Privacy information for suppliers

Object: Information on the processing of personal data pursuant to art. 13 and 14 of EU Regulation 2016 \ 679 and of Legislative Decree 196 \ 2003 as amended by Legislative Decree 101 \ 2018

Pursuant to and in compliance with articles 13 and 14 of Regulation (EU) 2016/679, below GDPR, and of Legislative Decree 196 \ 2003 as amended by Legislative Decree 101 \ 2018 we inform you that the personal data provided by you and acquired at the same time contracts / pre-contractual contacts will be processed, also with the help of electronic tools from Proteco srl, Via Neive 77, 12050 Castagnito (CN), VAT number 03103050047, Tel. 0173.210111 as Data Controller.

Purpose and Juridical Base of Treatment:

• - Execution of obligations arising from a contract of which you are a part or to fulfill, before and after the execution of the contract, to your specific requests;
• - Legitimate interest;
• - Fulfillment of legal obligations of an administrative, accounting, civil, tax, regulation, community and non-EU legislation;
• - Supplier management (supplier administration, contract administration, orders, invoices);
• - Management of litigation (contractual breaches, warnings, transactions, debt collection, arbitration, judicial disputes).

The provision of data for the aforementioned purposes is not optional but it is necessary to execute / continue the contract between the parties. Therefore, any refusal to provide such data may determine the impossibility for the Data Controller to finalize the contract with the supplier.

Recipients of personal data:
Personal data processed will not be disseminated but communicated to well-defined subjects. On the basis of the roles and tasks performed, the internal and external staff is entitled to treatment within the limits of their powers and in accordance with the instructions given to them by the Owner. The same data may be communicated to the persons entitled to access it under the provisions of the law, regulations and regulations;

Methods of Treatment:
The data will be processed through paper and electronic aids. All measures deemed necessary and / or appropriate to maintain data integrity, to prevent loss, even accidental, and unauthorized access have been implemented. It is emphasized that automated decision-making processes are not managed.

Data transfer:
The Data Controller does not transfer personal data to third countries; however it reserves the possibility to use services in cloud and in this case the service providers will be selected among those who provide adequate guarantees, as foreseen by the art. 46 of the GDPR 679/2016.

Data retention:
The Data Controller retains and processes personal data for the time strictly necessary to fulfill the purposes indicated or for the period imposed by the provisions in civil and fiscal matters.

Rights of the interested party:
The interested party enjoys all the rights established by GDPR 679/2016, such as the right to request access to personal data and their correction, the cancellation of the same, the limitation of treatment, the right to oppose their treatment, over to the right to data portability. He also has the right to lodge a complaint with the Supervisory Authority. The interested party can exercise his rights by writing to the Data Controller at the above address or by PEC at the address proteco_srl@pec.it