Dear Supplier, this Information is given pursuant to Art. 13 of (EU) Regulation 2016/679 (hereinafter “GDPR”) on the protection of natural persons with regard to the processing of personal data.
Purposes and legal basis of the processing
Your personal data will be processed for the following purposes:
- fulfilling obligations arising from a contract or responding, before and after execution thereof, to specific requests of yours;
- fulfilling administrative, accounting, statutory and tax obligations, and EU and / or non-EU regulations;
- managing any litigations;
- managing any supplier qualification and monitoring process.
Data retention period
Your personal data will be retained also after termination of the contract for the fulfilment of any obligations connected with or arising from the contract for the period prescribed by the laws in force at a given moment and according to the limitation period of the rights arising from the contract itself.
Data provision and consequences in case of refusal
Data must be provided in accordance with all legal and contractual obligations; therefore, any refusal to provide it in whole or in part may cause the Company not to be able to execute the contract or properly perform all the obligations arising therefrom.
Categories of recipients
Solely for the purposes specified above, all data collected and processed may be disclosed to in-house staff authorised to process data because of their respective duties as well as to the following categories of third parties: • credit institutions; • professionals or services companies operating on behalf of our company; • lawyers and legal advisors; • public and private bodies, also after inspections and checks. Such recipients, where they should process data on behalf of our Company, will be designated as persons responsible for the processing with a specific contract or other legal act.
Data transfer to a third-party country and / or an international organisation
Your personal data will not be transferred to extra-EU third-party countries.
Rights of the interested parties
You are entitled (see Art. 15 to 22 of the GDPR) to request access to your personal data from our Company and rectify it where inaccurate, cancel it or limit its processing where the conditions for it are met, or oppose its processing in the absence of a legitimate interest, as well as obtain portability of data provided by you only where it is processed automatically based on your consent or on the contract. You are also entitled to revoke the consent you have given for processing purposes, without prejudice to the processing carried out until revocation. You also have the right to file a complaint with the competent supervisory authority, the Data Protection Authority (the “Garante”).