Privacy Policy: CUSTOMERS and SUPPLIERS

The information contained in this document is provided to fulfill the transparency obligations established by EU Regulation n.679 of 4.27.2016 (general regulation on data protection).
The EU Regulation 2016/679 requires to provide, to the persons whose data is collected, information relating to the processing of the data itself, in a concise form and in simple and clear language. Articles 12, 13 and 14 of the Regulation specify the content of the information to be communicated. This document is therefore used to inform you when required. In this document you are also identified as "interested".

The data controller is CORRADO FACCHI Imp. Ind.

The data controller is the one who determines the purposes and means of the processing of personal data.
In the contractual or pre-contractual relationship with this company, the Data Controller is: Corrado Facchi with headquarters and contact point:
Via Terra 10 - 20053 Rodano (MI).
 

The purpose for which the data is collected is linked to the management of contracts for work or services, for pre-contractual activities, for tax obligations and any other obligation established by law, by a regulation, by Community legislation or by an order from the Authority (such as in the field of anti-money laundering) and to exercise the rights of the Owner, for example the right of defense in court.
The legal basis for data processing is included in the legislation governing the conduct of economic activities.
The data collected will be used, by computer, telematic means and in paper documents. The processing operations are implemented in such a way as to guarantee the logical, physical security and confidentiality of your personal data. The data must be provided, otherwise it will be impossible to stipulate and therefore manage the contract. The data processed does not include particular categories of data, but only common data.

Your data will NOT be disclosed to external bodies, companies and people.
 

For the conservation obligations required by tax legislation, your data will be kept for 5 years after the year of the last economic relationship. After this term and before proceeding with their destruction, the opportunity to keep the data further will be evaluated. The data may also be retained for your protection or for the protection of this Company in the event of legal action, until the end of the period within which the legal action can be exercised or until the end of the degrees of judgement, in the event of a dispute in progress .

The Regulation recognizes your rights, set out in articles 15, 16, 17, 18, 19, 20, 21, 22 and 34, which are summarized below, and the right to lodge a complaint with the Guarantor.

The rights of the interested party are specified in the Regulation and are summarized below.

Art. 15 – Right of access
The interested party has the right to obtain confirmation from the data controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and information regarding the treatment.
Art. 16 – Right of rectification
The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.
Art. 17 – Right to cancellation (right to be forgotten)
The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay and the data controller has the obligation to cancel personal data without unjustified delay if the reasons listed in the same article exist.
Art. 18 – Right to limit processing
The interested party has the right to obtain from the data controller the limitation of the treatment when the hypotheses listed in the same article occur (for example when the accuracy of the data is contested or when the data are necessary for the exercise or defense of a law in court).
Art. 19 – Obligation to notify in case of rectification or cancellation of personal data or limitation of treatment
The data controller informs each of the recipients to whom the personal data have been transmitted of any corrections or cancellations or limitations of the treatment carried out pursuant to article 16, article 17, paragraph 1, and article 18, unless this proves impossible or involves a disproportionate effort. The data controller communicates these recipients to the interested party if the interested party requests it.
Art. 20 – Right to data portability
The interested party has the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom you provided them.
In exercising his rights in relation to data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 – Right to object
The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) of) (tasks of public interest and prosecution legitimate interest), including profiling on the basis of these provisions.
Art. 22 – Automated decision-making process relating to natural persons, including profiling
The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way.
Art. 34 – Communication of a violation of personal data to the interested party
When the violation of personal data is likely to present a high risk for the rights and freedoms of natural persons, the data controller communicates the violation to the interested party without unjustified delay.

For the exercise of your rights, forward a registered letter to the Data Controller or PEC, to the address of the contact point indicated above.
In the event that you believe that your rights summarized above have not been recognized or in the event of an unjustified delay, you have the possibility to lodge a complaint with the Guarantor for the Protection of Personal Data.