on the processing of personal data
pursuant to Art. 12, 13 and 14 of General Data Protection Regulation (EU) 2016/679 – GDPR
Dear customers and suppliers,
Data controller is:
Via Johann-Georg-Mahl n. 40
39031 Brunico (BZ)
T +39 0474 370 350
F +39 0474 370351
What is the purpose of the data processing?
Your data will be processed for the purpose of fulfilling our business relationship with you, any failure to provide the data may prevent us from processing your enquiries / orders or placing orders with your company.
Which data might be processed?
In principle, we might process the following categories of personal data:
- anagraphical data (name, address, tax number, etc.),
- operational data (data regarding the organization, projects, employees) and
- statistical data on sales.
This data is stored and processed by us within the scope of our business relationship (e.g. desired delivery of goods to you / us, your provision of services to us) and, if necessary, transmitted to third parties, only within the scope of our business relationship.
Your data will not be transferred to countries outside the EU.
Profiling and automated decision-making are not being used.
Who might get your personal data?
Your data will not be distributed, it will be treated confidentially by our employees and collaborators who have been expressly designated therefore. Our employees have been adequately trained in this respect and work under our direct supervision and responsibility.
Your personal data will only be transferred to third parties if this is necessary for the purpose of processing the contract, enquiry and/or for invoicing purposes or if you have consented to this in advance.
In principle, your data may be forwarded to the following external recipient categories within the scope of our business relationship:
- tax consultants,
- public administration as well as authorities if legal obligations require it,
- legal advisors (e.g. for consultation, in case of claims, etc.) and
- any natural or legal person, public or private, if the communication of the data proves to be necessary or obligated by law.
Our service providers are bound by contract and are obliged to treat your data confidentially.
How long will we store your data?
The storage duration is determined by the duration of our business relationship, and also by the legal storage obligations and legal duties applicable to us. The data processed based on your consent will be stored until revoked.
What is the legal basis for the data processing?
The legal bases for the data processing are the following:
- the fulfilment of our pre-contractual and contractual obligations towards you,
- the processing is necessary for compliance with a legal obligation to which we are subject (for example: documentation obligations, tax laws, etc.),
- your consent and
- our legitimate interests as a company.
What are you rights in respect of data processing?
You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed; if this is the case, you have the right to be informed of such personal data and to receive the information specified in Art. 15 GDPR.
You have the right to request to correct inaccurate personal data concerning you and, if necessary, to complete incomplete personal data.
You have the right to request to delete your personal data immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purposes for which it was collected (right to deletion).
You have the right to request to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. for the duration of our examination if you have lodged an objection to processing.
You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from our side, under certain circumstances, e.g. if the processing is based on consent and the processing is carried out with the aid of automated procedures (right to data transferability, Art. 20 GDPR).
You have the right to object at any time, on grounds relating to your situation, to the processing of your personal data. We will then no longer process your personal data unless we can demonstrate compelling reasons for processing that are worthy of protection, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you is in breach of GDPR. You may assert this right with a supervisory authority in the Member State in which you are resident, at your place of work or at the place where the alleged infringement is committed. In Italy, the competent supervisory authority is “Garante per la protezione dei dati personali”.
How to exercise your rights?
You can exercise your rights, or in case of any other personal data processing enquiries, by contacting us via e-mail at email@example.com.