PRIVACY POLICY - CLIENTS AND SUPPLIERS
REG EU 2016/679
In relation to processing of personal data provided, you are informed that:
Controller
The Controller is EXOR International S.p.a., with registered office in San Giovanni Lupatoto (VR), Via Monte Fiorino n. 13 - 37057, tel +39 0458750404, e-mail: privacy.it@exorint.com, pec: exorint@pec.exorint.com, the “Company”.
Types of data processed, purposes and legal basis of processing
The following personal data is collected and processed: common personal data (company name, first name and surname, date and place of birth, role at the company, address, VAT number, tax code, bank information, personal details and contact data: e-mail, telephone number, mobile telephone number), relating to: customers and supplier companies/entities and contact people-employees-collaborators-subcontractors of customers/suppliers, possibly communicated by them, for: a) pre-contractual purposes and fulfilment of the contractual relationship, b) administrative-accounting-tax and legal obligations associated with invoicing and management of the contractual relationship.
The legal basis of data processing is fulfilment of contractual obligations for the purposes indicated in letter a); legal obligations, for the purposes indicated in letter b).
Disclosure of the data to third parties – Recipients of the data
The Company may disclose the data processed for the above purposes to: people at the company responsible for processing; external parties in the following categories: external consultants, service companies (transport, shipping, marketing services and IT companies), the company sales network (agents), banks, auditing entities and bodies.
Transfer of the data to third countries
The Controller does not transfer the data processed to third countries. However, in case of any transfer to third countries, said transfer will take place in accordance with current regulations on transfer of data to third countries at the time.
Methods of processing, data storage period and criteria
The data will be processed on paper and in digital format. The data will be processed by the Controller for the period necessary to achieve the aforementioned purposes and, when they are achieved, for the further period laid down by law on conservation of contracts and administrative data and/or for legal defence (ten years from the last use and/or event interrupting the statute of limitations).
Profiling and automated decision-making processes
No automated decision-making processes (e.g. profiling) are used for processing.
Providing of data
It is obligatory to provide the data for fulfilment of the contractual relationship (2.a.) and legal purposes (2.b.). Failure to provide the data will make it impossible to pursue the purposes.
Rights of the data subject, withdrawal of consent and right to lodge a complaint with the supervisory authority
The data subject has the right to request, at any moment, access to their personal data, its rectification, erasure, restriction of processing, to object to processing, to withdraw the consent given and also the right to data portability, if applicable, by contacting the Controller as indicated below.
In case of a presumed violation and if the requirements are satisfied, the data subject also has the right to lodge a complaint with a data processing supervisory authority in the EU member State.
Contacts and requests
To object to processing or to exercise your rights under current personal data protection regulations and/or to obtain a complete list of the external processors appointed and/or to obtain information on transfer of the data to non-EU countries and the related guarantees, you can send a request to privacy.it@exorint.com or contact the following number +39.045.8750404.
