Information to the Customer/Supplier

INFORMATION AND ACCESS TO PERSONAL DATA PURSUANT TO ART. 13 of General Data Protection Regulation (GDPR)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016

Dear Customer / Supplier,pursuant to art. 13 paragraph 1 and 2 of General Data Protection Regulation (GDPR) (EU) 2016/679, in relation to personal data of which EUROCONTROL s.r.l. will enter or are already in possession of it, we inform you of the following:

• 1. PURPOSE OF DATA PROCESSING
  The processing of personal data supplied by you is aimed at the execution of Work Orders or Supply Contracts and in any case for the performance of contractual obligations and to fulfill specific requests in the negotiation phase and therefore for all activities related to non-destructive checks, thermal treatments, inspections and tests.

  2. MODALITIES OF DATA PROCESSING
  The treatment is carried out by means of the operations or set of operations indicated in art. 4 paragraph 2 of General Data Protection Regulation (GDPR)(EU) 2016/679: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.The treatment is carried out, at the company Eurocontrol s.r.l. by the persons in charge of processing in compliance with theprinciples of necessity and pertinence also with the aid of electronic or automated tools, in the ways and within the limits necessary to pursue the aforementioned purposes

  3. DATA CONFERENCE
  The provision of personal data is necessary to fulfill the contractual, accounting and tax obligations.

  4. REFUSAL OF DATA CONFERENCE
  Any refusal by the interested party to provide the personal data referred to in paragraph 3 will make it impossible to carry out the activities referred to in point 1. This refusal must be explicitly communicated in writing.

  5. DATA COMMUNICATION
  Personal data may be disclosed to the managers and processors (employees of the company) and may be communicated for the purposes referred to in paragraph 1 to the tax consultant and in general, to all those subjects to whom communication is necessary forthe correct fulfillment of contractual obligations.

  6. DIFFUSION OF DATA
  Personal data are not subject to disclosure.

  7. RIGHTS OF THE INTERESTED
  The EU General Data Protection Regulation (GDPR)2016/679 (in articles 15, 16, 17, 18 20 and 21) gives the interested party the exercise of specific rights, including that of obtaining from the holder confirmation of the existence or otherwise of their personal data and their making available in an intelligible form; the interested party has the right, among other things, to have knowledge of the origin of the data, of the purposes and methods of the processing, of the logic applied to the processing, of the identification details of the data controller and of the subjects to whom the data may be communicated; the interested party also has the right to obtain the updating, rectification and integration of data, cancellation, transformation into anonymous form or blocking of data processed in violation of the law; the owner has the right to object, for legitimate reasons, to the processing of data. Furthermore, the data subject may request access to their personal data from the Data Controller.

  8. CONSENT TO TREATMENT
  The assignment of the Contract of Work or Supply constitutes -as described above -the authorization to process the Data by the Customer / Supplier. Customer / Supplier data will be deleted within the maximum term of 5 years from the end of validity of the contract if not specifically required by other applicable law.

  9. HOLDER OF THE TREATMENT
  The data controller is EUROCONTROL srl based in theheadquarter Zona Industriale –89900 Porto Salvo – Vibo Valentia.

  Date, dec. '05 first issue
  21 May 2018, last update (for adaptation to EU General Data Protection Regulation2016/679)