Claber S.p.A., with registered office in Fiume Veneto (PN), via Pontebbana n. 22, tel. +39 0434 958836, as the personal data controller (hereinafter referred to as the "Data Controller"), issues this information notice to the Data Subject in compliance with the applicable European and Italian regulations on personal data protection.
The customer acknowledges that the provisions of the privacy legislation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter "GDPR") – concern the processing of personal data, i.e. relating only to natural persons. For the purpose of managing the business relationship, the Data Controller processes personal data concerning (i) the Customer, where the Customer is a sole proprietor or self-employed, and/or (ii) the representatives, exponents, employees or collaborators of the Customer's company.
Purpose and legal basis of data processing
The Data Controller shall process your personal data for various purposes:
- to fulfil contractual and legislative obligations related to the trade relationship, as well as to pursue the legitimate interest to manage said relationship correctly, to verify the Customer's creditworthiness and to manage any disputes. The legal basis of data processing is the need to pursue the aforementioned purposes;
- use of the Customer's email address including to send commercial communications containing information on the company's products or services, as well as promotions or invitations to events that the Data Controller will participate in: this purpose, deemed lawful by legislation set out on this specific aspect, may be pursued even without the express consent of the Data Subject, who, on the other hand, may put a stop to any such communications when providing his/her data or at a later date.
Data retention period
The Data Controller intends to process the data in accordance with the following time-based criteria:
- for the purposes referred to in point 1), for the entire duration of the trade relationship and, subsequently, to fulfil any obligations connected with or deriving from the establishment of the same, for the period prescribed by law and in accordance with the limitation period of the rights arising from the trade relationship, without prejudice to further retention for the time necessary to settle (in whatever manner) any disputes that may have arisen;
- for the purpose referred to in point 2), the data will be processed for the full duration of the business relationship and, in any case, until there is any objection to processing or a request to unsubscribe from the service.
Provision of data and consequences of refusal
The provision of your personal data for the purposes referred to in point 1) is necessary. Any refusal to supply such data, in whole or in part, may result in the impossibility for the Data Controller to pursue the abovementioned purposes. The provision of your personal data for additional purposes is optional. If such data are not provided, the Data Controller shall not be able to carry out the corresponding activities, but shall nevertheless be entitled to pursue the purposes referred to in point 1).
Categories of recipients
The Data Controller shall not disseminate the data, but intends to communicate such data to internal figures authorised to process them by virtue of their respective duties, as well as to sales agents, shippers and carriers, IT service companies, credit institutions, after-sales service centres, audit firms and the audit board, in addition to public and private bodies, including following inspections and audits.
Such recipients, where they process data on behalf of the Data Controller, shall be appointed as data processors by means of a specific contract or other legal document.
Transfer of personal data to a third country and/or an international organisation
As a rule, your personal data shall not be transferred to third countries outside of Europe or to international organisations. The Data Controller may, however, need to make such transfers in the context of relations with business partners outside the European Economic Area, as well as for using IT services (Cloud services, backups, etc.). In all such cases, data will be transferred in accordance with the specific requirements set out in the legislation on personal data protection.
Rights of the Data Subjects
The Data Subject is entitled to submit a request to the Data Controller to access his/her personal data and to correct such data if inaccurate, to delete or limit the processing of the data if the necessary conditions are not met, to oppose the processing of the data for legitimate interests pursued by the Data Controller, as well as to obtain the portability of data provided by them, only if subject to automated data processing means based on consent or on a contract. The Data Subject is also entitled to stop the sending of the newsletter by writing to the address indicated below and may request for the relevant service to be suspended at any time, without prejudice to the lawfulness of the data processing up to the moment the request is made.
To exercise his/her rights, the Data Subject may use the form available at https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and forward it to the following email address: privacy@claber.it. The Data Subject is further entitled to file a complaint with the competent personal data protection supervisory authority ("Garante") (www.garanteprivacy.it).