Pursuant to Article 13 of the EU Regulation 2016/679
The European Regulation 679/2016 or "General Data Protection Regulation" replaces in full the Legislative Decree 30 June 2003 n. 196. The regulation establishes, in particular, that the interested party (hereinafter also “data subject”) must be previously informed pursuant to article 13 regarding the use of data concerning him and that the processing of personal data is only permitted with the express consent of the data subject except in the foreseen cases, governed by art.6, in particular in the points: b) the treatment is necessary to the execution of a contract of which the data subject is a part or to the execution of pre-contractual measures adopted at the request of the same; c) processing is necessary to fulfill a legal obligation to which the data controller is subject. To this end, pursuant to and for the purposes of article 13 of the Regulations, the company Scuola del Cuoio srl, located in Piazza Santa Croce 16, 50122 - Florence, as "Data Controller", provides the following information.
The person in charge of the data processing is Mrs. Barbara Gori, email firstname.lastname@example.org - phone +39 055244534, who is also responsible for processing.
The data protection officer (dpo) is not named.
The purpose of the treatment is to complete the existing contract:
- To pay for the supply of products or services in the case of a supply
- To provide the provisions of the contract in the event of a sale
The legal basis of the treatment consists of the commercial relationship created by the sale or purchase of goods and / or services, in relation to Article 6 paragraph b and c of the aforementioned regulation
The personal data you provide as data subject (the physical person to whom the personal data refer) will be processed in compliance with the laws in force, using manual, computerized and telematic tools, with logic strictly related to the purposes themselves and may involve all the operations listed by Article 4, paragraph 2 of the regulation. In any case, all data are processed in compliance with the law and the confidentiality obligations imposed by the same. Personal data are processed as part of the normal activity of the Data Controller, for the purposes of describing the macro process (business consulting), the purposes for which the data are processed, and all the management and operational activities connected to it (ex. invoicing, credit protection, other administrative, management and organizational services). In relation to the aforementioned purposes, no "particular" data (former sensitive data) referable to the data subject will be processed.
The provision of personal data to the Data Controller for the purposes indicated above is mandatory because without these data we may not be able to provide you, in whole or in part, the activity requested by you.
The recipients of the data (exclusively for the purposes indicated above and always limited to that of strict competence in relation to the specific relationship between you and the Data Controller), according to the cases, may or must be disclosed to the subjects or categories of subjects below listed: public autorities for inspection and control activities, expressly delegated to them by the Law or which they are institutionally responsible for;
Companies and professionals who perform accounting checks and audits, or payroll management, on our behalf - Companies of our trust who perform tasks of a technical or organizational nature on our behalf; the same also applies to the subjects already indicated in the present informative report to which the data are communicated.
Geographical area of processing: Your personal data will always be processed within the European community.
Conservation: Your personal data will be processed exclusively for administrative and accounting purposes for a period not exceeding that established by the current tax legislation for the conservation of documents (10 years). Even a request for cancellation can not prevail over this type of conservation.
Profiling: Your data will not be subjected to a decision based solely on automated processing, which produces legal effects that affect it or that significantly affects its person.
Cancellation and Correction: you have the right to know, at any time, what are your data at the individual data controllers, that is at the Data Controller or at the above mentioned persons to whom we communicate them, and how they are used; you also have the right to have them updated, supplemented, corrected or canceled, to request their block and to oppose their treatment. For the exercise of your rights, as well as for more detailed information about the subjects or categories of subjects to whom the data are communicated or who become aware of it as managers or agents, you can contact the person in charge of the treatment identified at the beginning of this information.
Rights: At any time you can exercise your rights towards the Data Controller, pursuant to article 15 and following of the regulation.
Complaints: You can also contact the Italian Data Protection Authority using the following link http://www.garanteprivacy.it/home/footer/contatti or the European Data Protection Supervisor using the following link: http://www.edps.europa.eu/EDPSWEB/edps/lang/it/EDPS
Florence, May 24th 2018