To all Customers/Suppliers
Information provided pursuant to art. 13 of EU regulation 2016/679 (GDPR)
As a result of the establishment of the commercial and contractual relationship and during the course of the same, our company will find itself collecting and processing your personal data.
For the sake of clarity, we specify the following definitions given by the aforementioned European Regulation:
Personal data: any information relating to an identified or identifiable natural person (“interested”); an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, a telephone number
identification, location data, an online identifier or one or more characteristic elements of your physical, physiological, genetic, psychic, economic, cultural or social identity;
Treatment: any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration,
the organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or
destruction.
Pursuant to and for the purposes of art. 13 of EU Regulation 2016/679 (GDPR), we provide you with the following information:
This information is provided by A.J. GROUP ITALY S.R.L., with registered office in VIA DELLA FIORANDOLA, 46 AREZZO (AR) – Cap 52100, data controller pursuant to GDPR 2016/679.
The data collected is processed in accordance with the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
The data is processed manually, telematically and electronically; security measures are adopted to avoid the risks of unauthorized access, destruction or loss, treatment that is not permitted or does not comply with the purposes of the collection.
Categories of personal data processed:
A.J. GROUP ITALY S.R.L. will process the following personal data:
a) Personal data, address of residence or domicile and contact details (telephone, email address);
b) Bank and/or payment details.
Purpose and legal basis of the processing
The data provided is processed for the following purposes:
1) The data will be processed for the correct performance of accounting, tax,commercial, technical and for all company activities in general relating to the existing relationship;
Methods of treatment
The data will be processed both with paper and electronic/IT/telematic tools and supports, in full compliance with the law, according to principles of lawfulness and correctness and in order to protect the
its confidentiality;
Optional provision
The provision of data is optional and not mandatory;
Consequences of any refusal
The refusal to provide the data or the complete opposition to their treatment, may in any case make it impossible to continue any commercial and contractual relationship or of any other nature
with our company; the refusal to use the data for sending advertising material/communications will not have any consequence on present or future relationships;
Subjects or categories of subjects (recipients) to whom the data may be communicated or disseminated
The data may be disclosed to third parties only to fulfill legal or contractual obligations. The data will in no case be disclosed;
Persons authorized to process
The data will be processed exclusively by specifically authorized company employees in the administrative and commercial sector;
Parent companies, subsidiaries or associated companies pursuant to article 2359 of the civil code or companies subject to common control, will be able to access information relating to Customers or Suppliers for administrative-accounting purposes or those connected to the performance of activities of an organisational, administrative, financial and accountant, regardless of the nature of the data processed. In particular, the internal organizational activities, those functional to fulfillment, pursue these purposes
of contractual and pre-contractual obligations, the management of the employment relationship in all its phases, the keeping of accounts and the application of the rules on tax, trade union, social security, health, hygiene and safety at work.
Automated decision-making processes (e.g. profiling)
No automated decision-making processes are managed, except for the consent of the interested party;
Rights of the interested party
You enjoy all the rights established by the European Regulation, such as the right to:
◉ request access to personal data and their rectification
◉ the cancellation of the same
◉ the limitation of the treatment
◉ the right to object to their treatment
◉ the right to data portability
◉ the right to lodge a complaint with the Supervisory Authority;
Transfers to third countries. There are no data transfers to third countries
Any transfers of personal data to a third country outside the European Union or to an international organization will take place on the basis of an adequacy decision by the Commission or, in the case of transfers referred to in articles 46, 47 or 49, second paragraph , of the European Regulation, on the basis of appropriate guarantees ed appropriate;
Duration of treatment
The data will be processed only for the time necessary for the purposes listed.
Below are the periods of use and storage of personal data with reference to the various purposes of treatment:
1) the data processed for the execution of the contractual relationship and for the underlying services will be kept for the entire duration of the contract itself and for a period of 10 years following the dissolution / termination / termination of the contractual relationship itself, unless the need arises of further retention, to allow A.J. GROUP ITALY S.R.L. the defense of one’s rights;
2) the data processed for the fulfillment of legal obligations will be kept by A.J. GROUP ITALY S.R.L. within the limits established by law.
3) the data will be processed for sending informative, institutional and promotional communications up to
any revocation of the consent given for this purpose;
4) the data will be sent to commercial partners for the sending of commercial communications
until the possible revocation of the consent given for this purpose;
5) the data processed for profiling purposes will be kept for 12 months, unless the consent given for this purpose is revoked.
Rights of access, cancellation, limitation and portability
The interested parties are entitled to the rights referred to in articles from 15 to 20 of the GDPR. By way of example, each interested party may:
1) obtain confirmation as to whether or not the personal data they view is being processed;
2) if a treatment is in progress, obtain access to personal data and related information
to the treatment as well as request a copy of the personal data;
3) obtain the rectification of inaccurate personal data and the integration of incomplete personal data;
4) obtain, if one of the conditions set forth in art. 17 of the GDPR, the cancellation of
personal data they view;
5) obtain, in the cases provided for by art. 18 of the GDPR, the limitation of the treatment;
6) receive personal data concerning him in a structured format, commonly used and readable by
automatic device and request their transmission to another holder, if technically feasible.
Right to object
Each interested party has the right to object at any time to the processing of his personal data carried out for the pursuit of a legitimate interest of the Data Controller. In case of objection, your personal data will no longer be processed, provided that there are no legitimate reasons for proceeding with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.
Right to withdraw consent
In the event that consent is required for the processing of personal data, each interested party may also revoke the consent already given at any time. Consent can be revoked,writing an email to stefania@ajgroupitaly.it inserting “Privacy” in the subject.
Right to lodge a complaint with the Guarantor
Furthermore, each interested party may lodge a complaint with the Guarantor for the Protection of Personal Data in the event that he believes that the rights he holds under the GDPR have been violated, according to the methods indicated on the website of the Guarantor, accessible at the address: www.garanteprivacy.it. The exercise of the rights of the interested party is free.
Where the subject who provides the data is under the age of 18, such processing is lawful only if and to the extent that such consent is given or authorized by at least one of the holders of parental responsibility for which the identification data are acquired and copy of the identification document.
Data Controller and Personal Data Protection Officer (RPD)
The data controller of personal data is: A.J. GROUP ITALY S.R.L., with registered office in VIA DELLA FIORANDOLA, 46 AREZZO (PR) – Cap 52100, VAT number 2310810516, in the person of the Representative
legal.