In accordance with “Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)”, hereinafter also referred to as “The Regulation”, - article 13, please note that personal data which you voluntarily make available to iGuzzini illuminazione S.p.A. (hereinafter also referred to as “the Company” or “iGuzzini”) will be processed in compliance with the regulations in force concerning the protection of personal data and, in any case, the principles of confidentiality on which the Company's activities are based.
1. Purpose and legal basis of the processing
The personal data, exchanged or acquired from one another by the Parties upon entering into and fulfilling the existing Contract, including personal identification and tax details, will be processed (for the definition of ‘processing’, see art.
4, sec. 1, No. 2 of the Regulation) for purposes linked to compliance with regulatory provisions and rules in force for civil, fiscal and tax (legal and administrative) matters, as well as measures issued by the competent authorities, to activities relating to management of the contractual relationship in compliance with the regulations in force, to the need to mount a defence of a right in court or other settings envisaged by the rules and regulations in force.
The legal basis of the processing is (by way of example) the establishment, fulfilment and, if necessary, termination of supply/purchase/professional cooperation contracts/ contracts of another nature (Contract) entered into by you and the Company, and the obligations linked to the contracts and/or directly and/or indirectly deriving from them.
2. Period for which the data is stored
The data supplied will be stored for the term of the Contract with our Company and, subsequently, for the whole time necessary for the fulfilment of regulatory obligations for administrative - accounting, civil, fiscal and tax (legal and administrative) purposes.
3. How the data is used
Processing will be carried out using equipment suitable for guaranteeing the security and confidentiality of the data in compliance with Chapter II (Principles) and Chapter IV (Controller and Processor) of the Regulation. The processing may also be carried out using automated means suitable for saving, managing or sending the data. Your personal data is processed by means of the operations indicated in art. 4, No. 2) of the Regulation, to which you are referred for all appropriate purposes.
In response to a written request from the data subject, the Controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the Controller may charge a reasonable fee based on administrative costs. The data subject's right to obtain a copy of the data shall not adversely affect the rights and freedoms of others.
4. Scope of circulation of the data
Your personal data may be revealed to workers in the Accounting-Finance-Control-Legal Department, Sales Department, Purchasing Department, Information Technology Department, Departments of reference of single Contracts and in general all subjects who need access to your data in order to carry out activities supporting, useful and complementary to those of our Company concerning the contractual relationship between us, within the limits strictly necessary to carry out the above-mentioned tasks. The data may also be processed by third party companies which perform activities on behalf of the Controller, in their capacity as external processors (by way of example: credit institutions, professional firms, suppliers/consultants which manage and/or participate in the management and/or maintenance of electronic and/or telematic means used by us for the times strictly necessary for optimum provision of that service).
Without Your express consent (pursuant to art. 6, letters b) and c) of the Regulation), the Controller may disclose your data for the purposes referred to in art. 1 to oversight bodies, judicial authorities and to all other subjects to which disclosure is required by law for the fulfilment of the above-mentioned purposes.
5. Data transfer abroad
The data will not be transferred outside the European Union. In any case, it shall be understood that, where necessary, the Controller shall have the right to move the location of the servers to countries outside the EU. The Controller guarantees as of now that in such cases the transfer of the data outside the EU will be in compliance with article 44 and subsequent articles of the Regulation and with the applicable legal provisions, if necessary, entering into agreements which guarantee an adequate level of protection.
6. Provision of data and consequences of refusal
The provision of data for the purposes set out in sec. 1 is mandatory. The data acquired, which is the subject of this information, is essential for completion of the contractual relationship and for subsequent fulfilment of the resulting contract. Refusal to provide the data requested and/or the provision of inaccurate data could render the following impossible:
a. compliance with the rules and regulations in force for civil, fiscal and tax (legal and administrative) matters, as well as measures issued by the competent authorities;
b. guarantee of correct regulatory, technical and economic management of the contractual relationship;
c. taking legal action or mounting a legal defence of a right in court or other settings envisaged by the rules and regulations in force.
7. Exercising of rights
You, the data subject, can exercise all of the rights envisaged by art. 15 of the Regulation, specifically the rights to:
a. obtain confirmation as to whether or not personal data concerning you is being processed, even if not yet recorded, and its communication in an intelligible form;
b. obtain an indication of: i) the source from which the personal data originated; ii) the purposes and methods of the processing; iii) the logic applied in the case of processing using electronic means; iv) the identity and contact details of the controller, processors and any designated representative pursuant to art. 3, sec. 1, of the Regulation; v) subjects or categories of subjects to which the personal data may be disclosed or which may become aware of it in their capacity as designated representative in the territory of the State, processors or persons authorised to process the personal data under the direct authority of the controller or the processor;
c. obtain: i) data updating, rectification, or if required having incomplete data completed; ii) erasure, anonymisation or blocking of data processed unlawfully, including data whose storage is not necessary for the purposes for which it was collected or subsequently processed; iii) a statement that the operations indicated in letters i) and ii), even regarding their content, have been brought to the attention of those to whom the data has been disclosed or communicated, except if that requirement proves impossible or involves a clearly disproportionate effort in comparison with the right protected;
d. for legitimate reasons, to object to all or part of the processing of personal data relating to you, even if
pertinent to the purpose for which it was collected;
e. also obtain, pursuant to art. 15 of the Regulation, confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the following information:
i) the categories of personal data concerned; ii) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
iii) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; iv) the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; v) the right to lodge a complaint with a supervisory authority, in accordance with art. 77 and subsequent articles of the Regulation; vi) where the personal data is not collected from the data subject, any available information as to the source; vii) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject; viii) where personal data is transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer;
f. where applicable, the data subject shall also have the rights indicated in articles 16 to 21 of the Regulation (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object).
Please note that the Company undertakes to respond to your requests within one month at the latest of receiving them.
That deadline could be extended depending on the complexity or number of requests. The Company will provide you with an explanation of the reason for any extension within one month of receiving your request.
The answer to your request may be sent in writing on paper or in electronic format.
8. How to exercise your rights
You, the data subject, can exercise your rights pursuant to art. 15 of the Regulation at any time in the following ways:
i. by sending an e-mail to the address: firstname.lastname@example.org
ii. by sending an written request to the Company registered office indicated in the article 9)
9. Controller to process the personal data
The Controller for your data is iGuzzini illuminazione S.p.A. with registered office in Recanati (Macerata province) Via Mariano Guzzini 37, represented by the Legal Representative Cristiano Venturini. Any request relating to personal data processed by iGuzzini illuminazione S.p.A. can be sent to the Company registered office, or can be e-mailed to email@example.com.
iGuzzini illuminazione S.p.A.