Customer and Supplier Privacy Notice Nanni Ottavio srl – Società a socio unico
INFORMATION ON THE PROCESSING OF PERSONAL DATA
This notice is provided pursuant to Article 13 of the European Regulation 2016/679 on the protection of personal data, which requires that the data subject be informed, in the case of direct and indirect collection of their data, about the essential elements of the processing.
DATA CONTROLLER
The company “Nanni Ottavio srl – Società a socio unico”, located at Via Novella n. 1 – Savignano sul Rubicone (FC),
VAT: 02014650408, Tel. +39 0541 941414 .
The processing of data usually takes place at the headquarters of the Data Controller, by personnel or external collaborators duly designated as data processors or persons in charge of processing. The data will be processed to fulfill the obligations arising from existing contractual relationships between the parties or to comply, even before the final conclusion of contractual agreements and in the pre-contractual phase, with specific requests of the data subject.
PURPOSES
The Data Controller uses the data provided to: comply with legal, regulatory, and EU obligations; fulfill obligations arising from a contract or to comply, before the execution of the contract, with specific requests from the Customer/Supplier; manage customers, particularly regarding the administration of contracts, orders, shipments, and invoices, reliability and solvency control; manage relationships with suppliers, particularly regarding the administration of contracts, orders, arrivals, invoices; manage any disputes, such as in cases of contractual breaches, warnings, settlements, debt collection, arbitrations, or legal disputes.
The provision of data for the aforementioned purposes is based on the execution of a contract or pre-contractual measures adopted at the request of the customer or the fulfillment of legal obligations to which the Data Controller is subject. For this reason, failure, incorrect or partial provision of data could result in the impossibility of establishing or continuing the relationship, to the extent that such data are necessary for its execution.
RECIPIENTS
The data, including any personal data processed exclusively in compliance with the principle of necessity of processing, may be communicated to duly appointed recipients who will process the data as data processors and/or persons authorized to process them.
In particular, the data collected and processed may be communicated to recipients belonging to the following categories, in compliance with the fundamental principles of fairness, legality, necessity, and limitation: competent authorities for legal obligations and/or requests from public bodies; Companies for repair and/or maintenance of IT equipment; Postal service or other delivery or shipping companies; Banks and credit institutions; Debt collection companies; Insurance companies; Professional firms, companies and/or business associations that provide the Data Controller with specific accounting, legal, or tax services.
The Data Controller does not disclose any information of the data subjects to third parties without their consent, except where required by law. The dissemination of processed personal data is in any case excluded.
The complete list of data processors, joint controllers, and persons authorized to process personal data can be requested by sending a request to the email address [email protected]
METHODS AND RETENTION TIMES
Personal data are processed with automated and manual tools for the time strictly necessary to achieve the purposes for which they were collected.
As soon as personal data are no longer necessary for the purposes for which they were collected, the Data Controller will delete them unless storage obligations are provided for by law or the user has consented to processing for a longer period.
In particular, the collected personal data are stored for a period determined considering criteria such as a) the establishment of a contractual relationship, with consequent issuance of accounting and tax documents, and in any case, subject to legal obligations that provide for storage for longer periods.
Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.
RIGHTS OF THE DATA SUBJECT
Pursuant to Articles 15 – 21 of the EU Regulation 2016/679, each data subject has the right to request access to personal data, rectification, deletion, limitation of processing, opposition to processing, and data portability.
The data subject also has the right to lodge a complaint with a supervisory authority.
Requests referred to in the previous points must be sent by email to the address [email protected].
The Data Controller reserves the right to modify, integrate, or periodically update this Notice in compliance with applicable regulations or the measures adopted by the Data Protection Authority.
The aforementioned changes or additions will be brought to the attention of the data subjects via email.