no. 679/16) safeguarding the rights of lawfulness, correctness, confidentiality.
The authorizations to process personal data are monitored by the “Data Protection Officer” (DPO) of I.M.M. Hydraulics S.p.A.
LAWFULNESS OF THE PROCESSING
Pursuant to the art. 6 of the GDPR EU 679/2016, data provided by you shall be processed because necessary to the execution of the contract or necessary to fulfill the activities underlying the commercial relationship between you and our company.
COMMUNICATION AND DISSEMINATION
Your data might be subject to communication or dissemination (also abroad) to transport companies, banks, public authorities, law firms (protection of contractual rights) and Group subsidiaries; by the way safeguarding your data will be ensured through the regulation of data processing (documenting outsourcing responsibilities or external engagements).
PROCESSING ENTAILS CROSS-BORDER DATA FLOW OUTSIDE THE EUROPEAN UNION
Cross-border data flows outside the EU shall not be allowed.
RETENTION PERIOD OF COLLECTED DATA
Personal Data, collected for the abovementioned purposes, will be stored for the time necessary to fulfil the related activities and for the time required by law with regard to administrative and accounting record-keeping; afterwards data will be destroyed (right to be forgotten) or made in an anonymous form if necessary for statistical or historicizing reasons (pseudonymisation).
RIGHTS OF DATA SUBJECTS
As far as the aforementioned processing is concerned, data subjects can exercise the rights pursuant to the articles no. 15, 16, 17, 18 and 19 of the GDPR EU no. 679/16 (rights to access, rectification, erasure, restriction to the use and notification in the event of rectification/erasure/restriction by the Data Controller).
The exercise of your right can be made by e-mail to the address email@example.com or via mailbox to the company’s headquarter address.
CONTACTS OF OUR DATA CONTROLLER
MARCELLO DI CAMPLI
Acting as Legal Representative of I.M.M. Hydraulics S.p.A., autonomous “Personal Data Controller”
Acting as “Data Protection Officer” (DPO) of I.M.M. Hydraulics S.p.A.