Information On The Processing Of Personal Data
We wish to inform you that your personal data (hereinafter “Data”) will be processed in compliance with European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and with Legislative Decree no. 196/2003.
Pursuant to art. 13 of the General Regulation on Data Protection and the Privacy Code, it is specified that L.B.Z. Lavorazioni Meccaniche s.r.l. – Via della Meccanica, 7 – 37139 Verona – ITALY, as Data Controller, processes your personal data in compliance with the principles of lawfulness, fairness and transparency and collects them in an appropriate, relevant and limited to the previously determined, explicit and legitimate purposes of the processing.
Purposes of the processing
Data Controller informs that the Data will be processed for the following purposes:
(a) purposes connected and instrumental to the execution of the existing contract;
(b) fulfillment of legal or regulatory obligations.
(c) administrative accounting purposes (e.g. organizational, financial, internal control, etc.);
(d) protection of the legitimate rights and interests of the Company or third parties, management of litigation, in the event of non-compliance, disputes, judicial disputes and / or transactions, credit recovery activities;
Legal basis of the processing
The legal basis of the processing of personal data of the Customer for the purposes ex lett. (a) and (b) is represented by the stipulation and execution of the Contract and by the applicable legal provisions, and the provision by the Customer of such data is mandatory and the refusal to supply them implies the impossibility to correctly manage the business relationship. In relation, however, to the purposes ex. (c) and (d) the legal basis of the processing of data of the Customer responds to the legitimate interests of the Company and / or third parties: in these cases, even if the provision of customer data is not mandatory under the law, it is anyway necessary because the data are strictly related to the management of the relationship, and the refusal to supply them could make it impossible to execute this relationship.
Duration of treatment and storage
The Data Controller will process the data for the time strictly necessary for the fulfillment of the purpose, or up to the duration of the service covered by the contract, subject to renewal.
Your data will in any case be kept for a period of 10 years from the expiry of the last service performed to fulfill the legal and regulatory obligations envisaged and to allow adequate technical assistance.
Method of treatment
The processing of your data is carried out by means of the operations indicated in art. 4, n. 2), of the General Data Protection Regulation and art. 4 of the Privacy Code and precisely: the collection, registration, organization, structuring, storage, consultation, processing, adaptation or modification, selection, extraction, comparison, use , interconnection, blocking, communication by transmission, dissemination or any other form of making available, limitation, deletion and destruction of data.
The Data will be stored on electronic and paper media using the measures deemed by the Data Controller most suitable to ensure adequate security of your data.
Your data will be processed only by personnel expressly authorized by the Controller.
Communication of your data
The data may be communicated to third-party companies or other subjects (purely by way of example of IT service providers, credit institutes, professional firms, consultants) who carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data controllers .
The list of appointed data processors is available from the Data Controller.
Without the need for express consent, Data Controller may communicate your data, as regards their respective and specific competence, to Accreditation Bodies, Certification Bodies, Ministries, Institutes, Associations and, in general, to any public subject or with respect to which the communication is mandatory by law or by virtue of bilateral agreements for the accomplishment of the aforementioned purposes. These subjects will process the data in their capacity as independent data controllers.
Data subjects’ rights
Data subjects have the right to obtain from the Controller, where appropriate, access to their personal data as well as rectification or erasure of such data or the restriction of the processing concerning them, and to object to the processing (pursuant to Articles 15 to 22 of the Regulation). Please contact firstname.lastname@example.org to lodge all requests to exercise these rights.
Right to lodge a complaint
If a data subject considers that the processing of personal data relating to him or her as performed via this website infringes the Regulation, he or she has the right to lodge a complaint with the Garante pursuant to Article 77 of the Regulation, or else to bring a judicial proceeding against the Controller pursuant to Article 79 of the Regulation.