Personal data processing policy for customers and suppliers

CUSTOMER

Privacy Policy – Information under article 13 Reg. EU 679/2016 (“GDPR”)

This information applies to customers-individuals and individuals who work on behalf of customers of Gualini S. p. A.

Data controller: Gualini S.p.A., Bartolomeo Colleoni Street sn – 24060 Costa di Mezzate (BG), Italy (tel. +39 035 940253, info@gualini.eu)

Purpose and legal basis of the processing – data retention period

Purpose 1: Execute a contract to which the customer is a party or processing of the client’s pre-contractual requests. Legal basis of the processing: fulfilment of contractual obligations or performance of pre-contractual activities requested by the interested party. Without such data, it will be impossible to execute the contract or provide what the customer has requested. Data retention period: time of completion of the pre-contractual request or time of execution of the contract.

Purpose 2: activities required by applicable legislation, including tax, workplace safety, environmental, anti-money laundering, banking and public security. Legal basis of the processing: need to comply with legal obligations. Data retention period: duration imposed by the applicable legislation.

Purpose 3: administrative management of customers (offers, orders, invoices, delivery notes, contracts and other documents relating to the contractual relationship that may contain your data). Legal basis of the processing: legitimate interest of the data controller in the company’s proper management and compliance with the law. Data retention period: duration of the contractual relationship with the customer.

Purpose 4: for purposes of judicial protection, to prevent or prosecute wrongdoing. Legal basis of the processing: the legitimate interest to protect their rights and to prevent misconduct. Data retention period: equal to the time reasonably necessary to enforce our rights from the moment we become aware of the wrongdoing or its potential existence.

Recipients or categories of recipients of personal data, if any.

For one or more of the above purposes, we may share data with these Recipients:

external consultants

service providers

Judicial Authorities or administrative bodies

group companies

Except for the Judicial Authority and administrative bodies, all such recipients shall process the data according to the agreement under art. 28 GDPR, as data processors.

You can have at any time the updated list of managers by contacting or writing to the address of the Owner indicated above.

Transfer of personal data to a third country.

Gualini S.p.a. does not transfer the data it processes to third countries.

Rights of the data subject

You have the right to request the controller, at any time, access to and copy of personal data, rectification or erasure of personal data, restriction of processing concerning you or to object to their processing, in addition to the right to data portability without affecting the lawfulness of processing based on consent given before revocation.

When you exercise your right of access, you have the right to know whether your data is being processed, what the purpose of the processing is, what the categories of data processed are, who are the recipients or categories of recipients to whom your data are communicated (and, if they are resident in a third country, on the basis of which guarantees), the retention period of your data (or the criteria for determining the retention period), whether automated processing is taking place (for example by profiling) and what is the logic of such processing, the origin of the data (if they are not collected initially by us).

You can exercise these rights by contacting the Owner by email to privacy@gualini.eu or writing to the Owner’s address indicated above.
You also have the right to complain with the Data Protection Authority.

SUPPLIER

Privacy Policy – Information under article 13 Reg. EU 679/2016 (“GDPR”)

This information applies to suppliers-individuals and individuals who work on behalf of suppliers of Gualini S. p. A.

Data controller: Gualini S.p.A., Bartolomeo Colleoni Street sn – 24060 Costa di Mezzate (BG), Italy (tel. +39 035 940253, info@gualini.eu)

Purpose and legal basis of the processing – data retention period

Purpose 1: Execute a contract to which the supplier is a party or processing of the provider’s pre-contractual requests. Legal basis of the processing: fulfilment of contractual obligations or performance of pre-contractual activities requested by the interested party. Without such data, it will be impossible to execute the contract or provide what the customer has requested. Data retention period: time of completion of the pre-contractual request or time of execution of the contract.

Purpose 2: activities required by applicable legislation, including tax, workplace safety, environmental, anti-money laundering, banking and public security. Legal basis of the processing: need to comply with legal obligations. Data retention period: duration imposed by the applicable legislation.

Purpose 3: administrative management of suppliers (offers, orders, invoices, delivery notes, contracts and other documents relating to the contractual relationship that may contain your data). Legal basis of the processing: legitimate interest of the data controller in the company’s proper management and compliance with the law. Data retention period: duration of the contractual relationship with the supplier.

Purpose 4: for purposes of judicial protection, to prevent or prosecute wrongdoing. Legal basis of the processing: the legitimate interest to protect their rights and to prevent misconduct. Data retention period: equal to the time reasonably necessary to enforce our rights from the moment we become aware of the wrongdoing or its potential existence.

Recipients or categories of recipients of personal data, if any.

For one or more of the above purposes, we may share data with these recipients:

external consultants

service providers

Judicial Authorities or administrative bodies

group companies

Except for the Judicial Authority and administrative bodies, all such recipients shall process the data according to the agreement under art. 28 GDPR, as data processors.

You can have at any time the updated list of managers by contacting or writing to the address of the Owner indicated above.

Transfer of personal data to a third country.

Gualini S.p.a. does not transfer the data it processes to third countries.

Rights of the data subject

You have the right to request the controller, at any time, access to and copy of personal data, rectification or erasure of personal data, restriction of processing concerning you or to object to their processing, in addition to the right to data portability without affecting the lawfulness of processing based on consent given before revocation.

When you exercise your right of access, you have the right to know whether your data is being processed, what the purpose of the processing is, what the categories of data processed are, who are the recipients or categories of recipients to whom your data are communicated (and, if they are resident in a third country, on the basis of which guarantees), the retention period of your data (or the criteria for determining the retention period), whether automated processing is taking place (for example by profiling) and what is the logic of such processing, the origin of the data (if they are not collected initially by us).

You can exercise these rights by contacting the Owner by email to privacy@gualini.eu or writing to the Owner’s address indicated above.

You also have the right to complain with the Data Protection Authority.