General information
The provided personal data will be the object of processing complying with the rules of GDPR UE 2016/679 Regulation, in particular in respect of the principles of need, transparency, legitimacy, honesty and proportionality of processing of personal data.
The Data Controller
The Data Controller of the data collected is the company Renner Italia S.p.A., with registered office in via Ronchi Inferiore, 34, 40061 Minerbio (BO), Vat no. 024333001209: Renner Italia autonomously decides on the purposes and methods of processing, as well as on the security procedures to be applied in order to guarantee confidentiality, integrity and availability of data. The up-to-date list of processing Responsibles and Operators is kept at Data Controller headquarter.
Object of the processing
The Data Controller processes personal data provided by you or acquired by the relationship only for purposes, linked to the instauration and management of your Relationship. as supplier/consultant of the Data Controller, such as detailed in art. number 4 of this Information sheet.
Method and duration of processing
The processing of your personal data is carried out by means of the operations indicated in art. 4 par. 2 of GDPR and in compliance with the principles of lawfulness, fairness and transparency and the other principles indicated in art. 5 of GDPR.
The Data Controller will process your data for the purpose of establishing and managing the supply/consultancy relationship for the time necessary to fulfill the different purposes of the processing and in any case for no more than 10 years from the termination of the relationship for the purposes of service, contractual, tax and accounting or legal defense.
Purposes of processing and legal basis of the processing, optional or mandatory nature of data conferment and consent need and consequences of missed consent; automatic decision processes.
The collected personal data will be manually processed and/or by means of technologic or telematic means for the following purposes:
- for purposes related to obligates established by law, regulation and community standards;
- for the acquisition of preliminary information to the conclusion of the contract with the supplier/consultant at the request of the same potential supplier, its selection and qualification of technical – professional nature;
- for the fulfillment of contractual obligates such as order management, invoicing, payment, supplier/consultant database management and the maintenance of the relevant register;
- for defense purposes such as the management of controversies in the event of non-fulfillment, disputes, legal disagreements or transactions.
For the aforementioned purposes, the processing of data is necessary i) for the execution of the obligates arising from the contract with the supplier/consultant and/or for any pre-contractual obligations adopted at the request of the same; ii) to fulfill a legal obligate to which the Data Controller is subject and, finally, iii) for the pursuit of the legitimate interest of the Data Controller, such as the management of the controversy.
The provision of your data is mandatory and necessary for the execution of the contract; therefore, refusal to provide the same implies the impossibility of establishing and executing the contractual relationship.
The processing of your data will in no way be subject to profiling and/or automated decisions.
Access and data transfer
Your data will be treated by means of technological and manual tools suitable to guarantee safety and secrecy and will not be spread. Your data could be made accessible and/or transferred for the purposes at point 4:
- to employees and/or collaborators of the Data Controller, names Processing Operators
- to third parties (for example: providers to manage and update Website, suppliers, lending institution, professional bureau etc.) which will do outsourcing works on behalf of the Data Controller, in their role of Responsibles of processing, as well as to the competent authorities (Prefecture, Police headquarter, Police, Carabinieri corps, Firefighters), public and/or private institutions for the law compliances.
The management and storage of personal data will take place on paper archives at the headquarters of the Data Controller and/or on servers located within the European Union owned by the Data Controller and/or by third-party companies appointed and duly appointed as Responsibles of processing. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller ensures from now on that the transfer will take place in accordance with the applicable legal provisions by stipulating, if necessary, agreements that ensure an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission.
The rights of the interested part
You may exercise the rights set forth in Articles 15 to 22 GDPR, in particular the right to access, rectify or delete the data, to ask for the limitation or to oppose the processing, as well as the right to data portability.
Interested party have the right to lodge a complaint to the Guarantor Authority.
In case of violation of your data, considering what is foreseen in article 34 of GDPR, the Data Controller will communicate to you the violation.
Contacts to exercise the rights of the interested part
You may exercise your rights under current legislation by sending a registered letter with return receipt to the Data Controller at its registered office or by accessing the page of Renner Italia’s website dedicated to privacy: http://www.renneritalia.com/en/trattamento-dati/