INFORMATION AND ACCESS TO PERSONAL DATA PURSUANT TO ART. 13 of General Data Protection Regulation (GDPR)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
1. PURPOSE OF DATA PROCESSING
The processing of personal data supplied by you is aimed at the execution of Work Orders or Supply Contracts and in any case for the performance of contractual obligations and to fulfill specific requests in the negotiation phase and therefore for all activities related to non-destructive checks, thermal treatments, inspections and tests.
2. MODALITIES OF DATA PROCESSING
The treatment is carried out by means of the operations or set of operations indicated in art. 4 paragraph 2 of General Data Protection Regulation (GDPR)(EU) 2016/679: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.The treatment is carried out, at the company Eurocontrol s.r.l. by the persons in charge of processing in compliance with theprinciples of necessity and pertinence also with the aid of electronic or automated tools, in the ways and within the limits necessary to pursue the aforementioned purposes
3. DATA CONFERENCE
The provision of personal data is necessary to fulfill the contractual, accounting and tax obligations.
4. REFUSAL OF DATA CONFERENCE
Any refusal by the interested party to provide the personal data referred to in paragraph 3 will make it impossible to carry out the activities referred to in point 1. This refusal must be explicitly communicated in writing.
5. DATA COMMUNICATION
Personal data may be disclosed to the managers and processors (employees of the company) and may be communicated for the purposes referred to in paragraph 1 to the tax consultant and in general, to all those subjects to whom communication is necessary forthe correct fulfillment of contractual obligations.
6. DIFFUSION OF DATA
Personal data are not subject to disclosure.
7. RIGHTS OF THE INTERESTED
The EU General Data Protection Regulation (GDPR)2016/679 (in articles 15, 16, 17, 18 20 and 21) gives the interested party the exercise of specific rights, including that of obtaining from the holder confirmation of the existence or otherwise of their personal data and their making available in an intelligible form; the interested party has the right, among other things, to have knowledge of the origin of the data, of the purposes and methods of the processing, of the logic applied to the processing, of the identification details of the data controller and of the subjects to whom the data may be communicated; the interested party also has the right to obtain the updating, rectification and integration of data, cancellation, transformation into anonymous form or blocking of data processed in violation of the law; the owner has the right to object, for legitimate reasons, to the processing of data. Furthermore, the data subject may request access to their personal data from the Data Controller.
8. CONSENT TO TREATMENT
The assignment of the Contract of Work or Supply constitutes -as described above -the authorization to process the Data by the Customer / Supplier. Customer / Supplier data will be deleted within the maximum term of 5 years from the end of validity of the contract if not specifically required by other applicable law.
9. HOLDER OF THE TREATMENT
The data controller is EUROCONTROL srl based in theheadquarter Zona Industriale –89900 Porto Salvo – Vibo Valentia.
Date, dec. '05 first issue
21 May 2018, last update (for adaptation to EU General Data Protection Regulation2016/679)