INFORMATION FOR THE PROCESSING OF PERSONAL CUSTOMER DATA (pursuant to Article 13 of EU Regulation 2016/679)
This page describes the procedures for managing the www.grandiliutai.com website in relation to the processing of personal data of users who consult it. This is an information for the processing of personal data that is also provided pursuant to art. 13 of the reg. EU 2016/679 (hereinafter the Privacy Code) for users of our website services, which are provided via the Internet. The information is not valid for other websites that may be consulted through our links, of which Grandi Liutai Italiani is in no way responsible. The Data Controller for the processing of personal data relating to identified or identifiable persons processed following consultation of our site is A.C. srl. The treatments connected to the web services of this site take place at the company headquarters and the contents are handled by Grandi Liutai Italiani employees/collaborators. No data deriving from the web service is communicated or disclosed to third parties. The personal data provided by users who request service are used only to perform the service or provision requested and are not disclosed to third parties unless the communication is required by law or is strictly necessary for the fulfillment of the requests.
Purposes and categories of data subject to processing and mandatory provision of data
The personal data you provide or otherwise acquired during the management of the relationship in question will be processed by the Company in compliance with the current legislative and contractual provisions and will be processed in compliance with the aforementioned law and the obligations of confidentiality and security.
By way of example only, the main personal data are as follows: name and surname or company name, complete address, email, phone number and VAT number.
These data will be processed for the following purposes:
Management of administrative accounting data for sending tax declarations required by current and commercial regulations for sending offers, promotions and newsletters.
It should be noted that pursuant to art. 26 of regulation 2016/679, the law 167/2017 and the current legislative decree on the protection of personal data there is the possibility that two or more holders of the processing of personal data share the purposes and methods of treatment.
Therefore we inform you that the data related to the processing of the accounting management of customers - suppliers could be entrusted to a professional firm by agreement and that the processing operations of personal data processing operations, reordering, storage, printing, communication to interested parties and to the authorized Authorities, for the fulfillment of the obligations on the matter is entrusted to them.
The conferment of the aforementioned data is necessary for the management of all the obligations pursuant to a legal obligation.
The personal data relating to you may be disclosed, as well as to the public authorities indicated above, as required by law, to:
Therefore your data can be communicated both in Italy and abroad even in countries not belonging to the European Union. In this case, however, the Company undertakes to guarantee equivalent levels of protection and adequacy of data processing. In the absence of this you will be asked, from time to time, the explicit consent to the proposed transfer, after being informed of the possible risks of such transfers for the person concerned, due to the lack of an adequacy decision and adequate guarantees.
The third parties mentioned above treat your data as separate data controllers or as managers or appointed by the company. If, on the other hand, the treatment takes place under the ownership of the Company, specific information will be given to you.
Your personal data may also be known by the employees / consultants of the Company who have been specifically appointed as Managers or persons in charge of processing, including system administrators.
For the transfer abroad, reference is made to Article 49 of the European regulation.
In the absence of an adequacy decision pursuant to Article 45 (3) or adequate safeguards pursuant to Article 46, including binding corporate rules, a transfer or a set of transfers of personal data to a third country or an international organization only if one of the following conditions is met:
If it is not possible to base the transfer on a provision of Article 45 or Article 46, including provisions on binding corporate rules, and none of the derogations in specific situations pursuant to the first subparagraph of this paragraph shall apply, the transfer to a country third party or an international organization is allowed only if it is not repetitive, concerns a limited number of interested parties, is necessary for the pursuit of the legitimate legitimate interests of the controller, on which the interests or rights and freedoms of the data subject do not prevail, and if the holder and the treatment have assessed all the circumstances related to the transfer and on the basis of this assessment have provided adequate guarantees regarding the protection of personal data. The data controller informs the supervisory authority of the transfer. In addition to the provision of information referred to in Articles 13 and 14, the controller shall inform the data subject of the transfer and of the binding legitimate interests pursued.
Storage of personal data
The processing of the aforementioned personal data is strictly linked to the purposes and therefore it will cease when the purpose that determined it ends, usually coinciding with the termination of the relationship. In relation to the management of reports, however, personal data must be retained even after the termination of the same relationship due to the principle of the Civil Code of the prescription that requires the conservation of the same for a period ranging from 5 to 10 years.
Rights of the interested party
Article. 15 of EU Regulation EU / 2016/679 recognizes the person concerned specific rights with respect to personal treatments. You have the right to obtain access to personal data and the following information:
You also have the right:
These rights can be exercised by writing to the company A.C.srl.
Data Controller and Data Processors
The Data Controller is the Company A.C.srl.