OWNER, METHOD, PURPOSE / LEGAL BASIS OF THE PROCESSING AND RELATED CONSENT
Meridiana Industria Conciaria Srl Via Della Spira, 19/21/23, 56024 Ponte a Egola – San Miniato (PI), firstname.lastname@example.org, as data controller pursuant to art. 4 paragraph 1 n. 7) of the EU Regulation no. 679/2016 (hereinafter, “GDPR”), informs that the personal data provided spontaneously by the interested party are processed using paper, IT and telematic tools and with methods suitable to guarantee their security and confidentiality in accordance with the provisions of the article 32 GDPR. for the following purposes:
1. fulfill legal and contractual obligations (eg for accounting and tax compliance, product deliveries, payments and sending pre-contractual proposals) as well as for
2. send promotional material of Meridiana Industria Conciaria Srl products, direct marketing activities (legitimate interest of Meridiana Industria Conciaria Srl) to the addresses indicated by the interested party.
The provision of data is optional, but it is necessary for the fulfillment of contractual and regulatory obligations towards the data subject (purposes referred to in point 1 above) and consent is not required for this purpose. Also for this purpose, moreover, the incorrect communication of personal data requested, in addition to not allowing the fulfillment of contractual obligations, may also result in the inability, by the owner, to guarantee the adequacy of the treatment and the possible failure correspondence of the results of the processing itself, to the obligations imposed by the legislation to which it is addressed.
The purpose referred to in point 2) constitutes a legitimate interest of the owner that does not prevail over the interests or fundamental rights and freedoms of the data subject.
This purpose is possible only with the express and specific consent of the interested party who is free to lend or not without consequences in case of refusal (except for the lack of possibility to receive proposals and communications in line with the preferences of the interested party).
In any case, the possibility of opposing and revoking the consent is reserved, even after the release of the specific consent, both for the sending of promotional material and for the automated analysis of preferences, also by contacting Meridiana Industria Conciaria Srl at the addresses indicated above.
STORAGE OF DATA
The data will be processed as long as there is a contractual relationship between Meridiana Industria Conciaria Srl and the interested party and for a period of two years following the end of these relationships, without prejudice in any case to different legal obligations.
COMMUNICATION OF DATA
Personal data may be disclosed to:
1. Subsidiaries, parent companies or affiliates of the Data Controller, subjects that provide services for the management of the information system, subjects that provide the Data Controller with advice on tax, legal, judicial and compliance matters.
The subjects belonging to the categories listed above operate, in some cases, in total autonomy as separate data controllers, in other cases, as data processors specifically appointed by the owner, in compliance with Article 28 of the GDPR.
The communication of personal data to subjects belonging to the above categories, operating as independent data controllers, does not require the consent of the data subject, being based on the legitimate prevailing interest of the data controller, given that such communications are necessary for the pursuit of the relative purpose.
The complete and updated list of the subjects to whom the personal data of the data subject may be disclosed can be requested from the owner.
Meridiana Industria Conciaria Srl does not transfer the data subject’s personal data to countries outside the European Union. However, if in case of need, the owner must proceed to make this transfer outside the European Union, he will do so only after having ascertained the existence of one of the guarantees provided for by Articles 44 and ss. GDPR, in order to guarantee an adequate level of protection of the data processed.
RIGHTS OF THE INTERESTED PARTY
The interested party has the right to access at any time the data concerning him (Article 15 of the GDPR) and which are in the possession of Meridiana Industria Conciaria Srl by writing to the above addresses. The interested party also has the right, in the presence of the legal requirements, to request the rectification of inaccurate data (Article 16 of the GDPR), the cancellation of the same (Article 17 of the GDPR), the limitation of processing (Article 18) GDPR) or the right to oppose their processing (Article 20 GDPR), in addition to the right to data portability (Article 19 GDPR), without prejudice to legal and contractual obligations. The interested party also has the right to lodge a complaint with the supervisory authority (Privacy Guarantor).