INFORMATION ON THE PROCESSING OF PERSONAL DATA [art. 13 and 14 Reg. (EU) 2016/679]
Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data natural persons with regard to the processing of personal data, as well as the free movement of such data
In compliance with the transparency principle set forth in Regulation (EU) No. 2016/679 (hereinafter “Regulation”), we wish to inform you, as the data subject, that the processing of your personal data is carried out in compliance with the conditions set out below.
1. DATA CONTROLLER AND CONTACT DETAILS
Pursuant to Article 4 of the Regulation, the Data Controller is EVOSTEEL S.r.l., with registered office at Via L. da Vinci 20 – 36063 MAROSTICA (VI), Italy. You can contact us at the following telephone numbers: +39 0424 471110 and email: info@evosteel.it .
2. DATA CATEGORIES, PURPOSE AND NATURE OF THE PROCESSING
The personal data processed will be those provided by you, in writing or verbally, for the following purposes:
a) execute pre-contractual and contractual obligations with consequent inclusion in the company databases used for contract management and monitoring;
b) comply with national or Union legal obligations (including tax and accounting obligations);
c) pursue the legitimate interest of the Data Controller or third parties;
With regard to the purpose referred to in letter a), the processing may be carried out without your consent as it is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures.
With regard to the purpose referred to in letter b), the processing may be carried out without your consent as it is necessary to fulfill a legal obligation.
With regard to the purpose referred to in letter c), the processing may be carried out without your consent as it is necessary to pursue the legitimate interests of the Data Controller or third parties, provided that this does not prevail over your fundamental rights and freedoms.
Providing data is optional, but any refusal will make it impossible for the Data Controller to provide the service.
3. RECIPIENTS OF PERSONAL DATA
Your data may be made accessible to individuals (employees and collaborators) specifically authorized and trained by the Data Controller. The personal data collected may be disclosed, within the limits strictly relevant to the obligations, tasks, and purposes indicated above, to:
– third parties (both natural and legal persons) specifically authorized or appointed as Data Processors, or, as the case may be, qualified as independent data controllers, who provide assistance and consultancy to the Data Controller and/or perform services related to the purposes indicated;
– parties required to disclose data in compliance with the provisions of current legislation (public bodies, supervisory bodies, judicial authorities);
– credit institutions, insurance companies.
The Data Controller undertakes to entrust the data exclusively to entities whose technological expertise, experience, ability, and reliability provide adequate guarantees of full compliance with the Regulation, with particular regard to data security and respect for the data subject’s fundamental freedoms.
The list of Data Processors for the data you provide will be made available to you upon request to the Data Controller. Your personal data will not be disclosed, and no data will be transferred to countries outside of Europe.
4. PERIOD OF PERSONAL DATA RETENTION
All data will be retained for the time necessary to fulfill any obligations, including tax or accounting, related to or arising from the specific service requested, pursuant to Article 5, paragraph 1, letter e) of the Regulation.
5. DATA PROCESSING METHODS
The processing of your personal data will be carried out in accordance with the principles of lawfulness, fairness, and transparency, to protect your privacy and rights. The Data Controller also undertakes to process your data in compliance with the principle of “data minimization,” i.e., collecting and processing data only to the extent necessary for the stated purposes. Such data will be stored on computer media, on paper, and on any other suitable media, in compliance with the Regulation, so as to ensure a level of security appropriate to the risk of the processing (Article 32 of the Regulation).
6. RIGHTS OF THE DATA SUBJECT
We inform you that you have the right to request from the Data Controller access to your data (Article 15 of the Regulation), rectification of data (Article 16), erasure of data (Article 17), and restriction of processing (Article 18).
Furthermore, you have the right to object to the processing of your data (Article 21) and to data portability (Article 20).
Finally, please note that you have the right to lodge a complaint with the supervisory authority if you believe your data has been infringed, and you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out before its withdrawal. You may exercise your rights at any time by contacting the Data Controller or by sending an email to the addresses indicated in point 1.
