PRIVACY POLICY FOR CUSTOMER/SUPPLIERS

Drafted pursuant to art. 13 of EU Regulation 2016/679

SUBJECT : Pursuant to art. 13 of EU Regulation 2016/679 (hereinafter “Regulation”), the personal data provided by the interested party will be processed by CONCERIA NUOVA IMPALA SRL for the purpose of managing the pre-contractual and contractual relationship in compliance with the provisions of the Regulation. This information does not regulate the processing of personal data relating to legal persons, in particular companies with legal personality, including the company name and form of the legal person and its “contact details” ( Regulation – Recital no. 14).

DATA CONTROLLER: CONCERIA NUOVA IMPALA SRL (hereinafter “Controller”) with registered office in Via Liguria 22/A – 56029 – Santa Croce sull’Arno (PI).

Contact email: info@nuovaimpala.com

DATA PROTECTION OFFICER (DPO): The appointment of a Data Protection Officer is not required pursuant to Article 37 of the Regulation.

PURPOSE : Personal data will be processed for the following purposes:

• Management of the pre-contractual and contractual relationship and related activities (for example, but not limited to, the management and administration of contracts, orders, arrivals, invoices, etc.).
• Fulfillment of legal obligations.

LEGAL BASIS FOR PROCESSING: The legal bases for processing personal data are to be found in the performance of pre-contractual and contractual obligations and in the performance of legal obligations incumbent on the Data Controller .

PROCESSING AND STORAGE METHODS: The processing will be carried out using computer and paper-based tools, in compliance with the provisions of Article 32 of the Regulation. The interested party’s personal data relating to the purposes set out in this policy will be retained for the entire duration of the contractual relationship and for the time strictly necessary to achieve the purposes indicated in the “Purpose” section. Subsequently, they will be retained until the time permitted by Italian law to protect the interested party’s interests and/or until any pending judicial or extrajudicial claims arising from the contractual relationship are terminated.

PLACE OF PROCESSING: The data is processed at the Data Controller’s offices and at the offices of any data processors.

SCOPE OF COMMUNICATION AND DISSEMINATION : The interested party’s data may be communicated to, or accessed by, our company’s employees or collaborators, expressly designated by us as “authorized data processors” and/or appointed as “external data processors.” The complete list of appointed data processors is available at the Data Controller’s headquarters.

The interested party’s personal data will not be transferred to third countries or disclosed in any way.

SPECIAL CATEGORIES OF PERSONAL DATA: For the purposes set out in this privacy policy, the Data Controller does not need to process personal data of a “special” nature pursuant to Article 9 of the Regulation.

EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING: For the purposes set out in this privacy policy, the Data Controller does not adopt any automated decision-making process, including profiling, pursuant to Article 22, paragraphs 1 and 4, of the Regulation.

RIGHTS OF THE INTERESTED PARTY: At any time, the interested party may exercise the rights provided for by the Regulation , Articles 15 to 22, and in particular the right to:

1. a) request confirmation of whether or not personal data concerning you exists;
2. b) obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the retention period;
3. c) obtain the rectification and deletion of data;
4. d) obtain limitation of processing;
5. e) obtain data portability, i.e. receive the data from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
6. f) object to the processing at any time, including in the case of processing for direct marketing purposes;
7. g) to object to automated individual decision-making, including profiling.
8. h) ask the data controller for access to personal data and to rectify or erase them or limit the processing concerning them or to object to their processing, in addition to the right to data portability;
9. i) withdraw consent at any time without affecting the lawfulness of processing based on consent given before its withdrawal;
10. j) lodge a complaint with the Guarantor Authority.

The interested party may exercise his/her rights by sending a written request to the email address info@nuovaimpala.com

NEW IMPALA TANNERY SRL