SUPPLIER INFORMATION

Information on the processing of personal data

Dear Supplier,

I hereby provide you with information regarding the processing of your personal data.

Premise

Pursuant to the legislation on the protection of personal data, EU Regulation 2016/679 and Legislative Decree 196/2003, We inform you that the personal data you provide will be treated in compliance with the aforementioned legislation and the obligations of confidentiality which inspires our activity.

OWNER OF THE TREATMENT

The Data Controller is S.M.E. S.R.L. in the person of its pro tempore legal representative, with headquarters in via Garibaldi, n. 13/B – 48769 Sassofeltrio (RN), email info@smesrl.biz, p.e.c. smepec@pec.it, p.iva 02404050417.

Personal data are collected by the Data Controller through registration and storage in our paper and electronic databases.

The processing is based on principles of correctness, lawfulness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, confidentiality and accountability.

PURPOSE OF THE TREATMENT FOR WHICH THE DATA ARE INTENDED AND LEGAL BASIS

The data collected and processed will be used exclusively for the purposes of:

• A) FULFILLMENT OF TAX AND ACCOUNTING DUTIES

The legal basis of the processing for the purpose A) is the fulfillment of a legal obligation to which the owner is subjectof the treatment.

• B) SUPPLIER MANAGEMENT
• C) FULFILLMENT OF ADMINISTRATIVE AND ACCOUNTING DUTIES
• D) EXECUTION OF THE CONTRACT AND/OR PRE-CONTRACTUAL MEASURES

The legal basis of the processing for purposes B), C) and D) is the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same.

The provision of your personal data and the consequent processing by the Data Controller, for the purposes mentioned above, are necessary for the establishment, continuation and correct management of the relationship between the Data Controller and the Data Subject, or must be understood as mandatory according to law, regulation or community legislation; Any refusal to provide the requested personal data may cause the impossibility, in whole or in part, to perfect and manage the existing or evolving relationship.

DATA PROCESSING METHODS

Your data will be processed by the Data Controller with manual, computerized and telematic tools within the scope and for the purposes specified above.

CATEGORIES OF SUBJECTS TO WHOM THE DATA MAY BE COMMUNICATED

The processing of your personal data may be carried out by means of subjects acting under the authority of the Data Controller (so-called authorized) and / or subjects with specific tasks and functions related to the processing of personal data (so-called designated), expressly and specifically identified and instructed. These subjects will process the data in accordance with the instructions received from the Data Controller, according to operational profiles assigned to them in relation to the functions performed.

The data may also be processedby third parties, which are used for the provision of services related to the purposes pursued, such as consultants and credit institutions for accounting-administrative purposes, commercial agents, some of whom act as data processors (the complete list may be requested from the Data Controller).

The data may be communicated to third parties, such as banks and credit institutions for the execution of payments,as well as to customers. The contact details of some suppliers may only be disclosed to customers for any repairsor interventions on the purchased good.

Please note that your data will not be subject to disclosure.

DURATION OF TREATMENT AND STORAGE

Your personal data will be kept for the time necessary for the execution of the services provided for in the contract. In any case, the further conservation provided for by the applicable legislation including that provided for by art. 2946 cod. civ. (ordinary prescription). More information is available from the Data Controller.

DATA TRANSFER

The data controller does not transfer personal data to third countries; However, it reserves the right to use cloud services (or other services) and in this case the service providers will be selected among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

RIGHTS OF THE INTERESTED PARTY

You have the right to ask the Data Controller, at any time, for access to your Data, updating, correction and integration, cancellation or transformation into anonymous form or blocking of the same, certification that these operations have been brought to the attention of those to whom the data are communicated, to oppose their processing or to request the limitation of processing, or to obtain in a structured format, commonly used and readable by automatic device, the data concerning you, in the cases provided for by Article 20 of the Regulation.

Requests should be sent in writing to the Data Controller at the following address smepec@pec.it

In any case, you always have the right to lodge a complaint with the Guarantor Authority for the protection of personal data for the exercise of your rights or for any other matter relating to the processing of your personal data.