Policy on the processing of personal data

(ART.13 EU Regulation 2016/679)

With this policy, pursuant to Article 13 of European Regulation 679/2016 (hereinafter “GDPR”), we hereby inform you of the methods and purposes of the processing of personal data and the measures taken to protect the confidentiality and security of this data.

Controller

The Controller is
CAVIRO EXTRA S.P.A. s.u. with registered office at 8 Via Convertite, Faenza (RA), Italy
e-mail: caviroextra@caviroextra.it
(hereinafter, the “Company”).

Purposes and legal basis of data processing

Personal data will be processed for the following purposes:

pre-contractual negotiations;
execution of the contract/order arising from the existing relationship with you;
fulfilment of obligations established by law, regulations, EU legislation or an order issued by a competent Authority;
fulfilment of tax, administrative and accounting obligations;
exercising the Company’s right of defence.

Data subject to processing

Personal data and contact details of customers and supplier contact persons;
Personal data potentially contained in the documentation exchanged during the management of the business relationship;

Data retention period

The Controller will store your personal data for the duration of the contractual relationship or for the time necessary to fulfill the aforementioned purposes, in addition to the time defined by law for storing records. After this period, the data will be deleted or made anonymous.

Data processing methods

Personal data will be processed by authorised employees and associates of the Company or its subsidiaries/affiliates, in their capacity as authorised processors of personal data, in a manner in keeping with the aforementioned purposes and in compliance with current regulations, using manual, digital and electronic tools.
The Company adopts specific security measures to prevent data loss, the unlawful use of data and unauthorised access.

Categories of recipients

Your personal data may be disclosed for legal obligations or exclusively for reasons connected with the execution of the contract to the following third parties:

Banks and insurance companies that provide services necessary for the fulfilment of the aforementioned purposes;
Consultants, accountants, professionals or bodies that carry out activities on behalf of the Company and outsourced by the same, in their capacity as external Processors;
Parties in charge of the maintenance of I.T. systems and/or system administrators;
Public or private supervisory authorities in compliance with contractual or legal obligations;
CAVIRO SCA, as the parent company, and the other companies in the CAVIRO Group within the scope of the service activities provided and for the purposes listed above;

A Data Subject’s rights

In your capacity as a Data Subject, you have the right to request from the Controller:

access to your personal data;
the updating, or if desired, the integration and/or rectification of inaccurate data.
the transformation of your personal data into anonymous form or the blocking of unlawfully processed data;
proof that the parties to whom the data has been communicated have been informed of the operations in letters b) and c);
the restriction of the processing of data concerning you or to object to its processing, in the cases provided for;

We also hereby inform you that you have the right to lodge a complaint with a competent Supervisory Authority.
Requests to exercise any of these rights may be addressed to the Controller.

The Controller
Caviro Extra s.p.a. s.u.