PRIVACY NOTICE PURSUANT TO ART.13 GDPR 679/2016
Dear interested party, we hereby inform you that, for the establishment and execution of ongoing contractual, pre-contractual and/or economic relations with you, our company may acquire information defined as “Personal Data” under the EU Privacy Regulation 679/2016 as specified below. The law in question firstly requires that anyone processing personal data must inform the interested party about what data is being processed and certain elements qualifying the processing, which must also be conducted with fairness and transparency, protecting your privacy and your rights. In compliance with this regulation, and considering that transparency and fairness towards our clients is a fundamental part of our business, we provide the following information:
Data ControllersThe Data Controllers of your personal data are:
Antonini Srl - Via Medaglie Oro della Resistenza, 2 - 50053 Empoli (FI) - VAT No. 05483610480 - Tel. 0571 93221 - Email: com@antoninisrl.com - Contact: Fosco Antonini
Your data may also be communicated to our External Processors, whom we entrust with certain processing activities including professionals or firms that manage our accounting, provide us with tax advice, etc. The complete list of processors and the processing activities and data entrusted to them can be obtained by requesting it from the Data Controller at the contacts listed above. They will process your data according to our instructions, and you can contact them at the references indicated for more information.
Nature and category of processed dataWe process your personal and contact details for sending our information. Furthermore, we may use your image to publish it as a reference on our websites, magazines, or other as specified below. We do not process any data that can be classified as sensitive (art. 9 Regulation EU2016/679).
Purpose of processingBy purpose of processing, we mean the reason, the objective for which data are collected. Depending on these purposes, in certain cases, it is necessary to obtain your prior consent to collect and further process your data. Where necessary, these will be detailed in a consent request form with which you can freely give your consent for all or only some of them. Below is a summary of the purposes for which your data is used together with the legal basis of reference:
| . | Purpose | Legal Basis | |
|---|---|---|---|
| 1 | Management of accounting and administrative obligations | Keeping accounting records Compliance with fiscal and accounting obligations Financial or treasury management |
- Member State legislation (Fiscal and Administrative Law) |
| 2 | Customer management | Customer administration, contract management, orders, shipments and invoices, reliability and solvency control | - European Union Regulation (GDPR 2016/679) - Civil Code |
| 3 | Supplier management | Supplier administration, contract management, orders, arrivals, invoices, selection according to company needs | - European Union Regulation (GDPR 2016/679) - Civil Code |
| 4 | Dispute management | Contractual defaults, warnings, transactions, debt recovery, arbitrations, legal disputes | - Member State legislation (Fiscal and Administrative Law) - Civil Code |
| 5 | Promotional activities | Promotional and direct marketing activities using electronic tools (SMS, MMS, fax, etc.), sending informative and/or advertising material via email or traditional methods such as phone calls by an operator, paper mail. | - European Union Regulation (GDPR 2016/679) - Consent (Art.6 GDPR) |
| Your data will not be processed for purposes other than those mentioned above. In case this happens, we will provide you with detailed information on such different purpose. |
Data processing is mainly carried out in an automated form with procedures suitable to ensure its security and confidentiality, also when using more technologically advanced means like the internet. The processed data will be strictly necessary in relation to the purposes.
Recipients and/or any categories of recipients:Your data may be communicated by us, meaning making it known to one or more specific subjects, to the following recipients or groups of recipients
- to subjects who can access the data by virtue of provision of law, regulation or community legislation, within the limits set by these rules
- making available of the archives, in which your data are also stored, to the maintainers of our information system and/or the software we use, in case of their failures or security issues to the treatments, for the time strictly necessary for the restoration of the functionalities.
- to external companies/consultants to whom we entrust certain processing operations as specified in the paragraph “Data Processors”
- to internal subjects who may become aware of Your data, as data processors or persons in charge of processing, appointed by the undersigned data controller
Your data will not be disseminated by us, meaning making it known to undetermined subjects in any way, including by making it available or consultation.
Transfer of data outside the EUYour personal data may be transferred to countries outside the EU as a result of the subscription to computer services that may rely on computer structures residing in such countries. The interested party is reassured that the transfer can only take place under such circumstances and will be preceded by a verification of the guarantees that such provider provides on their confidentiality and integrity.
| LEGAL BASIS FOR DATA TRANSFER Derogations in specific situations (art 49) | ||
| Explicit consent of the interested party | The interested party has explicitly consented to the proposed transfer, after being informed of the possible risks of such transfers for the interested party due to the absence of an adequacy decision and appropriate safeguards | X |
| Execution of a contract between the interested party and the holder | The transfer is necessary for the execution of a contract concluded between the interested party and the data controller or for the implementation of pre-contractual measures taken at the request of the interested party | X |
| Execution of a contract between the interested party and another person in favor of the interested party | The transfer is necessary for the conclusion or execution of a contract concluded between the data controller and another natural or legal person in favor of the interested party | |
| Public interest reasons | The transfer is necessary for important reasons of public interest | |
| Exercise of rights in judicial proceedings | The transfer is necessary for the establishment, exercise or defense of legal claims | |
| Vital interests of the interested party | The transfer is necessary to protect the vital interests of the interested party or of other persons, where the interested party is physically or legally incapable of giving consent | |
| Transfer from a register accessible to anyone who has a legitimate interest | The transfer is made from a register which, according to Union or Member State law, is intended to provide information to the public and which is open for consultation either by the public in general or by any person who can demonstrate a legitimate interest, but only to the extent that the conditions for consultation laid down by Union or Member State law are fulfilled | |
| Indicate the way to obtain a copy of such data and/or the place where they were made available (information to be given to the interested parties) | Request the data from the co-controllers of the treatment by email or by post at the addresses indicated above |
The data relating to legal fiscal obligations (keeping accounting records, tax compliance) will be stored for 10 years from the date of termination of contracts with customers and suppliers (art. 2220 civil code which provides for the storage for 10 years of accounting records; art. 22 of the D.P.R. September 29, 1973, n.600).
For potential customers/suppliers for whom there has never been a sale or purchase will be kept for 2 years from the date of entry into the database.
The data for marketing purposes will be kept for 2 years. At the end, they will be deleted or consent will be requested again.
We also inform you of the existence of some rights that you can exercise if you believe that the processing carried out by us occurs in violation of what is provided by the Regulation:
- you have the right to ask the data controller for access to your personal data (Art.15) and its rectification (Art.16) or deletion (Art.17) or the restriction of processing concerning you (Art.18) or to oppose their processing (Art.21)
- if you have given consent for one or more specific purposes, you have the right to withdraw such consent at any time (Art.13 par.2 lett.c)
- you have the right to lodge a complaint with the Guarantor for the protection of personal data (Art.77) or to take the appropriate legal proceedings (Art.79)
Providing data for the purposes indicated in the paragraph “Purpose of Processing” from points 1 to 4 is a necessary requirement for the conclusion of the contract and for the provision of the requested service. In addition, their communication is a legal obligation to comply with all fiscal and accounting obligations provided by current legislation. In their absence, it will not be possible to proceed with their provision. For these purposes, it is not necessary to request your prior consent as provided by Art.6 paragraph 1 lett.b) and c) (for common data) of EU Regulation 2106/679.
Providing data for the purposes indicated in the paragraph “Purpose of Processing” at point 5 is optional and is left to the will of the subject. And it will have no consequence regarding the provision of the requested service. For them, under Art. 6 paragraph a) of EU Regulation 2016/679, your prior consent is required.