Pursuant to Articles 13 and 14 of Regulation 2016/679/EU (hereinafter "GDPR") C.I.L. - Consorzio Industriale Lucano (hereinafter referred to as "Data Controller") based in Viale della Rinascita snc - 85059 Viggiano (PZ), in its capacity as "Data Controller", informs you that your personal data collected for the purpose of the conclusion of the contract with the Client and/or as part of the execution and/or stipulation of the same will be processed in compliance with the aforementioned regulations, in order to guarantee the rights, fundamental freedoms, and dignity of individuals, with particular reference to confidentiality and personal identity. We inform you that if the activities provided to you involve the processing of personal data of third parties in your ownership, it will be your responsibility to ensure that you have complied with the provisions of the legislation with regard to the individuals concerned in order to make their processing by us legitimate.
The processing of your personal data, directly provided by you, is carried out by C.I.L. - Consorzio Industriale Lucano for the purpose of the conclusion of the contract with the Customer and/or as part of the execution and/or stipulation of the same. Also, it is possible the occurrence of the processing of personal data of third parties communicated by the Customer to the Company. With respect to this hypothesis, the Customer stands as an autonomous data controller and assumes the consequent legal obligations and responsibilities, holding the Company harmless with respect to any dispute, claim and/or request for compensation for damages from processing that may be received by the Company from interested third parties.
In compliance with applicable data protection regulations and without the need for specific consent from the Data Subject, Data will be stored, collected and processed by the Company for the following purposes:
- Fulfilment of contractual obligations, execution and/or conclusion of the contract with the Customer and/or management of any pre-contractual measures;
- Fulfillment of any regulatory obligations, tax and fiscal provisions arising from the performance of business activities and obligations related to administrative-accounting activities;
- Sending, directly or through third party providers of marketing and communication services, newsletters and communications with direct marketing purposes through email, sms, mms, push notifications, fax, paper mail, telephone with operator, in relation to products provided by the other companies pursuant to art. 130 c. 1 and 2 of Legislative Decree 196/03 (hereinafter "Code");
- Communication of Data to third party companies for sending newsletters and communications with marketing purposes through email, sms, mms, push notifications, fax, paper mail, telephone with operator pursuant to art. 130 c. 1 and 2 of the Code.
The legal bases for processing for the purposes a) and b) above are Articles 6.1.b) and 6.1.c) of the Regulations.
The provision of Data for the above purposes is optional, but failure to provide it and refusal to provide it would make it impossible for the Company to execute and/or enter into the contract and provide the services requested by the same.
The legal basis for the processing of Personal Data for the purposes c) and d) is Article 6.1.a) of the GDPR as the treatments are based on consent; it should be noted that the Data Controller may collect a single consent for the marketing purposes described herein, pursuant to the General Measure of the Guarantor for the Protection of Personal Data "Guidelines on Promotional Activities and Countering Spam" of July 4, 2013. The provision of consent to the use of data for marketing purposes is optional and should, the data subject wish to object to the processing of Data for marketing purposes performed by the means indicated herein, as well as to revoke the consent given; he/she may at any time do so without any consequences (except for the fact that he/she will no longer receive marketing communications) by following the instructions present in the "Rights of the Data Subject" section of this Notice.
Finally, please note that for the processing carried out for the purpose of sending its own advertising material or direct sales or for carrying out its own market research or commercial communications in relation to products or services similar to those used by the Customer, the Company may use the e-mail or personal data addresses pursuant to and within the limits allowed by Article 130, paragraph 4 of the Code and the provision of the Guarantor Authority for the protection of personal data of June 19, 2008 even in the absence of explicit consent. The legal basis for the processing of data for this purpose is Article 6, paragraph 1, letter f) of the GDPR, without prejudice to the possibility to object to such processing at any time, following the indications present in the "Rights of the Data Subject" section of this Information Notice.
The data may be communicated to third parties appointed as data processors pursuant to Article 28 of the GDPR and in particular to banking institutions, companies active in the insurance field, suppliers of services strictly necessary for the performance of business activities, or consultants of the company, where this proves necessary for fiscal, administrative, contractual reasons or for requirements protected by current regulations.
Your personal data, or the personal data of third parties in its ownership, may also be communicated to external companies, identified from time to time, to which C.I.L. - Consorzio Industriale Lucano entrusts the execution of obligations arising from the assignment received to which will be transmitted only the data necessary for the activities requested of them. All employees, consultants, interim and/or any other "natural person" who carry out their activities on the basis of the instructions received by C.I.L. - Consorzio Industriale Lucano, pursuant to Article 29 of the GDPR, are appointed "Data Processors" (hereinafter also "Data Processors"). To the Data Processors or Persons in charge, if any, designated, C.I.L. - Consorzio Industriale Lucano imparts appropriate operating instructions, with particular reference to the adoption of and compliance with security measures, in order to be able to ensure the confidentiality and security of data. Precisely in reference to the aspects of personal data protection, the Customer is invited, pursuant to Article 33 of the GDPR, to report to C.I.L. - Consorzio Industriale Lucano any circumstances or events from which a potential "personal data breach (data breach)" may arise in order to allow an immediate assessment and the adoption of any actions to counter such an event by sending a communication to C.I.L. - Consorzio Industriale Lucano at the contact details indicated below. The Data will not be disseminated.
This is without prejudice to the obligation of Consorzio Industriale Lucano to communicate the Data to Public Authorities upon specific request.
The transfer abroad of your personal data may take place if it is necessary for the management of the assignment received. The equivalent levels of protection adopted for the processing of personal data of its employees will be required for the processing of the information and data that may be communicated to these parties. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided by Chapter V of the GDPR will be applied.
Modalities, processing logics and retention times
Your data are collected and recorded lawfully and fairly for the purposes stated above in accordance with the principles and requirements of Article 5 c 1 of the GDPR.
The processing of personal data is carried out using manual, computerized and telematic tools with logics strictly related to the purposes themselves and, in any case, in such a way as to guarantee their security and confidentiality.
Personal Data will be processed by Consorzio Industriale Lucano for the entire duration of the assignment and also thereafter to enforce or protect its rights or for administrative purposes and/or to implement obligations arising from the regulatory and normative framework pro tempore applicable and in compliance with specific legal obligations on data retention.
In accordance with, within the limits and under the conditions provided for by the data protection regulations regarding the exercise of the rights of the Data Subjects with regard to the processing operations covered by this Information Notice, as a Data Subject you have the right to request confirmation as to whether or not any processing of your personal data is taking place, access to the personal data concerning you and in relation to them you have the right to request their rectification, cancellation the notification of the rectification and cancellation to those to whom the data may have been transmitted by our Organization, the limitation of the processing in the cases provided for by the norm, the portability of the personal data - provided by you - in the cases indicated by the norm, to object to the processing of your data and, specifically, you have the right to object to decisions concerning you if they are based solely on automated processing of your data, including profiling. If you believe that the processing operations concerning you violate the rules of the GDPR, you have the right to lodge a complaint with the Guarantor pursuant to Article 77 of the GDPR.
If you wish to request further information about the processing of your personal data or for the possible exercise of your rights, you may contact us at the following email: (firstname.lastname@example.org).
The data controller, pursuant to Article 4 of the GDPR, is Consorzio Industriale Lucano, Viale della Rinascita, snc - 85059 Viggiano P.IVA: 01748680764
Sincerely, The Data Controller:
Consorzio Industriale Lucano
- ex Art.12 and Art. 15-22 of Regulation 2016/679/EU -