In compliance with the provisions of Regulation (EU) 2016/679 on the Protection of Personal Data, pursuant to art. 13 and 14, the purpose of this document is to provide all necessary information regarding the processing of our suppliers’ personal data.
Legal Basis of Processing
In compliance with art. 6 of the Regulation, the processing is lawful to the extent necessary to carry out the contractual relationship with Aquatechnik group S.p.A. to which the data subject belongs. The Data Controller will process your personal data in a lawful, correct and transparent manner, in compliance with the principles established by the General Regulations on the Protection of Persons, ensuring the protection of your personal data and fundamental rights and freedoms.
Purpose of Processing
Please note that the personal data that will be collected during the contractual relationship with Aquatechnik group S.p.A. will be processed for the purposes and in the manner described below:
-
Management of contractual relations and for all matters regarding the performance of the contract or agreements in commercial, organisational, managerial and administrative terms for the use of goods or services received.
-
Verification of information and analysis of reliability by means of a questionnaire requesting information for quality certification, as well as periodic verification of requirements through audits;
-
Creation of master data;
-
Management of internal control and management activities;
-
Management of litigation activities;
-
Mandatory purposes related to legal obligations, such as communication to public authorities.
Processed data
The processed data has been provided by you, or collected from other sources, during the partnership established.
Please note that if you are a legal entity, the protected personal data will be only that relating to the employees working for your organisation or the natural persons representing it.
Methods of Processing
The data will be processed using tools and procedures that are suitable to ensure maximum security and confidentiality and may be carried out either on paper or with the aid of electronic and telematic means. In this sense, the data may be stored both in paper and electronic archives, so as to allow the identification of aggregated or specific data.
After receiving your personal data, it will be stored for a period of time in line with the processing purposes described above and in accordance with mandatory regulations, after which it will be deleted or made anonymous.
Provision of data
If you refuse to provide us with your data, we will be unable to establish or manage a contractual relationship with our company, which is compulsory and does not require you to agree to the processing of your data.
Data Recipients
The subjects who may have access to personal data, within the limits strictly necessary to fulfil the above purposes, are persons appointed by Aquatechnik who are in charge or responsible for the processing of personal data.
In order to carry out certain functions relating to corporate management, the company relies on external parties and/or companies to whom it sends the necessary data, in particular:
-
Public bodies and administrations for checks and controls in compliance with fiscal and civil obligations;
-
Banks and credit institutions for carrying out economic transactions (payments/takings)
-
Associated firms and consulting firms for activities connected with the preparation of financial statements and the auditing of financial statements and to control the company’s organisational management system;
-
Consultants and Law Firms.
-
IT system maintenance companies;
Please also note that the data concerning your staff may also be disclosed to third parties as part of company operations.
A comprehensive list of the external Managers appointed can be consulted at the Data Controller’s Head Office.
Data Retention
All the aforementioned data and the documents relating to your service status will be kept for the fulfilment of all obligations related to or deriving from legal or contractual obligations, as required by the relevant regulations.
Rights of the Data Subjects
Pursuant to EU Regulation, the data subjects have the right to ask the Data Controller access personal data (art. 15), the rectification (art. 16), the erasure of the same or right to be forgotten (art. 17), Right to restriction of processing of personal data regarding him/her (art. 18), right to data portability of data (art. 20) or right to object to their processing art. 21), in addition the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
(art. 22). If the processing of personal data is based on the express consent of the data subject, pursuant to art. 7 paragraph 3 of the Regulation, the subject may revoke his/her consent at any time.
Requests may be made to the Data Controller in the following way:
– By sending an email to the following address: revoca@aquatechnik.it
The data subject also has the right to file a complaint with the relevant supervisory authority (art. 77 of the Regulation) if he/she believes that the processing carried out by the Data Controller is not compliant.
Defence in Court
The Data Controller reserves the right to process your personal data for purposes such as defence in court or for any legal dispute, as a result of wrongful or unlawful conduct.
The Data Controller may also disclose the personal data of the data subject to public authorities in the cases provided for by the Law.
Data Controller
Pursuant to Art. 4, paragraph 7, the Data Controller of personal data is:
Aquatechnik Group S.p.A.
Via P.F. Calvi, 40
20020 Magnago (MI) Italy