INFORMATION ON THE PROCESSING OF PERSONAL DATA.
NEROSUBIANCO S.R.L. with registered office in Mantova (MN), Corso Garibaldi 157, cap 46100, as owner of the processing of personal data (hereinafter “Owner”), issues this information to the interested party in accordance with European and Italian regulations on the protection of personal data.
Purpose and legal basis of the treatment
The Owner treats the Supplier’s personal data in order to take pre-contractual measures, to fulfill contractual and regulatory obligations related to the business relationship and, in general, to properly manage the business relationship.
The legal basis of the treatment is the need for the pursuit of the above-mentioned purposes.
Period of data retention
The Owner will process the Supplier’s data for the entire duration of the commercial relationship and, subsequently, for the fulfilment of all eventual obligations connected with or deriving from the establishment of the same, for the period prescribed by law and according to the limitation period of the rights arising from the commercial relationship, without prejudice to further storage for the time necessary for the definition (however reached) of any disputes that may arise.
Nature of data conferment and consequences in case of refusal
The conferment of data is necessary and therefore any refusal to provide them in whole or in part may make it impossible for the Owner to pursue the above purposes.
Categories of recipients
The Data Controller will not disseminate the data, but intends to communicate them to internal figures authorized to the treatment because of their duties, as well as credit institutions, associations and / or business organizations, professionals or service companies and public and private entities, including as a result of inspections and audits.
These recipients, should they process data on behalf of the Data Controller, will be appointed as data processors with a specific contract or other legal act.
Transfer of data to a third country and/or international organization
Your personal data will not be subject to transfer to non-European third countries.
However, the Data Controller reserves the possibility to use cloud services: in this case, the providers of such services will be selected from among those who provide adequate guarantees, as provided for by art. 46 GDPR.
Rights of the interested parties
The data subject has the right to ask the Data Controller to access their personal data and to rectify them if inaccurate, to delete them or limit their processing if the conditions are met, to object to their processing for legitimate interests pursued by the Data Controller, as well as to obtain the portability of the data personally provided only if they are subject to automated processing based on consent or contract. The interested party also has the right to revoke the consent given for the processing purposes that require it, without prejudice to the lawfulness of the processing carried out until the time of revocation.
In order to exercise his/her rights, the interested party can use the form available at the link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and forward it to the following address: firstname.lastname@example.org. The interested party also has the right to lodge a complaint with the competent supervisory authority, Garante per la protezione dei dati personali (www.garanteprivacy.it).