EU Regulation. 2016/679 protects the confidentiality of personal data to protect the freedoms and rights of the parties concerned and therefore imposes a number of obligations on those who “process” personal information concerning other parties. Among the most important obligations imposed by law to respect, it is to inform stakeholders and obtain their consent in cases prescribed treatment, especially for processing activities in relation to which the data must be disclosed to other parties.
In light of the above, therefore, we inform you, pursuant to Article 13 of GDPR in question, writing firm that collects and processes data concerning your company without your express consent (art. 24 lett. A) , b), c) the Privacy Code and art. 6 letter. b) e) GDPR for purposes related to the management of ordinary business relations and, specifically, to compile registry lists, accountancy customers / suppliers, invoicing, creditor management for the satisfaction of all obligations under the regulations in force.
The processing of your personal data is realized by means of the operations indicated in art. 4 Privacy Code art. 4 n. 2) GDPR and precisely: collection, recording, organizing, storing, retrieving, processing, modification, selection, retrieval, comparison, use, interconnection, block, communication, cancellation and destruction of data. Your personal data are processed both paper and electronic and / or automated.
The Holder will treat personal information as long as necessary to fulfill the purposes mentioned above and in any case no later than 10 years from the termination of employment for the Purpose of administrative / accounting and no later than 2 years after the data collection for Marketing Purposes .
The treatments can be performed through either computer, and manual, in compliance with all the precautions necessary to ensure the security and confidentiality of information.
Your data, moreover, can be communicated to third parties only for technical and operational requirements closely related to the purposes set out above and in particular to the following categories of subjects:
In your capacity as an interested party, the rights under Art. 7 Privacy Code and art. 15 GDPR namely, the rights to:
the. obtain confirmation of whether or not personal data concerning you, even if not yet recorded, and their communication in intelligible form;
ii. to be informed:
a) the origin of personal data;
b) the purposes and methods of treatment;
c) the logic applied in case of treatment carried out with the aid of electronic instruments;
d) the identity of the owner, manager and the representative appointed pursuant to art. 5, paragraph 2 Privacy Code art. 3, paragraph 1, GDPR; e) subjects or categories of persons to whom the data may be communicated or who can learn about them as appointed representative in the State, managers or agents;
a) updating, rectification or, when interested, integration of data;
b) the cancellation, the transformation in anonymous form or the block of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c) the attestation that the operations referred to in points a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or distributed, except in the case in which such fulfillment It proves impossible or involves a manifestly disproportionate to the protected right;
iv. object, in whole or in part: a) for legitimate reasons the processing of personal data, pertinent for collection purposes; b) the processing of personal data for purposes of sending advertising materials or direct selling or for carrying out market research or commercial communications through the use of automated calling systems without human intervention by e-mail and / or through traditional marketing mode by telephone and / or paper mail. Please note that the right to object, set out in paragraph b), for direct marketing purposes by means of automated it extends to the traditional ones and that still remains the possibility for the person concerned to exercise their right to object even only partially.
Where applicable, also the rights contained in Articles. 16-21 GDPR (Right of reply, right to oblivion, right to treatment limitation, the right to data portability, the right of opposition), and the right to claim the Guarantor Authority.
Your information also may be processed for internal purposes of statistical and market research; just prior specific and distinct consent (arts. 23 and 130 of the Privacy Code and Art. 7 GDPR), for the following Marketing Objectives:
How to exercise the rights
You may at any time exercise their rights by sending:
Data Controller is Christian Burattini, legal representative of the V-SHAPES SRL, Via Persicetana 20B – 40012 Calderara di Reno (BOLOGNA), Italy.
The updated list of those responsible and in charge of the processing is kept at the registered office of the Data Controller.