Information for the processing of personal data
Pursuant to art.13 EU Regulation 2016/679 “GDPR”
The Data Controller is Chic Srl, with registered office in via Giuseppe di Vittorio 10, Vallefoglia (PU), frazione Talacchio di Vallefoglia, telephone 0721 478585, fax 0721 906145, e-mail info@chic.it which informs you about the processing of your personal data.
PURPOSE OF PROCESSING AND LEGAL BASIS
The Data Controller collects and processes mainly data relating to legal persons, however, for the purposes of business operations and facilitating contractual relations, some data relating to natural persons (employees, collaborators etc…) who work for these natural persons, will be treated as necessary for the performance of a contract or pre-contractual measures in order to manage the contractual relationship, to fulfil the obligations arising from the contract, manage billing, requests received from our customers/ suppliers, logistics and any complaints and in order to ensure effective operational management of the business relationship; we also process your data to comply with legal obligations arising from tax and accounting regulations.
In order to allow the fulfillment of the contractual and legal obligations indicated above, your data will be processed through paper, electronic and telematic tools and media, in compliance with the principles and requirements of the Regulation, as well as company regulations and policies, by specifically authorized internal personnel and, in the event that it is necessary to use an external entity for the treatment of the same, of Data Processors specifically identified and appointed; also may be communicated to the following categories of recipients: subjects and public bodies (eg Chambers of Commerce, Financial Administration, other state or local public administrations or public service concessionaires, Guardia di Finanza, other tax agencies); to professional firms in order to fulfill tax and accounting obligations; to maintenance companies and hardware and software support in case of their maintenance and assistance; to post offices, freight forwarders and couriers, logistics companies and transports. Personal data shall not be transferred to a third country or an international organisation outside the EU.
For the above mentioned purposes and communications, your prior consent is not necessary, as the provision and processing of data is necessary in the context of the contract or the fulfilment of legal obligations. However, the provision of data is optional, but necessary for the proper fulfillment of contractual obligations since any refusal to provide it would make it impossible to fulfill the obligations themselves.
TIME OF STORAGE OF DATA
The personal data processed for the purposes indicated will be kept only and exclusively for the period of performance of the activities subject to the contract and in any case not beyond the course of the appropriate periods to ensure the possible defense of a right of the Company in the context of contentious. In any case they will not be kept for a period exceeding the achievement of the purpose. The data contained in invoices and accounting documents will be kept in compliance with the times provided by the legislation on the retention of tax and accounting documents.
RIGHTS OF THE DATA SUBJECT
The interested party has the right, according to the provisions of art. 15 to 21 and art. 13 of the GDPR to obtain, in the cases provided, confirmation that personal data concerning him or her are being processed or not and in this case access to personal data, the rectification of inaccurate personal data concerning him or the cancellation of the same or the restriction of the processing of data concerning him or to oppose the same processing.
Data subjects who believe that the processing of personal data referred to them occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Data Protection Authority or other competent supervisory authority, as provided by art. 77 of the same Regulation, or to appeal to the appropriate courts (art. 79 of the Regulation).
Requests for exercise of rights may be addressed to the Data Controller.
