Pursuant to Article 13 of Regulation (EU) 2016/679

Pursuant to Article 13 of Regulation (EU) 2016/679

Data Controller: G.R. Srl (single-member company) with registered office at Via Arnaud 3, 46029 Suzzara (MN), represented by its legal representative, pursuant to and for the purposes of Regulation (EU) 2016/679 on the protection of personal data (hereinafter the “Regulation”), in accordance with Articles 13 and 14 of the Regulation, informs data subjects about the processing of personal data, in compliance with applicable legal provisions.

Purposes of processing

In particular, data will be processed for the following purposes connected with the fulfilment of obligations of a legal or contractual nature, to pursue the Data Controller’s legitimate interest in its activities, or for the performance of measures related to contractual or pre-contractual obligations:

• Mandatory legal obligations in the tax and accounting field;
• Management of customers or suppliers;
• Management of relationships during purchase and sales operations;
• Dispute management and/or debt collection;
• Planning of activities;
• History/records of supplies or sales.

The processing of data necessary for the fulfilment of legal and contractual obligations is mandatory in order to pursue the above purposes and is necessary for proper management of the relationship. Failure to provide, or incorrect provision of, any mandatory information may make it impossible for the Data Controller to ensure the appropriateness of the processing.

Methods of processing

Your personal data may be processed using manual and automated procedures, including by entrusting third parties with processing operations. All processing is carried out in compliance with Articles 6 and 32 of the Regulation and through the adoption of appropriate security measures. Data will be processed only by personnel expressly authorized by the Data Controller, or also by third parties appointed as Data Processors for the relevant processing activities pursuant to Article 28 of the Regulation.

Disclosure

For the indicated purposes, your data will be disclosed exclusively to competent parties duly appointed to perform the services necessary for proper management of the relationship, with safeguards to protect the data subject’s rights:

• Service companies, consultants and professionals, including in associated form;
• Banks and credit institutions, insurance companies, debt collection companies;
• Transport and shipping companies, logistics companies;
• Public and/or private entities for which disclosure of data is mandatory or necessary to comply with legal obligations or for administration of the relationship.

Data will not be disseminated in any way.

Retention period

In compliance with the principles of lawfulness, purpose limitation and data minimization pursuant to Article 5 of the Regulation, the retention period of your personal data is set for a period not exceeding what is necessary to achieve the purposes for which the data are collected and processed, and in any case in compliance with mandatory statutory retention periods.

European Regulation (EU) 2016/679 – Articles 15 to 22 – Data subject’s rights

The data subject has the right to obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and to receive such data in an intelligible form. The data subject has the right to obtain information on:

• the origin of the personal data;
• the purposes and methods of processing;
• the logic applied in case of processing carried out with the aid of electronic tools;
• the identity details of the data controller, the data processors and the representative designated pursuant to Article 5(2);
• the subjects or categories of subjects to whom personal data may be disclosed or who may become aware of them as designated representative in the territory of the State, or as data processors or authorized persons.

The data subject has the right to obtain:

• updating, rectification or, where interested, completion of data;
• erasure, anonymization or blocking of data processed unlawfully, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• certification that the operations referred to in points (a) and (b) have been notified, also as regards their contents, to those to whom the data have been disclosed or disseminated, except where such fulfilment proves impossible or involves a manifestly disproportionate effort compared to the protected right;
• data portability.

The data subject has the right to object, in whole or in part:

• on legitimate grounds, to the processing of personal data concerning them, even if relevant to the purpose of collection;
• to the processing of personal data concerning them for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication.

You have the right to obtain from the Data Controller erasure, communication, updating, rectification, and integration of the personal data concerning you and, more generally, you may exercise all rights provided for in Articles 15 to 22 of the Regulation as indicated herein.

To exercise your rights under the above-mentioned articles, the data subject must contact: G.R. Srl (single-member company) – Via Arnaud 3, 46029 Suzzara (MN) – PEC: gr2@legalmail.it