INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA RELATED TO CONTRACTS WITH CUSTOMERS IN ACCORDANCE WITH EU REGULATION 2016/679 (“GDPR”)
DATA CONTROLLER
KUPRAL S.P.A.
Via Calvisano n. 30
Leno (25024 BS)
Tel. +39.030.9038794
indirizzo e-mail: privacy@kupral.com
(The “Company”)
Personal data processed
The term “Data” includes data on natural persons processed by the Company to agree and execute contractual relationships with Company customers that are legal entities (Customer), such as data relating to legal representatives signing contracts on behalf of Customers, in addition to Customer employees/consultants involved in contract activities. In the latter case the Customer will be the source of the data
| DATA PROCESSING PURPOSES | LEGAL BASIS FOR PROCESSING DATA | DATA RETENTION PERIOD |
|---|---|---|
|
Purposes relating to establishing and executing the contractual relationship between the Customer and the Company. To fulfill administration/accounting requirements, such as accounts and treasury management, invoicing (e.g. logging and checking invoices) in accordance with legislation. |
Execution of the contract with regard to data on legal representatives. Legitimate interest with regard to data on Customer employees/consultants involved in contract activities. Requirement to meet the Company’s legal obligations. |
Duration of the contract and after completion, 10 years. For the duration of any legal disputes until completion of the terms of implementation outlined in legal remedies. |
| Out-of-court debt recovery. If necessary to ascertain, exercise and/or safeguard Controller rights in legal proceedings. | Legitimate interest. | |
| Control of logical access to company information systems, in order to guarantee the safety of people and property. | Legitimate interest. | 6 months |
Once the aforementioned retention period has lapsed the data will be destroyed or made anonymous compatibly with technical erasure and backup procedures.
DATA PROVISION
Data must be provided to agree and execute the contract. Refusing to provide Data therefore means that it will not be possible to establish the contractual relationship and/or fulfil the resulting contractual obligations.
DATA RECIPIENTS
Data may be communicated to external parties operating as data controllers, for example supervisory bodies and authorities and public or private parties in general authorised to request data.
Data may be processed on behalf of the data controller by external parties appointed as data processors carrying out specific activities for the controller, such as dealing with accounting, tax and insurance requirements, sending correspondence, managing takings and payments etc.
PARTIES AUTHORISED TO PROCESS DATA
Data may be processed by employees in company departments who are responsible for carrying out the activities outlined above and have been authorised to process the data and have received suitable operating instructions.
TRANSFER OF PERSONAL DATA TO COUNTRIES NOT BELONGING TO THE EUROPEAN UNION
Personal Data will be processed within the European Union and stored on servers located within the European Union.
DATA SUBJECTS’ RIGHTS- COMPLAINT TO THE SUPERVISORY BODY
By contacting Kupral S.p.A. via e-mail sent to privacy@kupral.com, data subjects can ask the Company for access to personal data, or the correction or deletion of personal data, and also have the right to restrict processing of the data in the cases set out in article 18 of the GDPR, and object to processing in the case of legitimate interests of the controller.
Furthermore, in the case where processing is based on consent or a contract and carried out with automated tools, data subjects have the right to receive the personal data in a structured, commonly used and machine-readable format, and to transmit the data to another data controller without obstruction. Data subjects have the right to withdraw consent at any time in relation to data processed for marketing purposes, and object to data being processed for these purposes. Data subjects have the possibility of stating a preference for being contacted for the aforementioned purposes through conventional methods and objecting to receiving communication through automatic methods only.
Data subjects have the right to lodge a complaint to the competent Supervisory Authority in the member state where they are resident or where they work, or the member state where the alleged breach took place.
Data subjects have the right to withdraw consent at any time in relation to data processed for marketing purposes, and object to data being processed for these purposes. Data subjects have the possibility of stating a preference for being contacted for the aforementioned purposes through conventional methods and objecting to receiving communication through automatic methods only.
INFORMATION NOTICE ACKNOWLEDGEMENT
By signing this document, I hereby confirm that I have received and read the information on privacy and undertake to provide it for employees/consultants in the company I represent.
_________________________(location),
__/__/____(date) Stamp and signature _____________________________