Information Notice pursuant to Art. 13 of EU Regulation No. 679/2016 for Clients and Suppliers of Costantini Cuoghi Srl
Costantini Cuoghi S.r.l., with registered office in Toano 42010 (RE), Via della Valle no. 1, VAT No. 02942950359 (hereinafter referred to as the “Controller”), in its capacity as data controller, informs you of the purposes and methods by which your data are processed pursuant to Art. 13 of EU Regulation No. 2016/679 (hereinafter “GDPR”).
- PURPOSES AND METHODS OF PROCESSING
Your personal data, freely provided and acquired by us in the course of our activities, will be processed lawfully and fairly for the following purposes: management of contractual relationships with clients and suppliers, and fulfilment of administrative, accounting, and tax obligations.
The data processed are updated, relevant, complete, and not excessive in relation to the purposes for which they are collected and subsequently processed.
The nature of the data is of a common type (name, address, etc.), including tax data.
The processing of your personal data is carried out through the operations referred to in Art. 4(2) of the GDPR, namely: collection, recording, organization, structuring, storage, modification or adaptation, extraction or selection, consultation, use, communication, comparison or interconnection, erasure or destruction, analysis, and protection of data. Your personal data are processed both in paper and electronic form. - LEGAL BASIS FOR PROCESSING
The legal basis for the processing consists in the fulfilment of a contractual obligation. - LEGITIMATE INTERESTS PURSUED BY THE CONTROLLER
The legitimate interest of the Controller consists in compliance with legal obligations in the civil, corporate, and tax areas. - RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
In addition to internal use by the Controller and its authorized personnel (managers and appointees), your personal data, solely for the purpose of fulfilling the above obligations, may be communicated to the following entities:
a) companies, collaborators, consultants, or professionals for specific legal obligations;
b) public authorities upon valid legal request;
c) insurance companies.
Your data will not be disseminated. - TRANSFER OF PERSONAL DATA
The Controller does not intend to transfer your personal data to a third country or to an international organization. - DATA RETENTION PERIOD
Your data are used for the activities provided for under the relevant agreement and are retained for a period following the termination of the assignment, service, or contract, as follows in relation to the applicable legal limitation or prescription periods:
ten years for common personal data.
After this retention period, your data will be deleted or destroyed, or converted into anonymous form, unless their full return to you is agreed upon or required by law or regulations. - DATA SUBJECT’S RIGHTS
As a data subject, you have the rights set out in Art. 15 of the GDPR, namely the right to:
– obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, and to receive such data in intelligible form;
– obtain information regarding: a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied in case of electronic processing;
d) the identification details of the Controller, the processors, and the designated representative pursuant to Art. 5(2);
e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of them in their capacity as designated representatives, processors, or appointees;
– obtain:
a) the updating, rectification, or, where interested, integration of the data;
b) the erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which they were collected or subsequently processed;
c) certification that the operations referred to in points a) and b) have been brought to the attention, including as regards their content, of those to whom the data were communicated or disseminated, except where such compliance proves impossible or involves a disproportionate effort;
– object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection;
b) to the processing of personal data for the purpose of sending advertising material, direct sales, market research, or commercial communication;
– withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
– lodge a complaint with a supervisory authority.
In particular, the data subject may at any time request from the Controller access to personal data and rectification or erasure thereof, restriction of processing, or object to processing, as well as exercise the right to data portability.
These rights may be exercised by writing to Costantini Cuoghi S.r.l. using one of the following methods:
– by post (ordinary or registered mail) to Via della Valle no. 1, 42010 Toano (RE);
– by email to amministrazione@costantinicuoghi.it - NATURE OF DATA PROVISION AND CONSEQUENCES OF FAILURE TO PROVIDE DATA
The provision of your data is necessary and mandatory in order for the Controller to provide the requested services. In case of refusal, it will not be possible to complete the registration process, and the Controller will be unable to fulfil contractual obligations. - EXISTENCE OF AUTOMATED DECISION-MAKING
No automated decision-making process is in place.