1. Object of data processing
The responsible body processes your data – hereinafter referred to as “personal data” or “data” – such as name, surname, business name, address, phone number, e-mail address and financial data made available at the beginning of the business relationship.
2. Purposes of data processing
Your personal data are processed as follow:
A) Without your specific consent (ex Art. 6 lett. b), e) GDPR), for the following purposes:
– La.Me.S Srl. – registered office in Via dell’Artigianato 21, 35010, Pieve di Curtarolo (Padova), Italy – places itself on the die manufacturing market, with main focus on the automotive, household & appliance, agriculture, furnishing and building industry sectors;
– To fulfil the pre-contractual, contractual and financial obligations arising from our relationship;
– To fulfil obligations from laws, regulations, EU norms or authority orders;
– To exercise the responsible body’s rights, for example the right to be defended in court;
B) With your specific consent (Art. 7 GDPR) for the following marketing purposes:
– To send you per e-mail, post and/or sms and/or phone contacts, newsletter, sales notifications and/or commercials about products or services offered by the responsible body and also to prove your level of satisfaction about our services;
– To send you per e-mail, post and/or sms and/or phone contacts, sales notifications and/or advertising from thirds (for example business partners, insurance companies, other companies of the group).
Just with our clients specific consent, we reserve the right to send sales notifications about products and services similar to those ones you already use.
3. Methods of data processing
Your personal data are processed by means of paper, computerized and telematics tools and according to the activities in art. 4 no. 2) GDPR i.e.: collecting, recording, organising, preserving, consulting, working out, changing, selecting, comparing, using, interconnecting, blocking, communicating and erasing of data.
4. Duration of data processing
Your personal data will be stored for the purposes indicated above, only for the time necessary to fulfill any legal obligation; however, no longer than 10 years.
5. Data access
Your personal data will be disclosed for the purposes described above (2.A and 2.B) to:
– Responsible body’s employees and co-workers or to other companies of the responsible body’s group in Italy and abroad, in their capacity as person authorized and/or internal delegates for the data processing and/or system administrators;
– Third companies or other subjects (indicatively, bank and other financial institutions, professional practices, consultants, insurance companies etc.) that perform outsourcing activities on behalf of the responsible body, in their capacity as external delegates of data processing.
6. Data recipient
Your personal data will be disclosed to third parties for technical and operational requirements stricted connected to the above mentioned purposes and particularly to the following subjects:
a) Institutions, traders, companies or other structures entrusted by us with the fulfillment of financial, accounting and management obligations connected with our ordinary economic activities and with debts recovery as well;
b) Public authorities and administrations for the purposes connected to the fulfillment of legal obligations or to the subjects legitimated to have access to them, according to laws, regulations and EU norms;
c) Banks, financial institutions and other subjects that need a data transfer for those activities in our company connected to the fulfillment, from our side, of the contractual obligations towards you;
d) Suppliers of installation, support and maintenance services for plants, computer and telematics systems and of any other service connected to and necessary for the fulfillment of contractual performances.
7. Data transfer
Your personal data will be stored into European Union servers. If necessary, the responsible body has the right to move the server outside the EU. The responsible body ensure that this transfer will occur according to the enforceable laws, upon conclusion of the standard contractual clauses provided by the European Commission.
8. Nature of the personal data assignment and consequences of a refusal
Data assignment for the purposes mentioned in art. 2.A) is mandatory. Without assignment we cannot assure the services referred to in art. 2.A) 3.
Data assignment for the purposes mentioned in art. 2.B) is optional. You can decide to disallow data assignment or subsequently deny the possibility to process the available data. If this is the case, you will not receive newsletter, commercial and advertising about the services supplied by the responsible body but you will continue to have rights upon the services described in 2.A).
9. Rights of data subject
According to art. 13, paragraph 2, from 15 to 21 of the Regulation, you can exercise the following rights:
a) Right to enable access to personal data and to the following information:
– The status of your personal data, whether its processing is ongoing or not;
– Purposes of processing;
– Categories of personal data;
– Recipients or categories of recipients to whom personal data have already been sent or will be sent;
– If data are not stored by the data subject, any available information about their origin;
– The existence of automated decision-making, including profiling;
– A copy of the personal data involved in the processing.
b) Right of rectifcation and integration of personal data
c) Right to erasure (“right to be forgotten”), if one of the following reasons exists:
1. Personal data are no longer necessary for the purposes they have been collected;
2. Data subject withdraw the processing consent and there is no legal basis for the treatment;
3. Data subject refuses the processing and there is no other legal reason to proceed with this;
4. Personal data have been unlawfully processed;
5. Personal data must be erased for compliance with legal obligation of the EU or of the Member State of the data subject. In case the data subject has previously disclosed their data and they are obliged to erase them, they must inform other data subjects to erase any link, copy or replication connected to their data.
d) Right to restriction on processing if:
1. Data subject contests the accuracy of personal data for the time necessary to the responsible body to examine their accuracy;
2. The processing is unlawful. Data subject refuses the right to erasure and asks for restriction on processing;
3. The resposible body no longer needs personal data but the data subject requires them for the assessment and exercise or defense of a right when cited;
4. Data subject refuses the processing, while the possible prevailing of the responsible body legitimate reasons over those of the data subject are being tested;
e) Right to complain to the Warrantor of the personal data protection:
following the procedures on the official website www.garanteprivacy.it
f) Right of portability:
the right to receive the data made available to the responsible body in a structured format, commonly used and readable and the right to transmit them to another responsible body, when the processing is based on consent or on a contract and is performed by automated means. Where technically possible, the data subject has the right to obtain the direct data transmission from a responsible body to another.
g) Right to oppose:
to data processing, at all times, inlcuding profiling, especially when:
1. The processing is based on the responsible body legitimate interest, unless opposing reasons have previosly been explained;
2. Personal data are processed for direct marketing purposes.
h) Right to refuse a decision based solely on automated processing, profiling included, unless when the decision:
is necessary to conclude or perform a contract between the data subject and a responsible body; is authorized by the EU Law or the one of the Member State or it is explicitly based on the data subject consent.
i) Right to withdraw the consent at all times
and therefore accepting all consequences resulting from the impossibility to fulfill the law or the contract.
Excercising of rights is not subject to any kind of form and it is for free.
10. Methods of exercising the rights
The above rights can be exercised by sending:
– Certified letter to: La.Me.S Srl., Via dell’Artigianato 21, 35010, Pieve di Curtarolo (Padova), Italy
– E-mail to: firstname.lastname@example.org
The updated list of the processing responsibles is stored at the registered office of the responsible body.
Curtarolo, 25th May, 2018