• Privacy Policy

INFORMATION TO CUSTOMERS AND SUPPLIERS ON THE PROCESSING OF PERSONAL DATA ART. 13 “EUROPEAN REGULATION ON THE PROTECTION OF PERSONAL DATA – GDPR” (REG. EU 2016/679)

PORINI S.r.l. with headquarters in Lomazzo (CO) in Via Cavour n°2, C.F. 03919230155 / P.IVA 01257760130 (hereinafter, “Owner”), as owner of the treatment, informs you pursuant to Article 13 EU Regulation No. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the following ways and for the following purposes:

1) Object of data processing

The owner will process personal identification data (name and surname, address, e-mail and / or direct telephone number, bank and payment references) of the customer and / or supplier natural person or employees of the customer and / or supplier legal person that will be indicated by the same to carry out the management of the supply and delivery of products and services.

2) Purpose of data processing and legal basis

Your personal data are processed without your express consent art. 6 lett. b), e) GDPR), for the following purposes:

  • Managing the relationship with the customer/supplier and for the coordination of accounting, orders, invoicing and possible litigation.
    Legal basis: Execution of a contract.
  • Carrying out operations related and instrumental to the acquisition of information prior to the conclusion of the contract.
    Legal basis: Execution of pre-contractual measures.
  • To fulfill obligations under applicable laws or regulations, including EU ones.
    Legal basis: Legal obligation.
  • For the management of disputes relating to breach of contract, settlements, debt collection, judicial disputes.
    Legal basis: Treatment in judicial proceedings.

3) Modalities of data processing

With respect to the purposes outlined above, the processing of personal data is done through their collection, treatment, communication and storage with both manual and electronic tools and paper, ensuring in any case, personal data are treated in respect of confidentiality and security of the same data.

4) Access to data

Your data may be made accessible for the purposes of art. 2:

  • to employees and collaborators of the Data Controller, in their capacity as appointees and/or internal data processors;
  • to third party companies or other subjects (by way of example, credit institutions, professional firms, etc.) which carry out activities in outsourcing on behalf of the Data Controller, in their capacity as external data processors.

5) Compulsory nature and consequences of refusal

The provision of data for the purposes referred to in art. 2 is compulsory as it is necessary to establish, execute and properly manage the contractual relationship. Therefore, failure to provide the data will make it impossible to establish the relationship and perform the services requested.

6) Duration of treatment and data retention times

The data provided will be stored in our archives, for the purposes mentioned above, for a period of 10 years from the termination of the relationship, as established by art. 2220 c.c., subject to any late payment of fees and / or litigation that justify the extension.

7) Data transfer

Your data will not be transferred outside the European Union.

8) Rights of the interested party

In accordance with the provisions of Chapter III, Section I, GDPR, you may exercise the rights set forth therein and in particular:
Right of access – Obtain confirmation whether or not personal data concerning you are being processed and, if so, receive information relating, in particular, to: purposes of processing, categories of personal data processed and storage period, recipients to whom these may be communicated (Article 15, GDPR);
Right of rectification – Obtain, without undue delay, the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16, GDPR);
Right to erasure – Obtain, without undue delay, the erasure of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR);
Right to restriction – Obtain from the Data Controller the restriction of processing, in the cases provided for by the GDPR (Article 18, GDPR);
Right to portability – To receive in a structured, commonly used and machine-readable format the personal data concerning you provided to the Data Controller, as well as to obtain that the same be transmitted to another data controller without hindrance, in the cases provided for by the GDPR (Article 20, GDPR);
Right to object – To object to the processing of personal data concerning you, unless there are legitimate reasons for the Data Controllers to continue the processing (Article 21, GDPR);
Right to complain to the supervisory authority – To complain to the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186 Rome (RM).

9) How to exercise your rights

You can exercise your rights at any time by sending:

  • a registered letter with return receipt to PORINI S.r.l. Via Cavour n°2, 22074 Lomazzo (CO);
  • an e-mail to the address: privacy@porini.it.