Privacy

INFORMATIVE ART. 13 OF THE NEW EUROPEAN REGULATION 2016/679

We hereby inform you that the Regulation (EU) 2016/679 of the Parliament and the Council provides for the protection of persons and other subjects regarding the processing of personal data.

Pursuant to the aforementioned legislation, the processing of personal data will be based on principles of correctness, lawfulness, transparency and protection of confidentiality and of the rights provided.

According to the art. 13 of the GDPR., we provide the following information:


1. Legal basis, purpose and method of data processing

Personal data will be processed exclusively for purposes strictly connected and instrumental to the fulfillment of the obligations inherent in the existing relationship. In particular:

  • a) for entering personal data in the corporate computer databases;
  • b) for accounting purposes;
  • c) for management of receipts and payments;
  • d) for fiscal management;
  • e) to fulfill the obligations provided for by civil and fiscal law, by regulations, by EU legislation;
  • f) for the protection of company assets

The legal basis for the processing for the purposes referred to in letters a) to c) is art. 6 (1) (b) of the Regulation (“the necessary processing for the execution of a contract of which the interested party is a party or to the execution of measures pre-contractual provisions adopted at the request of the same”), for letters d) and e) is the art. 6 (1) (c) of the regulation (“the processing is necessary to fulfill a legal obligation to which the data controller is subject”), while for the letter f) this base is represented by art. 6 (1) (f) of the regulation (“the processing is necessary for the prosecution of the legitimate interest of the data controller or third parties (...)”).

Any further processing connected to the contractual constraint will find its legal basis in the aforementioned art. 6 (1) (b) of the regulation.

The processing of personal data will be carried out through paper and computer supports by the owner, the manager and the persons in charge with the observance of every precautionary measure, which guarantees its security and
confidentiality.


2. Nature of data collection and consequences of failure to provide data
The provision of personal data is mandatory in order to fulfill the obligations arising from the contract and, in general, to comply with the law.
Failure to do so could make it impossible for us to fulfill the contractual obligations or activities required by current regulations.


3. Communication and dissemination of data
Personal data for the purposes of the execution of the contract and for the purposes indicated above, may be communicated:

  • to all natural and legal persons (legal, administrative, tax, auditing firms, couriers and freight forwarders, data processing center, etc.) in cases where communication is necessary for the purposes described above:
  • to banks for the management of receipts and payments and for any requests for credit/loans;
  • to factoring or debt collection companies;
  • to our collaborators and specially appointed employees and in the context of their duties;
  • other natural or juridical persons whom it should become necessary to involve for the accomplishment of the purposes above illustrated.


4. Territorial scope
Your personal data will not be transferred to Recipients outside of the European Economic Area. If they were, in the future, the Data Controller processing Personal Data ensures that the processing of your Personal Data will be in compliance with the Applicable Regulations. Indeed, the transfers will be based alternatively on an adequacy decision or on the “Standard Model Clauses” approved by the European Commission.


5. Duration of processing
The data referring to you is kept in a form that allows the identification of the interested party for a period of time not exceeding that necessary for the purposes, listed in point 1, for which they have been collected or subsequently processed and according to the prescriptions required by current regulations.


6. Rights of the interested party Articles from 12 to 22 of 2016/679 (GDPR)
At any time you may exercise the rights provided to the data controller pursuant to articles from 12 to 22 of the New European Regulation 2016/679, which for your convenience we hereby reproduce.

1. The data controller shall take appropriate measures to provide the data subject with all the information referred to in Article 13 and 14 and the communications referred to from Articles 15 to 22 and Article 34 relating to processing in a concise, transparent, intelligible and easily accessible form, in simple and clear language, particularly in the case of information specifically intended for minors. The information is provided in writing or by other means, including, where appropriate, by electronic means. If requested by the interested party, the information may be provided orally, provided the identity of the interested party is proven by other means.

2. You have the right to obtain the following:

  • the source of personal data;
  • the purpose and manner of treatment;
  • the logic applied when processed by electronic instruments;
  • the identification details of the holder, those responsible and the designated representative under Article 5, paragraph 2;
  • persons or categories of persons to whom personal data may be disclosed or who may become aware of it as a designated representative in the territory of the State, of those responsible or in charge.

3. You have the right to obtain:

  • updating, rectifying or, when you are interested in, integrating data;
  • the deletion, anonymous transformation or blocking of data processed in violation of the law, including those which do not need to be retained in relation to the purposes for which the data was collected or subsequently processed;
  • the evidence that the transactions referred to in the letters a) and b) have been brought to the attention, including with regard to their content, of those to whom the data has been disclosed or disseminated, except where such fulfillment proves impossible or involves use of resources that are manifestly disproportionate to the law protected.

4. The person concerned has the right to oppose, in whole or in part:

  • for legitimate reasons for the processing of personal data about it, although relevant to the purpose of collection;
  • to the processing of personal data relating to it for the purpose of sending advertising material or direct sales or for the purpose of market research or commercial communication.

The rights referred to in the article above can be exercised by request addressed without formality to the holder or manager through the contact details below, also through an appointee, to which suitable feedback is provided without delay.


7. Owner of the processing and contact information
The owner of the treatment is the company Bignami SpA, based in via Lahn 1, 39040 Ora (BZ) in the person of Mr Luciano Berti.
You can contact the owner at the following contact details:


8. Privacy Guarantee Complaint
Those concerned who believe that the processing of personal data reported to them through this site is in breach of the rules have the right to complain to the Guarantor, as provided for by art. 77 of the Regulation itself, or to take appropriate legal proceedings (Article 79 of the Regulation), whose contacts are published in the website http://www.garanteprivacy.it.