Pursuant to Articles 13 and 14 of Regulation 2016/679/EU (hereinafter "GDPR") TEMPINI 1921 SRL (hereinafter "Controller") with registered offices in CASTENEDOLO – BS – Via Dei Santi, 149, in its capacity as "Data Controller”, hereby informs you that your personal data, collected for the purpose of concluding the contract with the Client and/or in the context of the execution and/or stipulation of the same, will be handled in compliance with the aforementioned legislation, to guarantee the rights, fundamental freedoms, as well as the dignity of natural persons, with particular reference to privacy and personal identity. We inform you that if the activities provided to you foresee the processing of personal data of any third parties, as the Controller of their Data, it will be your responsibility to ensure that you have complied with the provisions of the legislation with regard to the subjects concerned, in order to make their processing by us legitimate.
Origin, purpose, legal basis and nature of the processed data
Processing of your personal data, directly provided by you, is carried out by TEMPINI 1921 SRL for the purpose of concluding the contract with the Client and/or in the execution and/or stipulation of the same.
In addition, it is possible that personal data of third parties, communicated by the Client to the Company, may be processed. With regard to this possibility, the Client acts as an independent data controller and assumes the consequent legal obligations and responsibilities, relieving this Company of any dispute, claim and/or request for compensation for damage due to processing, that may be received by the Company from the third parties concerned.
In compliance with the current legislation on the protection of personal data and without the need for specific consent from the Data Subject, the Data will be stored, collected and processed by the Company for the following purposes:
- a) fulfilment of contractual obligations, execution and/or stipulation of the contract with the Client and/or management of any pre-contractual measures;
- b) fulfilment of any legal obligations, compliance with the fiscal and tax requirements resulting from business activities and obligations related to administrative and accounting activities;
The legal bases of processing for purposes a) and b) above, are articles 6.1.b) and 6.1.c) of the Regulation.
Provision of Data for the aforementioned purposes is optional, but failure to provide these Data and refusal to do so, would make it impossible for the Company to execute and/or stipulate the contract and provide the services therein.
We remind you that for processing carried out for the purpose of sending direct advertising material or direct sales, or for carrying out market research or commercial communications in relation to products or services similar to those used by the Client, the Company may use e-mail addresses or personal data in accordance with, and within the limits, permitted by art. 130, paragraph 4 of the Code and by the provision of the Data Protection Supervisor of June 19, 2008 including in the absence of explicit consent. The legal basis for data processing for this purpose is art. 6, paragraph 1, letter f) of the GDPR, without prejudice to the possibility of opposing such processing at any time, following the instructions provided in the "Rights of the data subject" section of this Information note.
Communication
Data may be communicated to third parties that are appointed as persons in charge of processing pursuant to Article 28 of the GDPR and in particular to banks and credit institutions, companies working in the insurance sector, providers of services that are strictly necessary for performing business activities, or to consultants of the company, where this proves necessary for fiscal, administrative or contractual reasons or for requirements protected by current regulations.
Your personal data, or third-party personal data controlled by you, may also be communicated to external companies, identified each time, to which TEMPINI 1921 SRL entrusts the execution of obligations resulting from the assignment received. Only the data necessary for the activities requested will be transmitted. All employees, consultants, temporary workers and/or any other "natural persons" who carry out their activities based on instructions received from TEMPINI 1921 SRL pursuant to art. 29 of the GDPR, are appointed "Data Processors" (hereinafter also "Processors"). TEMPINI 1921 SRL gives adequate operating instructions to any appointed Processors or persons in charge of processing, with specific reference to the adoption of, and compliance with, security measures to guarantee the confidentiality and security of data. With reference to the aspects of personal data protection, the Client is invited, pursuant to art. 33 of the GDPR to report to TEMPINI 1921 SRL any circumstances or events from which a potential "breach of personal data (data breach)" may arise, to allow immediate assessment and adoption of any actions aimed at countering this event. This communication must be sent to TEMPINI 1921 SRL using the contacts listed below.
Your data will not be distributed.
The obligation of TEMPINI 1921 SRL to communicate data to Public Authorities, upon specific request, remains valid.
Transfer abroad
Transfer of your personal data abroad may occur if this is necessary to manage the assignment received. For processing of information and data that may be communicated to these subjects, equivalent levels of protection for the processing of staff's personal data will be required. In any case, only the data necessary to achieve the intended purposes will be communicated and the regulatory instruments foreseen by Chapter V of the GDPR will be applied.
Methods, processing logics and storage times
Your data are collected and recorded in a lawful and correct manner for the purposes indicated above, in accordance with the principles and provisions of art. 5 c 1 of the GDPR.
Personal data processing is carried out using manual, computerised and electronic means, with logics that are strictly related to the actual purposes and, in any case, in such a way as to ensure security and confidentiality.
Personal data will be processed by TEMPINI 1921 SRL for the entire duration of the assignment and also subsequently to assert or protect their rights or for administrative purposes and/or to execute obligations resulting from the standards and regulatory framework applicable at the time, and in compliance with the specific legal obligations on data storage.
Rights of the Data Subject
In compliance with, and within the limits and under the conditions established by legislation on personal data protection regarding exercising the rights of the Data Subject1, with regard to the processing covered by this Information note, as a Data Subject you have the right to request confirmation that your personal data are being processed and access personal data concerning you. In relation to these data, you have the right to request their correction, cancellation and notification of their modification and cancellation to those who your data may have been transmitted to by our Organisation, as well as limitation of processing in the hypothesis foreseen by the regulation and the portability of the personal data - supplied by you - in the cases indicated by the regulation. You have the right to oppose processing of your data and, specifically, the right to oppose decisions that concern you if based solely on automated processing of your data, including profiling. If you believe that the way your data has been processed is in violation of the rules of the GDPR, you have the right to lodge a complaint with the Data Protection Authority pursuant to Article 77 of the GDPR.
If you wish to request further information on the processing of your personal data or to exercise your rights, you can contact, in writing, Erika Rizzi (privacy@tempini1921.it).
Data Controller
The Data Controller, pursuant to art. 4 of the GDPR, is TEMPINI 1921 SRL – Via Dei Santi, 149 – 25014 CASTENEDOLO – BRESCIA - P.IVA: 03640610980 - CF: 03640610980