Pursuant to art. 13 and 14 of EU Regulation 2016/679 (hereinafter called GDPR) regarding the protection of personal data, we inform you that the personal data collected, with reference to contractual relationships established or simple requests for information, will be processed in compliance of the aforementioned legislation and we provide you with the following information:
PERSONAL DATA COLLECTED
The personal data collected, with your free and express consent, are exclusively related to:
– identification data (for example: name, surname, address, telephone, fax, e-mail, etc …)
– tax data (if required by law – for example tax code, VAT number etc …)
HOLDER AND RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA (13.1 a, b)
Holder of the treatment
DEEP HOLES GROUP SAS by William and Stefano Cocchi
Via Lumumba, 9 (Torrazzi ind. Area) – 41122 Modena (MO)
firstname.lastname@example.org – 059 280186
The interested party can contact the internal contact person Stefano Cocchi at any time for the exercise of the rights referred to in Article 13.2 letters b, c, d. The list of any external managers can be requested from the owner at any time.
PURPOSE AND METHOD OF PROCESSING PERSONAL DATA (13.1 c)
The purposes of the processing of personal data are as follows:
1) fulfillment of legal obligations related to the contractual relationship;
2) organizational management of the contractual relationship;
3) satisfy the request received;
Personal data will be processed in paper, computerized and telematic form, and entered in the relevant databases which can only be accessed by the owner and those in charge of him. As regards the data processed electronically, it is emphasized that all appropriate security measures have been adopted to protect the rights, freedoms and legitimate interests of the data subject as per article 22.3 of the GDPR.
POSSIBLE RECIPIENTS OF THE PERSONAL DATA (13.1 e, f)
Without prejudice to the communication to third parties made in execution of legal obligations or deriving from regulations or other community legislation, or at the request of judicial offices or other third parties to whom the faculty is recognized by the aforementioned provisions, the data may be communicated to the following categories of third party recipients:
banks and credit institutions, for the management of payments;
credit recovery companies, factoring companies, leasing companies, insurance or credit transfer companies, credit consortia (for the sole purpose of credit protection and better management of our rights relating to the individual commercial relationship);
commercial information company;
professionals and professional firms (lawyers, chartered accountants, auditors, etc.);
subjects that provide maintenance and / or IT assistance services in relation to the Controller’s IT systems, databases and services;
shippers, carriers and couriers;
other suppliers and sub-suppliers (in the case of customer or supplier data), or customers (in the case of supplier or sub-supplier data);
other companies, entities and / or natural persons who carry out instrumental, support or functional activities for the execution of the contracts or services requested, public and / or private;
The owner has appointed as external managers all the categories of third party recipients to whom the communication of the data was mandatory, except in the case in which they assume the role of independent data controller in accordance with current legislation.
Personal data will not be disseminated in any way and will not be processed with automated decision-making processes (such as profiling). The owner also informs that he does not intend to transfer the data to a non-EU third country or to an international organization outside the EU.
PERIOD OF STORAGE OF PERSONAL DATA (13.2 a)
At the end of the service, the provision of the service or the response, personal data will be stored exclusively for historical or statistical purposes, in accordance with the law, regulations, community legislation and codes of ethics and good conduct signed pursuant to Article 40 of the GDPR, for a period as per current legislation (usually 10 years), or, if they are not subject to any law, for a period not exceeding five years. Beyond this period, personal data will be stored anonymously, or will be destroyed.
RIGHTS OF THE INTERESTED PARTIES (13.2 b)
In relation to the aforementioned treatments, the interested party has the right to request access to his personal data and the correction or cancellation of the same or the limitation of the treatment that concerns him or to oppose their treatment, as well as having the right to data portability.
RIGHT OF WITHDRAWAL OF CONSENT (13.2 c)
If the processing is based on consent, the owner informs the interested party that he has the right to revoke it at any time without prejudice to the lawfulness of the processing.
RIGHT TO CLAIM (13.2 d)
The owner informs the interested party of his right to lodge a complaint with a supervisory authority, in which case he will have to ask him for information using one of the systems indicated above to contact him.
COMPULSORY OR OPTIONAL NATURE OF DATA PROVISION (13.2 e)
The provision of data and the related processing are mandatory in relation to the purposes relating to tax obligations; it follows that any refusal to provide data for these purposes may make it impossible for the data controller to carry out the same professional relationships and legal obligations. The provision of data and the related processing is to be considered optional in other cases, without any consequence.
POSSIBLE EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS (13.2 f)
The owner informs the interested party that on this site there is no automated decision-making process, therefore, in particular, there is no profiling system.
This policy refers exclusively to this site and not to sites that can be accessed through any links available on some pages.
Last updated: 05/31/2022