INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR DATA COLLECTED FROM THE DATA SUBJECT FOR THE PROCESSING:
Customer Registry
pursuant to Art. 13 of Regulation (EU) 679/2016 concerning the protection of individuals with regard to the processing of personal data
PRIMA SRL (hereinafter the "Company" or the "Data Controller"), with registered office in Via dei Ventuno 6 38122 TRENTO (TN) Italy and VAT number 02369560228, as the Data Controller, informs you, pursuant to Art. 13 of European Regulation 679/2016 concerning the protection of personal data ("GDPR"), regarding the processing of your personal data that will be carried out by the writer.
1. Type of data processed
The Company is the owner of the processing of personal data communicated by the User to the writer which includes:
Company Name/Surname and Name, Tax Code and other identification numbers, Bank Details, Address, E-mail Address
2. Purpose of the processing
Data processing is carried out by the Company in the performance of its activities. In particular, the Data provided by the Data Subjects will be processed, using IT and other tools, for the following purposes:
Commercial, accounting and tax obligations
The lawfulness criterion for which processing is made possible is: The processing is necessary to fulfil a legal obligation to which the Data Controller is subject
The basis of which is reflected in a legal basis: EU regulation
Electronic payment instruments
The lawfulness criterion for which processing is possible is: The Data Subject must give consent to the processing of their personal data for the specific purpose
The basis of which is reflected in a legal basis: EU regulation
Promotional activities
The lawfulness criterion for which processing is possible is: The Data Subject must give consent to the processing of their personal data for the specific purpose
The basis of which is reflected in a legal basis: EU regulation
Direct E-mail Marketing campaigns
The lawfulness criterion for which processing is possible is: The Data Subject must give consent to the processing of their personal data for the specific purpose
The basis of which is reflected in a legal basis: EU regulation
3. Processing methods
The Data will be processed by the Company with electronic and manual systems according to the principles of correctness, loyalty and transparency provided for by the applicable legislation on the protection of personal data and protecting the confidentiality of the Data Subject through technical and organisational security measures to guarantee a level of adequate security.
4. Data retention
The Data provided by the Data Subject will be processed for a duration:
Start date: 27/05/2020
Duration criterion: Duration determination criterion
Criterion description: The obligation of retention is conditioned by the existence of commercial relations with the client and by the provisions regarding the retention of accounting and tax data.
The information may be kept in the system indefinitely
5. 5 Data Subjects
Customers, Prospects
6. Exceptions Art. 9/10
7. Communication, dissemination and transfer of Data
The Data will be processed, to the extent necessary, by authorised, suitably instructed and trained personnel, by the Data Controller as well as by the personnel of third parties who provide services to the Data Controller and carry out Data processing on behalf of and on instructions from the latter as data processors.
In case of communication to third parties, the recipients can be:
Categories:
Recipient: Customers, carriers, shippers, agents, responsible for using the software, professionals to whom we turn to fulfil the obligations.
Addressees:
No specific recipients have been defined to whom the data may be communicated
More generally, in carrying out its ordinary business activities, the Data may be disclosed to parties which perform checks, auditing and certification of the activities carried out by the Data Controller, consultants and freelancers in the context of tax assistance services, judicial services and in the case of corporate transactions for which it is necessary to assess the corporate assets, bodies and public administrations, as well as to subjects legitimated by law to receive such information, Italian and foreign judicial authorities and other public authorities, for the purposes connected with the fulfilment of legal obligations, or for the performance of assumed obligations arising from the contractual relationship, including for the need for defence in court.
The collected data will not be transferred to non-EU countries
8. Activities of profiling and/or automatic processing
The data collected will not be subject to profiling or automatic processing
9. Additional subjects connected to the processing
Data Controller(s) and possible representative(s) in the EU:
There is no EU representative for the Data Controller
Joint Data Controller/s:
There is no Joint Data Controller for the processing in question
Manager/s:
Name and Surname: Nicola Carlin
Tax_code: CRLNCL80A14L378Z
DPO (Data Protection Officer):
The appointment of a DPO/RDP for the processing in question is not envisaged
10. What rights does the Data Subject have?
The Data Subject may exercise, in relation to the processing of the data described therein, the rights provided by the GDPR (Art. 15-21), including:
to receive confirmation of the existence of Data and access its content (rights of access);
to update, modify and/or correct the Data (right of rectification);
to request the cancellation or restriction of the processing of Data processed in violation of the law, including that which does not need to be kept for the purposes for which the Data was collected or otherwise processed (right to be forgotten and right to restriction);
to oppose the processing (right of opposition);
to make a complaint to the Supervisory Authority (Guarantor for the protection of personal data vwww.garanteprivacy.it) in case of violation of the regulations regarding the protection of personal data;
to receive an electronic copy of the Data concerning them as Data Subject, when such Data has been returned in the context of the contract and request that such Data be transmitted to another data controller (right to data portability).
To exercise these rights, the Data Subject may contact the Data Controller by sending a communication to:
Contact type: PEC
Contact address: primasrltn@pec.it
When contacting us, as the Data Subject you must ensure that you include your name, e-mail/postal address and/or telephone number/s to make sure that your request can be handled correctly.
TRENTO, 27/05/2020