The European Regulation EU/2016/679 (hereinafter “Regulation“) establishes rules on the protection of individuals with regard to the processing of personal data, as well as rules on the free movement of such data. In compliance with the principle of transparency provided by Article 5 of the Regulation, GI.PI srl, Via Avogadro 24 62010 Montelupone (MC), as Data Controller provides you with the information required by Articles 13 and 14 of the Regulation. Purposes of the Treatment The processing of your personal data will be based on the principles of correctness, lawfulness and transparency, protecting your confidentiality, your rights and in accordance with the privacy policy of the Entity/Company. The Entity/Company also undertakes to process your data in compliance with the principle of “minimization”, i.e. acquiring and processing data limited to what is necessary with respect to the following purposes:
- a) Product realization
- b) Goods shipping activities
- c) Warehouse management
- d) Product quality control activities
- e) Product development activities
Treatment | Production and Warehouse | |
Criteria | Purposes | Consent |
| the processing is necessary for the performance of a contract to which the data subject is party or the performance of pre- contractual measures taken at the request of the data subject |
| In relation to related purposes, processing may be carried out without your consent. |
f) Management of the sale of goods and ancillary services
g) Complaints management
h) Quotation issuance
i) After-sales support activities
j) Fulfillment of obligations under the law, regulations and EU legislation
Treatment | Customer management and sales area | |
Criteria | Purposes | Consent |
| The processing is necessary for the performance of a contract to which the data subject is party or the performance of pre-contractual measures taken at the request of the data subject. |
| In relation to related purposes, processing may be carried out without your consent. |
| The processing is necessary to comply with a legal obligation to which the data controller is subject |
| In connection with the related purposes, processing may be carried out without your consent |
k) Management of contractual relationships with banks and financial intermediaries
l) Management of tax obligations
m) Management of accounting compliance
Treatment | