We inform you that, for the establishment and execution of ongoing contractual relationships with you, our organization is in possession of your data, acquired even verbally, directly or through third parties, qualified as personal by the EU Regulation 2016/679 (GDPR).
According to the indicated regulation, this processing will be based on the principles of correctness, lawfulness, transparency and protection of your confidentiality and your rights.
Pursuant to Article 13 of the GDPR 2016/679, we therefore provide you with the following information:
Nature of the data processed: We process your personal, fiscal and economic data necessary for the performance of existing or future contractual relationships with your company, as well as to achieve an effective management of business relationships.
The data are processed without your express consent (Art. 24 lett. a, b, c Italian Privacy Code and Art. 6 lett. b, e GDPR), solely and exclusively for the following Service Purposes: to fulfil pre-contractual, contractual and fiscal obligations deriving from existing relations with you; to fulfil obligations provided for by law, by a regulation, by Community legislation or by an order of the Authority; to exercise the rights of the Data Controller, for example the right to defence in court.
We are not in possession of your data that can be qualified as special or of a judicial nature (Articles 9 and 10 of the GDPR).
Purposes of data processing and duration: Your data are processed for the entire duration of the contractual relationship and also subsequently, for contractual requirements and the related fulfilment of legal and fiscal obligations, and for the effective management of financial and commercial relationships, operations indicated in Art. 4 Italian Privacy Code and Art. 4 n. 2) GDPR.
The Data Controller shall process personal data for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship for Service Purposes.
Processing methods: The processing will be carried out using manual and/or computerised and telematic tools with organisational and processing logics strictly related to the purposes and in any case in such a way as to guarantee the security, integrity and confidentiality of the data in compliance with the organisational, physical and logical measures provided for by the provisions in force.
Obligation or faculty to provide data: As regards the data that we are obliged to know, in order to fulfil our obligations under the law, failure to provide them on your part will make it impossible to establish or continue the relationship, to the extent that such data are necessary for the performance of the same.
Scope of knowledge of your data: The following categories of persons may become aware of your data, in their capacity as data processors or persons in charge of processing, appointed by the undersigned company, the data controller: managers, directors and auditors; internal secretarial offices; accounting and invoicing staff; service marketing staff; agents and representatives.
Communication and dissemination: Your data will not be disseminated by us to unspecified subjects through their provision or consultation.
Your data may be communicated by us, as far as their respective and specific competence is concerned, to Entities and in general to any public or private subject with respect to whom there is an obligation (or a faculty recognised by legal norms or secondary or community norms) or a need for communication, as well as to our consultants, within the limits necessary to carry out their task in our organisation, subject to our letter of assignment which imposes the duty of confidentiality and security.
Your rights: In your capacity as data subject, you have the rights under Art. 7 Italian Privacy Code and Art. 15 GDPR and specifically the rights to: i. obtain confirmation of the existence or not of personal data concerning you, even if not yet recorded, and their communication in intelligible form; ii. obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identity of the data controller, data processors and the representative appointed pursuant to Art. 5, paragraph 2 Italian Privacy Code and Art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents; iii. obtain: a) the updating, rectification or integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification to the effect that the operations according to letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected; iv. to oppose, in whole or in part: a) for legitimate reasons, the processing of personal data concerning you, even if pertinent to the purpose of collection; b) the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by email and / or through traditional marketing methods by telephone and / or mail.
Where applicable, you will also have the rights under Articles 16-21 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the Supervisory Authority. At any time you may obtain confirmation of the existence or otherwise of personal data concerning you and the communication of such data and the purposes on which the processing is based. In addition, you may obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as the updating, rectification or, if there is an interest in such, the integration of data. You may oppose the processing of your data for legitimate reasons.
We kindly ask you to promptly notify the company's reference office of any changes in your personal data so that we can comply with Art. 11, letter (c) of the aforementioned legislation, which requires that the data collected be accurate and, therefore, updated.
Data controller and processor:
The Data Controller is Alpenzu srl
with registered office in Fraz. Arnad Le Vieux, 45/E 11020 Arnad (AO) Italy
The Data Processor, whom you can contact to exercise your rights and/or for any clarifications on the subject of personal data protection, can be reached at: privacy@alpenzu.com