INFORMATION for customers and supplies

Padana Sviluppo S.p.A., Stefano Gianotti, as Data Controller, pursuant to art. 13 of EU Regulation 2016/679 (Privacy Policy), and subsequent amendments and additions, collects and subsequently processes personal data relating to its Customers and Suppliers.

1.Types of data being processed

The personal data being processed consist of:

Common personal data. This information includes, but is not limited to, personal data and contact details (e-mail address and telephone number).

Particular data:

2. Purposes and methods of processing.

The personal data of the interested party are processed within the normal activity of the Data Controller, for the pursuit of the following purposes:

correct and complete execution of the obligations of the contractual relationship in place;

administrative and accounting obligations strictly connected to the Contract;

fulfillment of specific obligations established by law, by a regulation or by community legislation;

promotional activity regarding products and services similar to those already purchased

The processing of personal data takes place, under the authority of the Data Controller, by persons specifically appointed, authorized and instructed in the processing pursuant to art. 29 of the Privacy Regulation, through manual, computerized or telematic tools, with logic strictly related to the purposes and in any case in order to guarantee the confidentiality and security of personal data. The processing of personal data may also take place, on behalf of the Data Controller, by specially designated Data Processors pursuant to art. 28 of the Privacy Regulation.

3. Legal basis of the processing and nature of the provision.

With reference to the purposes referred to in paragraph 2, points 1,2,3 above, the provision of personal data is mandatory and is a necessary requirement for the execution of the Contract and the related tax and administrative obligations. Failure to provide the data makes it impossible to receive the service covered by the Contract itself. The legal basis of the related processing is the correct execution and management of the Contract.

With reference to point 4) -activity towards acquired customers-, the legal basis is the legitimate interest of the owner. The customer can stop receiving these communications by e-mail at any time.

4. Subjects or categories of subjects to whom the personal data may be communicated and scope of communication.

In relation to the purposes of the processing indicated above and within the limits strictly relevant to the same, the personal data of the interested party will be or may be disclosed to the following categories of subjects:

Financial administration and other public authorities, where required by law or at their request;

Credit institutions for payment orders or other financial activities instrumental to the execution of the Contract;

external subjects who exercise control activities, such as auditing company, board of statutory auditors, supervisory body;

companies and organizations for credit management and / or for the protection of interests and rights;

subjects designated as external data processors pursuant to art. 28 of the Privacy Regulation, for activities connected, instrumental or consequent to the execution of the Contract

The updated list of persons appointed as external managers can be provided by the Data Controller upon request by the interested party.

  • Extra-EU data transfer

Personal data will not be transferred to non-EU countries; where, for reasons relating to the execution of the contract, or the fulfillment of legal obligations, a transfer to countries and / or organizations outside the EU is necessary, this transfer will take place in compliance with the applicable legislation. The transfers will be made through adequate guarantees, such as adequacy decisions, standard contractual clauses approved by the European Commission or other legal instruments.

  • Data retention period or criteria for determining the period

The personal data of the interested party are stored with the owner for the time necessary to fulfill the purposes referred to in paragraph no. 2 (points 1 to 3), as well as for that prescribed by civil, fiscal and regulatory laws and in any case no later than 10 years from the termination of the contractual relationship.

As regards the promotional purposes towards customers already acquired (paragraph 2, point 4) the data of the interested party will be processed until the right to object is exercised (which can be activated at the beginning, when sending individual communications through direct contact with the owner) and in any case no later than 24 months from collection.

After the retention terms have elapsed, the data will be anonymized or deleted, unless it is necessary to keep it for other purposes provided for you by express provision of the law.

7. Rights of the interested party.

The articles of the Privacy Regulation give the interested party the right to:

  • access to personal data, (or a copy of such personal data), as well as to further information on the treatments in progress;
  • rectification or updating of personal data processed by the Data Controller, where they are incomplete or out of date;
  • cancellation of personal data from the Data Controller’s databases in the cases provided for by current legislation;
  • limitation of the processing of personal data by the Data Controller;
  • Obtain a structured format, commonly used and readable by an automatic device for personal data concerning him;
  • opposition to the processing of personal data by the Data Controller (e.g. promotional activities)

In any case, you always have the right to lodge a complaint with the competent Supervisory Authority (Guarantor for the Protection of Personal Data).

  • Changes to the privacy policy

The owner reserves the right to modify, update, add or remove parts of this information, notifying the interested parties.

Information updated to NOVEMBER 2020