The personal data controller is Antonello Srl PI 03996170241 based in strada Ponte del Bo 17, 36100 Vicenza (Italy).
The contact responsible for the processing of your data:
The processing of personal data - directly provided or collected through third parties (trade agents) - is aimed at carrying out the activities required by existing regulation and essential to the fulfilment of contractual/pre-contractual obligations, including any instrumental or complementary activities as well as specific legal obligations.
If concrete situations arise in which the subject's data belonging to special categories of personal data must be processed, the processing will take place only where necessary for the fulfilment of contractual obligations and provided that the conditions for lawful processing provided for by Art. 9 of the GDPR are met and that the data subject has given his/her explicit consent to the processing of such personal data.
Data processing shall apply to:
The legitimate interests pursued by the Data Controller in relation to the personal data processed by customers and suppliers are exclusively reflected in the lawful and objective need to proceed with the execution of a sales/purchase contract (with customers/suppliers) - to which the data subject is a party – as well as with the implementation of pre-contractual measures required by the data subject.
The processing will include all the operations or set of operations provided for in Art. 4, par. 2, of EU Reg. 2016/679 necessary for data processing, it being understood that the data provided will not be disclosed.
Within the scope of the abovementioned purposes, the processing may be carried out via computer systems or in paper form, and will be managed by authorized personnel of our Company and, when necessary, by specifically appointed external data processors.
The data storage in both electronic and paper format will last for the time required to fulfil the purposes and in accordance with applicable laws.
The provision of personal data relating to the processing as described in par. 2 is necessary because it is related to the obligations provided for by applicable laws and regulations and by provisions issued by the competent authorities/supervisory and control bodies, to comply with outstanding or future contracts between the parties as well as to fulfill requests of the data subject.
In case of lack of consent to data processing the abovementioned activities will not be carried out, resulting in inability to comply with the contract or respond to the requests of the data subject.
However, it must be stated that - even when consent is granted - the right to interrupt the processing can be exercised at any time by requesting data erasure via e-mail (address indicated in point 1) without prejudice to the lawfulness of the processing carried out before the revocation and the Data Controller’s legitimate interests.
Such a request would also mean that the activities referred to in point 2 above will not be carried out.
Personal data relating to the processing may be disclosed to third parties belonging to the following categories:
With reference to the data transferred to them, the subjects belonging to the above-mentioned categories may operate as external data processors in accordance with the procedures provided for by EU Regulation 2016/679.
Data will be retained according to the following criteria:
No profiling activities will be implemented on the transferred data.
We inform you that you may exercise your rights under Articles 13 and 14 of EU Regulation 2016/679 with regard to data processing, in particular:
Requests relating to the exercising of rights and legal powers relative must be sent at the address indicated in point 1.