Information notice on data processing pursuant to art. 13 of Reg. (EU) 2016/679
Bacciottini Group Srl would like to inform its Customers, pursuant to art. 13 of Reg. (EU) 2016/679, that the personal data disclosed for the stipulation and management of the contractual relationship concerning the Customer, where the latter is a natural person, a sole trader or a freelance professional, and/or, however, natural persons (employees, associates) who operate on behalf of the Customer will be subject to processing inspired by the principles of fairness, lawfulness, transparency and protection of confidentiality, in full compliance with the applicable regulatory framework on the protection of personal data. We would like to invite Customers to make this information notice available to their employees and their associates whose personal data are directly or indirectly required for the performance of the contract and for the management of the related contractual relationship.
1) Purposes of processing and legal basis
The processing of data by the Controller aims to make it possible to i) perform the contract stipulated between the parties or to perform the precontractual measures pursuant to art. 6 para. 1 letter b) of Reg. (EU) 2016/679; ii) fulfil the related legal obligations pursuant to Art. 6 para. 1 letter c) of Reg. (EU) 2016/679.
2) Joint Data Controllers
The Joint Data Controllers are BACCIOTTINI GROUP S.R.L., in the person of the legal representative pro tempore, with registered and operative headquarters in Montemurlo (PO), Via dei Tintori n°20 interno 2, VAT no. 02092500970, and BACCIOTTINI F.LLI S.R.L., in the person of the legal representative pro tempore, with legal and operative offices in Montemurlo (PO), Via dei Tintori no. 24/26, VAT no. 01636540971.
3) Means of processing and retention period
The processing of the personal data provided by the Customer will also be outsourced, and will be performed with IT tools or on paper, for the purposes set forth in paragraph 1), guaranteeing the security and confidentiality of the data through the adoption by the Controller of adequate technical and organisational measures pursuant to art. 32 of Reg. (EU) 2016/679. The personal data obtained will be processed for the time required to pursue the purposes laid down in paragraph 1). Once 10 years from the end of the contractual relationship have lapsed, the data concerning the Customer will be erased or may be archived in anonymous form for mere statistical reasons, as envisaged by the applicable regulatory framework on the protection of personal data.
4) Provision of the data
With reference to the purposes highlighted under paragraph 1), the provision of the personal data by the Customer is mandatory for the establishment of the contractual relationship. Failure to provide the personal data, their partial or inexact provision may result, consequently, in the non-performance of the contract.
5) Disclosure to third parties
The Customer’s personal data may be disclosed to public, institutional or professional entities that are entitled by law to require their acquisition, as well as, exclusively for the purposes laid down in paragraph 1), to third-party companies or professionals (appointed as Data Processors pursuant to and for the effects of art. 28 of Reg. (EU) 2016/679), whose services the Controller uses to carry out its business activities, including but not limited to trade agents, authorised dealers, tax and accounting consultants, legal counsel and sector consultants, auditing companies, software supply and support companies. The list of third parties is available on express request to the Data Controller.
6) Rights of the data subjects
In accordance with the provisions of articles 15 et seq. of Reg. (EU) 2016/679, the data subject may, at any time, exercise vis-a-vis the Joint Data Controllers the rights to: a) access their personal data and obtain a copy thereof; b) obtain the rectification of their data, if they are found to be incorrect, or the completion of their data, if they are found to be incomplete; c) obtain the erasure of their data in the cases set forth by art. 17 of Reg (EU) 2016/679; d) obtain the restriction of the processing in the cases set forth in art. 18 of Reg. (EU) 2016/679; e) receive, in a structured, common and machine-readable format, the personal data that concern them and request their transmission, by the Controller, to another Controller; f) [right to object] object, at any time, on grounds related to their personal situation, to the processing of the data concerning them, pursuant to art. 6 para. 1 letters e) and f) of Reg. (EU) 2016/679, or object, at any time, to the data processing performed for purposes of direct marketing; g) lodge a complaint with the Italian Data Protection Authority pursuant to art. 77 of Reg. EU 2016/679.
In order to exercise their rights, or to receive more information, the data subjects may contact each one of the Joint Data Controllers by registered letter with proof of receipt at the addresses indicated in paragraph 2) above or send an e-mail to the following e-mail address gorig@bacciottinigroup.eu