Customers and Suppliers Privacy Notice for the processing of personal data pursuant to art. 13 of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, and art. 13 of the General Data Protection Regulation (EU) 2016/679

Parotex S.r.l., with registered office in Via Massari Marzoli, 17 – 21052 Busto Arsizio (VA), Tax ID and VAT No. 02572280127 (hereinafter, the “Controller”), as Data Controller, informs you pursuant to art. 13 of Legislative Decree 196/03, as amended by Legislative Decree 101/2018 (hereinafter, the “Privacy Code”), and art. 13 of the General Data Protection Regulation EU 679/2016 (hereinafter, “GDPR”) that your data will be processed according to the following methods and for the following purposes:

Subject of Processing The Controller processes personal, identifying data (for example, name, surname, company name, address, telephone number, e-mail, bank and payment references) – hereinafter, “personal data” or also “data” – communicated by you during pre-contractual activities or upon the conclusion of contracts for the supply of goods and/or services of the Controller.

Purposes of processing Your personal data are processed without your express consent (art. 6 lett. b), e) GDPR), for the following Purposes:

  • Contractual. To conclude contracts for the supply of goods and/or services of the Controller; to fulfill pre-contractual, contractual and tax obligations deriving from existing relationships with you.

  • Administrative and accounting. For the purposes of the application of the provisions on personal data protection, the processing carried out for administrative and accounting purposes is that related to the performance of activities of an organizational, administrative, financial and accounting nature, regardless of the nature of the data processed. In particular, these purposes are pursued by internal organizational activities, those functional to the fulfillment of contractual and pre-contractual obligations, to the management of the employment relationship in all its phases, to the keeping of accounts and to the application of the rules on tax, trade union, social security-welfare, health, hygiene and safety at work.

  • Informational and promotional. The use of the e-mail coordinates provided by the customer in the context of the sale of a product or service for the direct sale of own products or services is permitted for the purpose of sending informative materials and newsletters. The data subject, at the time of collection and when sending each communication, is informed of the possibility of objecting to the processing at any time, easily and free of charge. To unsubscribe from the mailing list, simply write at any time to the e-mail address marketing@parotex.it or by mail to the physical address of the controller indicated above (headquarters) with the subject “mailing list unsubscription”.

  • Security, pursuant to Legislative Decree 81/2008. With particular reference to the identifying data freely provided by the guest/visitor at our premises (name, surname, institution or company of belonging), the processing has the exclusive purpose of ensuring compliance with corporate security procedures formally applied, also pursuant to current regulatory provisions (e.g., notation in the visitor register/database, assignment of a temporary identification badge, applications of legal obligations on occupational safety).

  • Exercise the rights of the Controller and the right of defense in court.

Methods of processing The processing of your personal data is carried out by means of the operations indicated in art. 4 no. 2) GDPR, namely: collection, recording, organization, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data are subjected to both paper and electronic and/or automated processing. The Controller will process personal data for the time necessary to fulfill the above purposes and in any case for no more than 10 years from the termination of the relationship for Service Purposes and for no more than 5 years from the collection of data for Informational and Promotional Purposes.

Data Access Your data may be made accessible for the purposes referred to in par. 2 of this document to:

  • employees and collaborators authorized by the Controller;

  • Data Processors and System Administrators designated by the Controller;

  • third-party companies or other subjects (indicatively, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies, etc.) that perform outsourcing activities on behalf of the Controller, appointed, if necessary, as data processors;

  • subjects providing services for the management of the information system used by the Data Controller and the telecommunications networks, and who manage the maintenance of the technological part (including e-mail and the newsletter service);

  • freelancers, firms or companies in the context of assistance and consultancy relationships;

  • subjects carrying out monitoring, auditing and certification of the activities carried out by the Data Controller;

  • competent authorities for the fulfillment of legal obligations and/or provisions of public bodies, upon their request. Your data may also be processed, on behalf of the Undersigned, by professionals and/or companies appointed to perform technical, development, management, and administrative-accounting activities.

Data Transfer The Controller processes personal data by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of personal data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes. Personal data is processed at the registered office of Parotex S.r.l., at the operational headquarters, and through the use of servers, which are made available by third-party Providers and are located within the European Union; for further information, contact the Data Controller. It is in any case understood that the Controller, if necessary, will have the right to move the servers even outside the EU. In such a case, the Controller assures from now on that the transfer of extra-EU data will take place in accordance with the applicable legal provisions, following the stipulation of contracts providing for the modalities referred to in Chapter V of the GDPR.

 

Nature of data provision and consequences of refusal to reply As for the data we are obliged to know, in order to fulfill the obligations deriving from existing contracts and the obligations provided for by laws, regulations, EU legislation, or provisions issued by Authorities legitimized by law and by supervisory and control bodies; failure to provide such data will result in the impossibility of establishing or continuing the relationship, within the limits in which such data are necessary for its execution. The provision of data to allow the Controller to send commercial communications is optional; the data subject can object to the processing at any time, easily and free of charge. To unsubscribe from the mailing list, simply write at any time to the e-mail address marketing@parotex.it or by mail to the physical address of the controller indicated above (headquarters) with the subject “mailing list unsubscription”.

Rights of the Data Subject In your capacity as a data subject, you have the rights set forth in Articles 15-21 GDPR, specifically to: obtain confirmation of the existence or otherwise of the data, know their content and origin, verify their accuracy, request their integration, updating, rectification, deletion, limitation of processing, portability, as well as to oppose, for legitimate reasons, their processing. Where applicable, you also have the right to be forgotten, as well as the right to lodge a complaint with the Guarantor Authority (Garante per la Protezione dei Dati Personali).

Methods of exercising rights You may exercise your rights at any time by sending:

  • a registered letter with return receipt to Parotex S.r.l., Via Massari Marzoli, 17 – 21052 Busto Arsizio (VA);

  • an e-mail to the address parotexsrl@certimprese.it. The updated list of Data Processors and persons in charge of processing is kept at the registered office of the Data Controller.