Information pursuant to art. 13 of the European Union Regulation 2016/679 (GDPR)

CONSENT RELATING TO THE PROCESSING OF PERSONAL DATA FOR DATA COLLECTED FROM THE INTERESTED PARTY

FOR THE TREATMENT:
Customer and supplier management

pursuant to art. 13 of Regulation (EU) 679/2016 concerning the protection of individuals with regard to the processing of personal data

FARMAS SRL(hereinafter the “Company” or the “Owner”), with registered office in S.S. dei Giovi 80 22072 CERMENATE ( CO ) Italy and VAT number 02346270131, as data controller, informs you, pursuant to art. 13 of the European Regulation 679/2016 concerning the protection of personal data (“GDPR”), regarding the processing of your personal data that will be carried out by the writer.

Type of data processed

The Company is the owner of the processing of personal data communicated by the User to the writer and include:
Company Name / Surname and Name, Tax Code and other identification numbers, Bank details, Address, E-Mail address

Purpose of the treatment

Data processing is carried out by the Company in carrying out its activities. In particular, the Data provided by the Data Subjects will be processed, with IT and non-IT tools, for the following purposes:

Supplier management

• The lawfulness criterion for which processing is possible is: The interested party must give consent to the processing of their personal data for the specific purpose
• The basis of which is reflected in a legal basis: Norma Unione

Customer management

• The lawfulness criterion for which processing is possible is: The interested party must give consent to the processing of their personal data for the specific purpose
• The basis of which is reflected in a legal basis: Norma Unione

Processing methods

The Data will be processed by the Company with electronic and manual systems according to the principles of correctness, loyalty and transparency provided for by the applicable legislation on the protection of personal data and protecting the confidentiality of the interested party through technical and organizational security measures to guarantee a level of adequate security.

Data retention

The data provided by the interested party will be processed for a duration:

• Start date: 25/05/2018
• Duration criterion: Period determination criterion
• Criterion description: Personal data will be processed for the entire duration of the contractual relationships established, and also subsequently, for the fulfillment of all legal obligations and in any case for a period not exceeding 10 years from the termination of the contractual relationship or beyond in cases expressly required by law. Personal data processed for marketing and profiling purposes will be processed by the company until the consent given by the interested party is revoked and subsequently stored for a period not exceeding 3 years.

Communication, dissemination and transfer of data

The Data will be processed, within the limits of what is necessary, by authorized personnel, adequately trained and trained, by the Data Controller as well as by the staff of third parties who provide services to the Data Controller and carry out data processing on behalf and on the instruction of the latter as responsible for the treatment.

In case of communication to third parties, the recipients may be:

• Categories:
• Recipient: Institutional bodies
• Recipient: ASL
• Recipient: Ministry of Economy and Finance

More generally, in carrying out their ordinary business activities, the Data may be communicated to subjects who carry out control, review and certification activities of the activities carried out by the Data Controller, consultants and freelancers in the context of tax, judicial and case of corporate transactions for which it is necessary to evaluate corporate assets, public bodies and administrations, as well as to subjects entitled by law to receive such information, Italian and foreign judicial authorities and other public authorities, for the purposes related to the fulfillment of legal obligations , or for the fulfillment of the obligations assumed and arising from the contractual relationship, including for the need for defense in court.

Further subjects connected to the treatment:

• Represented in the EU by the Data Controller:
  Name and surname of the owner: Stefania Milano
• Co-owner (s):
• Responsible:
  a)Name and Surname: Stefania Milano
  Tax number: MLNSFN55S65E514N
  b)Company name: COMPUTERSERVICEDUE SAS
  VAT number and tax code: 02472980131

What are the rights of the interested party

The interested party may exercise, in relation to the data processing described therein, the rights provided for by the GDPR (articles 15-21), including:

• receive confirmation of the existence of the Data and access their content (access rights); update, modify and / or correct the Data (right of rectification);
• request the cancellation or limitation of the processing of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or otherwise processed (right to be forgotten and right to limitation);
• oppose the processing (right to object);
• propose a complaint to the Supervisory Authority (Guarantor for the protection of personal data www.garanteprivacy.it) in case of violation of the rules on the protection of personal data;
• receive an electronic copy of the data concerning him as an interested party, when such data have been rendered in the context of the contract and request that such data be transmitted to another data controller (right to data portability).

To exercise these rights, the interested party can contact the Data Controller by sending a communication to: info@farmas.it

When contacting us, the interested party must ensure that they include their name, email / postal address and / or telephone number (s) to be sure that their request can be handled correctly.

FARMAS S.r.l.

The legal representative