INFORMATION ON THE PROCESSING OF PERSONAL DATA

Data Controller
Italimpianti Orafi S.p.A
Via Provinciale di Civitella, 8
Frazione Badia al Pino – 52041 Civitella in Val di Chiana (AR)
VAT No. 00137240511

Afterwards Owner, as data controller, informs you that pursuant to art.13 DLgs.30/6/2003 n.196 (hereinafter the Privacy Code) and art.13 EU Regulation n.2016/679 (hereinafter GDPR), that your data will be processed with the following methods and purposes:

Object of the treatment
The owner treats your personal data (as well as any contact details of the contact person within your organization that you spontaneously communicated to us for the fulfillment of contractual or legal obligations) and the contractual accounting data relating to the contractual relationship with us established and / or establishing and not belonging to the particular categories of personal data referred to in Art. 9 of the GDPR (also called sensitive data, or personal data revealing the racial, ethnic origin, political opinions, religious or philosophical beliefs, union membership, genetic data, biometric data on health, sex life or sexual orientation) is data relating to criminal convictions and crimes under Art. 10 of the GDPR.

Purpose and legal basis of the processing
Your personal data are processed without your express consent (art.24 letter a b c privacy code and Art. 6 letter b, and GDPR) for the following purposes:

1. Fulfill the pre-contractual, contractual and tax obligations arising from existing relationships with you;
2. Fulfill the obligations established by the law, by a regulation, by the community legislation or by an order of the authorities;
3. Prevent or discover fraudulent activity or abuse; exercise the rights of the owner, for example the right to defense in court.

We may also promote our products through newsletters and other marketing methods, invitations to promotional and institutional events and / or corporate events, we can send you commercial communications regarding services and products of the Owner similar to those you have already used, this in if you are already a customer, save your dissent (art.130 c.4 privacy code). The legal basis for processing is therefore the legal and contractual obligations.

Methods of processing
The processing of your data is carried out by means of the operations indicated in the art.4 privacy code and art. 4 n.2 GDPR and precisely: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.Your personal data are subjected to both paper and electronic and/or automated processing.

Duration
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case no later than 10 years from the termination of the relationship, except for different legal obligations.

Communication of data
Without your consent (pursuant to Art. 24 letter a), b), d) privacy code and art. 6 letter b) and c) GDPR), the Data Controller may communicate your data to Supervisory Bodies. Judicial authorities as well as to all the other subjects to whom the communication is obligatory by law for the accomplishment of said purposes.

Your personal data will be accessible to the employees and collaborators of the Data Controller specifically authorized by the owner, as well as the co-responsible subjects authorized to the processing.

Personal data may be transmitted to the subjects whose disclosure is required by law, by regulation, by community legislation, as well as for the performance of contractual obligations.

Your data will not be disclosed nor is there any intention on the part of the Data Controller to transfer data to a third country or to an international organization.

Rights
You have the right to access the data concerning you at any time (art.15 GDPR) and that are in our possession by writing to This email address is being protected from spambots. You need JavaScript enabled to view it. just as you are entitled, in the presence of the legal requirements, to request the correction of data inaccurate (art.16 GDPR), or cancellation of the same (Art. 17 GDPR) or the limitation of processing (Art. 18 GDPR) or to oppose their treatment (Art. 20 GDPR) in addition to the right of data portability ( art.19 GDPR), without prejudice to legal and contractual obligations, you also have the right to lodge a complaint with a supervisory authority.

Nature of the provision of data and consequences of refusal to reply
The provision of your data for the purposes indicated above is mandatory as necessary for the conclusion and / or execution of contractual and / or legal obligations. The failure to communicate data therefore implies the impossibility of fulfilling these obligations.

There are no automated decision-making processes or profiling.

Latest update: 18/06/2021