Privacy Policy

Information pursuant to EU Regulation No. 2016/679 - GDPR

In compliance with the new EU privacy regulations, i.e. the EU Regulation 2016/679 known as the General Data Protection Regulation (GDPR), it is our duty to protect and safeguard your personal data and to provide you with information on how and for what purpose we process such data.

A) DATA CONTROLLER.

The data controller is A. Minardi & figli srl, domiciled in Bagnacavallo (Ravenna, Italy) 48012, via Boncellino, 32 - V.A.T. no./Tax Code 00916310394 - tel. 0545-61460 - e-mail: info@minardierbe.it.

B) DATA PROTECTION OFFICER.

Not falling under the specific case of Article 37 of EU Regulation 2016/679, the Data Protection Officer has not been designated.

C) PURPOSE OF PROCESSING.

The personal data provided by you (fiscal data: VAT number and tax code; personal data: name and surname, company name, address, telephone, fax, e-mail; bank data: IBAN and backing bank) will be processed for contractual, institutional purposes, connected or instrumental to the Company's activities and specifically:

  • for purposes strictly related to the management of the contractual relationship to which you are party or to fulfil, prior to the execution thereof, your specific requests;
  • for the acquisition of information prior to the conclusion of a contract (issue of quotations and offers to active and/or potential customers, issue of requests for offers to active and/or potential suppliers);
  • for the compliance with legal obligations in the areas of taxation and accounting;
  • for customer/supplier management (customer/supplier administration, administration of contracts, orders, shipments/arrivals and invoices, reliability and solvency checks);
  • for the administration of disputes (breach of contract, warnings, settlements, debt collection, arbitration, litigation);
  • for processing internal statistics;
  • for the communication and/or sending of advertising material, commercial information, promotional activities and communications concerning our company, by mail and/or post, telephone, e-mail and newsletter;
  • for mutual and legitimate interest.

D) PROCESSING AND STORAGE METHODS.

The data will be processed by the Company by means of electronic, telematic and manual systems, in compliance with the principles of lawfulness, correctness and transparency, purpose limitation and data minimisation, pursuant to Article 5 GDPR 679/2016, and protecting the Customer's confidentiality by means of technical and organisational security measures to ensure an adequate level of security.

All data processing officers are suitably trained.

Personal data will be stored for a maximum of 10 years after the conclusion of the contractual relationship for administrative, tax, accounting and legal (legal defence) purposes.

Personal data will be retained for a period of time appropriate to the performance of the requested service or, in any case, until its deletion is requested.

E) COMMUNICATION AND DISSEMINATION OF DATA.

Your personal data will not be distributed and will not be the subject of communication without your explicit consent, except for necessary communications that may involve the transfer of data to:

  • public authorities;
  • consultants, professional firms and/or companies and/or insurance companies that provide certain accounting and tax services to us;
  • debt collection companies and/or law firms;
  • computer equipment maintenance and repair companies;
  • shippers, carriers, freight forwarders;
  • postal and logistics companies;
  • armed forces and police forces;
  • chambers of commerce for industry, crafts and agriculture;
  • banks and credit institutions.

F) TRANSFER OF DATA.

The personal data provided will not be transferred either to Member States of the European Union or to third countries outside the European Union.

G) CONSEQUENCE OF FAILURE TO DISCLOSE.

Without the processing and communication of personal data for the described purposes, the services and/or products requested, in whole or in part, cannot be provided to the person concerned.

H) RIGHTS OF THE DATA SUBJECT

Article 15 - Rights of access by the data subject (C63, C64)

