Personal data protection: Privacy information for Customers and Suppliers (to individuals operating as a quality or on behalf of Customers or Suppliers)
The information in this document is provided to meet the transparency obligations of EU Regulation No.679 of 27.4.2016 on the protection of personal data.
The EU Regulation 2016/679 requires that people whose data is collected be provided with information about the processing of the data themselves, in a concise form and with simple and clear language. Articles 12, 13 and 14 of the Rules specify the content of the information to be communicated. This document is therefore intended to bet as common as expected. In this document you are also identified as "interested".
Treatment owner is Atmosphera Srl of Pederobba
The owner of the treatment is the one who determines the purpose and means of processing personal data. In the contractual or pre-contract relationship of this company, the Titolare of the treatment is:
Atmosphera srl, with headquarters and point of contact in Pederobba (TV 31040) - Italy - via Feltrina, 9/C
The processing of your personal data is mandatory and necessary for the management of the contractual or
pre-contract relationship, promotional activities, for analytical and statistical purposes.
The purpose for which the data is collected is related to the management of contracts for jobs or services, for pre-contractual activities, for tax obligations and any other obligation provided by law, a regulation, EU legislation or an order of the Authority (such as anti-money laundering) and to exercise the rights of the Holder, for example theright of defence incourt.
The legal basis for data processing is included in the legislation governing the conduct of economic activities.
The collected data will be used, by means of computer, telematics and paper documents. Treatment operations are implemented in a way that ensures the logical, physical and confidentiality of your personal data.
The data must be conferred, subject to the impossibility of entering into and then managing the contract.
Among the data processed are not particular categories of data, but only common data.
Your data will also be communicated to external entities, companies and individuals.
Your data will be consulted and used, according to the internal guidelines and modalities, by the staff in charge of this company, including the employees (also external), for the performance of the related assigned tasks. The data will also be communicated to third-party companies or other entities (as an indication, lenders, professional firms, consultants, insurance companies for the provision of insurance services, etc.) who carry out activities of providing services on behalf of the Holder, in their capacity as external responsible of the treatment.
They will also be communicated to those identified by law or another binding regulatory act. These subjects will treat the data in their capacity as self-employed holders of the treatment.
The updated list of public and private entities that may become aware of your data may be requested at the legal office of the Controller. The company does not intend to transfer your data abroad. If in future there will be the necessity or the opportunity, the transfer will take place only in presence of a decision on the adequacy of the European Commission or, in case of transfers referred to Article 46 (Transfer subject to adequate guarantees) or 47 (Binding Enterprise Rules) or Article 49 (Exceptions in specific situations) according to paragraph, only in the presence of express reference to the appropriate or appropriate guarantees and the means to obtain a copy of that data or the place where they were made available.
We will keep your data in the Company for at least 10 years after the termination of the economic relationship.
For the retention obligations required by tax law, your data will be retained for 10 years after the year of the last economic report. After this deadline and before proceeding with their destruction, it will be assessed whether to preserve the data further. The data may also be withheld at your own protection or to protect this company in the event of legal proceedings, until the end of the period within which the legal action may be exercised or until the end of the judgment grades, in the event of ongoing litigation.
The Regulation recognizes the rights, which are summarized below, and the right to complain to the Guarantor.
The Rules specify the rights of the person who are summarized below.
Art. 15 - Right to Access
You have the right to obtain confirmation from the controller that personal data relating to it is being processed or not and, if so, to gain access to personal data and information relating to the processing.
Art. 16 - Right to Rectify
You have the right to have the owner of the treatment correct the inaccurate personal data that relates to him without unjustified delay. In view of the purposes of the treatment, the person concerned has the right to obtain the integration of incomplete personal data, including by providing an additional declaration.
Art. 17 - Right to Cancel (right to be forgotten)
The person has the right to obtain the deletion of personal data relating to him without unjustified delay from the controller and the controller has an obligation to delete personal data without unjustified delay if there are reasons listed in the same article.
Art. 18 - Right to limit treatment
The person is entitled to obtain treatment restrictions from the controller when the assumptions listed in the same article are used (for example, when the accuracy of the data is disputed or when the data is necessary for the exercise or defence of a right in court).
Art. 19 - Mandatory notification in case of adjustment or deletion of personal data or limitation of processing
The controller informs each of the recipients to whom personal data has been passed on any adjustments or cancellations or limitations of treatment made under Article 16, Article 17, paragraph 1, and Article 18, unless this proves impossible or involves a disproportionate effort. The controller informs the person concerned if the person requires it.
Art. 20 - Right to Data Portability
The person has the right to receive in a structured format, common use and readable by automatic device the personal data that relates to him provided to a controller and has the right to transmit that data to another holder of the treatment without impediment by the owner of the treatment to which he provided it.
In exercising your rights to the portability of data under paragraph 1, you have the right to obtain the direct transmission of personal data from one controller to another, if technically feasible.
Art. 21 - Right of Opposition
You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you under Article 6, paragraph 1, letters e) or f) (public interest and pursuit of the legitimate interest), including profiling on the basis of those provisions.
Art. 22 - Automated decision-making for individuals, including profiling
You have the right not to be subjected to a decision based solely on automated treatment, including profiling, which has legal effects that affect you or that similarly significantly affects your person.
Article 34 - Disclosure of a personal data breach to the person concerned
When the breach of personal data is likely to present a high risk to the rights and freedoms of individuals, the controller communicates the violation to the person without unjustified delay.
For the exercise of your rights, forward registered mail. to the Holder, to the address of the point of contact (see above).
If you believe that your rights summarized above have not been recognized or in the event of an unjustified delay, you may file a complaint with the Personal Data Protection Authority. On the Guarantor's website you will find the complaint template (www.garanteprivacy.it).