Protection of personal data: Privacy information for Customers and Suppliers (to natural persons who work as or on behalf of Customers or Suppliers)
The information contained in this document is provided to fulfill the transparency obligations established by EU Regulation no. 679 of 27.4.2016 on the protection of personal data.
The EU Regulation 2016/679 requires to provide, to the persons whose data is collected, information relating to the processing of the data, in a concise form and with simple and clear language. Articles 12, 13 and 14 of the Regulation specify the content of the information to be communicated. This document therefore serves to communicate the provisions. In this document you are also identified as "interested".
The data controller is Atmosphera srl of Pederobba
The data controller is the one who determines the purposes and means of the processing of personal data. In the contractual or pre-contractual relationship this company, the Data Controller is:
Atmosphera srl, with headquarters and contact point in via Feltrina, 9 / C - 31040 Pederobba (TV).
The processing of your personal data is mandatory and necessary for the management of the contractual or pre-contractual relationship, promotional activities, for analytical and statistical purposes.
The purpose for which the data is collected is linked to the management of contracts for works or services, for pre-contractual activities, for tax obligations and any other obligation required by law, by a regulation, by community legislation or by an order of the Authority. (such as for anti-money laundering) and to exercise the rights of the owner, for example the right to defense in court.
The legal basis for data processing is included in the legislation governing the conduct of economic activities.
The data collected will be used, by computer, telematic means and in paper documents. The processing operations are implemented in such a way as to guarantee the logical, physical security and confidentiality of your personal data.
The data must be provided, under penalty of the impossibility of stipulating and therefore managing the contract.
The data processed does not include particular categories of data, but only common data.
Your data will also be disclosed to external entities, companies and persons.
Your data will be consulted and used, according to the directives and internal procedures, by the personnel in charge of this Company, including collaborators (including external ones), for the performance of the related tasks assigned. The data will also be disclosed to third-party companies or other subjects (by way of example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) who carry out the supply of services on behalf of the Data Controller, in their capacity as external data processors.
They will also be communicated to the subjects identified by law or by other binding regulatory act. These subjects will process the data in their capacity as independent data controllers.
The updated list of public and private subjects who may become aware of your data can be requested at the registered office of the Data Controller. The Company does not intend to transfer your data abroad. If in the future the need or opportunity arises, the transfer will take place only in the presence of an adequacy decision of the European Commission or, in the case of the transfers referred to in Article 46 (Transfer subject to adequate guarantees) or 47 (Rules binding company obligations), or Article 49 (Exceptions in specific situations), second paragraph, only in the presence of express reference to the appropriate or opportune guarantees and the means to obtain a copy of such data or the place where they were made available .
We will keep your data in the Company for at least 10 years following the termination of the economic relationship.
For the conservation obligations required by tax legislation, your data will be kept for 10 years after the year of the last economic relationship. After this deadline and before proceeding with their destruction, the opportunity to further keep the data will be evaluated. The data may also be retained for your protection or for the protection of this Company in the event of legal actions, until the end of the period within which the legal action can be exercised or until the end of the court degrees, in the event of ongoing litigation. .
The Regulation recognizes the rights, listed in articles 15, 16, 17, 18, 19, 20, 21, 22 and 34, which are summarized below, and the right to lodge a complaint with the Guarantor.
The rights of the interested party are specified in the Regulations, which are summarized below.
Art. 15 - Right of access
The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and information regarding the processing.
Art. 16 - Right of rectification
The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Art. 17 - Right to cancellation (right to be forgotten)
The data subject has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay if the reasons listed in the same article exist.
Art. 18 - Right to limit the processing
The interested party has the right to obtain from the data controller the limitation of processing when the hypotheses listed in the same article occur (for example when the accuracy of the data is contested or when the data are necessary for the exercise or defense of a law in court).
Art. 19 - Obligation to notify in case of rectification or cancellation of personal data or limitation of processing
The data controller communicates to each of the recipients to whom the personal data have been transmitted any corrections or cancellations or limitations of the processing carried out pursuant to Article 16, Article 17, paragraph 1, and Article 18, except for this proves impossible or involves a disproportionate effort. The data controller informs the data subject of these recipients if the data subject requests it.
Art. 20 - Right to data portability
The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom he provided them.
In exercising their rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 - Right to object
The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to Article 6, paragraph 1, letters e) or f) (tasks of public interest and prosecution legitimate interest), including profiling based on these provisions.
Art. 22 - Automated decision-making process relating to natural persons, including profiling
The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way.
Art. 34 - Communication of a personal data breach to the interested party
When the violation of personal data is likely to present a high risk for the rights and freedoms of individuals, the data controller communicates the violation to the data subject without undue delay.
To exercise your rights, send a registered letter with return receipt to the Data Controller, at the contact point indicated above.
In the event that you believe that your rights summarized above have not been recognized or in the event of an unjustified delay, you have the possibility to lodge a complaint with the Guarantor for the Protection of Personal Data. On the website of the Guarantor you will find the model for the complaint (www.garanteprivacy.it).