  1. The data subject has the right to obtain from the controller confirmation as to whether or not personal data relating to him or her are being processed and, if so, to obtain access to the personal data and the following information:
    1. the purpose of processing;
    2. the categories of personal data in question;
    3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations;
    4. where possible, the intended period of retention of personal data or, if this is not possible, the criteria used to determine that period;
    5. the existence of the data subject's right to request from the controller the rectification or deletion of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing;
    6. the right to file a complaint with a supervisory authority;
    7. where the data are not collected from the data subject, all available information on their origin;
    8. the existence of an automated decision-making process, including profiling as referred to in Article 22, paragraph 1 and 4, and, at least in such cases, meaningful information on the logic used, as well as the importance of such processing for the data subject and the envisaged consequences thereof.
  2. Where personal data are transferred to a third country or international organisation, the data subject has the right to be informed of the existence of appropriate safeguards within the meaning of Article 46 relating to the transfer.
  3. The data controller provides a copy of the personal data being processed. In the event of further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the data subject makes the request by electronic means, and unless otherwise specified by the data subject, the information shall be provided in a commonly used electronic format.
  4. The right to obtain a copy referred to in paragraph 3 must not infringe the rights and freedoms of others.

Article 16 - Right to rectification (C65)

The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.

Article 17 - Right to erasure (“right to be forgotten”) (C65, C66)

  1. The data subject shall have the right to obtain from the data controller the deletion of personal data concerning him/her without undue delay, and the data controller shall be obliged to delete the personal data without undue delay if one of the following reasons applies:
    1. personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    2. the data subject withdraws the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a or Article 9, paragraph 2, letter a, and if there is no other legal basis for the processing;
    3. the data subject objects to the processing pursuant to Article 21, paragraph 1, and there is no overriding legitimate ground for processing, or objects to the processing pursuant to paragraph 2 of Article 21;
    4. personal data have been unlawfully processed;
    5. personal data must be deleted in order to comply with a legal obligation under Union or Member State law to which the data controller is subject;
    6. personal data were collected in connection with the provision of information society services as referred to in Article 8, paragraph 1.
  2. Where a data controller has made personal data public and is obliged under paragraph 1 to delete them, it shall, taking into account available technology and the costs of implementation, take reasonable steps, including technical measures, to inform data controllers who are processing personal data of the data subject's request to delete any link, copy or reproduction of his or her personal data.
  3. Paragraphs 1 and 2 shall not apply to the extent that the processing is necessary:
    1. for the exercise of the right to freedom of expression and information;
    2. for compliance with a legal obligation to which the processing is subject under Union or Member State law or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
    3. for reasons of public interest in the field of public health in accordance with Article 9, paragraph 2, letter h) and i) and Article 9, paragraph 3;
    4. for archiving purposes in the public interest, for scientific or historical research or statistical purposes in accordance with Article 89, paragraph 1, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of such processing;
    5. for the establishment, exercise or defence of a legal right.

Article 18 - Right to restriction of processing (C67)

  1. The data subject has the right to obtain from the data controller the restriction of processing when one of the following cases occurs:
    1. the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;
    2. the processing is unlawful and the data subject objects to the deletion of the personal data and requests instead that their use be restricted;
    3. although the data controller no longer needs them for the purposes of processing, the personal data are necessary for the establishment, exercise or defence of a legal right by the data subject;
    4. the data subject has objected to the processing pursuant to Article 21, paragraph 1, pending verification as to whether the data controller's legitimate reasons prevail over those of the data subject.
  2. Where processing is restricted pursuant to paragraph 1, such personal data shall, except for storage, only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims or the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.
  3. A data subject who has obtained a restriction of processing pursuant to paragraph 1 shall be informed by the data controller before that restriction is lifted.

Article 21 - Right to object (C69, C70)

  1. The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6, paragraph 1, letter e or f, including profiling on the basis of these provisions. The data controller shall refrain from any further processing of personal data unless it can demonstrate compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
  2. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him/her carried out for such purposes, including profiling insofar as it is related to such direct marketing.
  3. If the data subject objects to processing for direct marketing purposes, the personal data are no longer processed for those purposes.
  4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.
  5. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using specific techniques.
  6. Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1, the data subject shall have the right, on grounds relating to his or her particular situation, to object to the processing of personal data relating to him or her, except where the processing is necessary for the performance of a task carried out in the public interest.

Users may exercise their rights by sending an e-mail to info@minardierbe.it.

We may periodically update this Privacy Policy and publish the updated version on our website www.minardierbe.it.