Legal Notice and Privacy Policy

Privacy Policy pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter, “GDPR”)

EU Regulation No. 2016/679 protects the confidentiality of personal data to safeguard the freedom and rights of data subjects and therefore imposes a series of obligations on those who “process” personal information relating to other parties. In light of the above, therefore, we are pleased to inform you, pursuant to Article 13 of the GDPR in question, that INVERNIZZI S.p.a. processes data concerning you and your company without your express consent (Art. 6 lett. b), e) GDPR) for purposes related to the management of ordinary commercial relationships and, specifically, for the compilation of registry lists, for accounting, invoicing, creditor management and for the fulfillment of all obligations provided for by current regulations.

The processing of your personal data is carried out by means of the operations indicated in Art. 4 No. 2) GDPR and specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data is subject to both paper and electronic processing. The Data Controller will process personal data for the time necessary to fulfill the above purposes and in any case for no more than 10 years from the termination of the relationship for administrative/accounting purposes. The processing may be carried out using both computerized and manual tools, in compliance with all necessary precautions to ensure the security and confidentiality of information.

Your data may also be communicated to third parties, exclusively for technical and operational requirements strictly connected to the purposes stated above and in particular to the following categories of subjects:

a) entities, professionals, companies or other structures appointed by us to carry out processing related to the fulfillment of administrative, accounting and management obligations linked to the ordinary conduct of our business activity, including for debt recovery purposes;

b) to public authorities and administrations for purposes related to the fulfillment of legal obligations;

c) banks, financial institutions or other parties to whom the transfer of the aforementioned data is necessary for the conduct of our company’s activity in relation to our fulfillment of contractual obligations undertaken toward you.

In your capacity as data subject, you have the rights referred to in Art. 15 GDPR and specifically the rights to:

1. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in intelligible form;

2. obtain indication of: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic tools; d) the identification details of the data controller, processors and the representative designated pursuant to Art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representative in the territory of the State, as processors or authorized persons;

3. obtain: a) updating, rectification or, when interested, integration of data; b) cancellation, transformation into anonymous form or blocking of data processed in violation of law, including data whose retention is not necessary in relation to the purposes for which the data was collected or subsequently processed; c) attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data has been communicated or disseminated, except in cases where such fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;

4. object, in whole or in part: a) on legitimate grounds to the processing of personal data concerning you, even if pertinent to the purpose of collection. Where applicable, you also have the rights referred to in Arts. 16-21 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

 

Methods of Exercising Rights

You may exercise your rights at any time by sending:

• a registered letter with return receipt to: Invernizzi Spa Strada Provinciale per Gussola – 26030 Solarolo Rainerio (CR)
• an email to: privacy@invernizzi-spa.com with subject “PRIVACY COMMUNICATIONS”

The data controller is Invernizzi Spa with registered office at Strada Provinciale per Gussola – 26030 Solarolo Rainerio (CR).

The updated list of processors and authorized persons is kept at the registered office of the Data Controller.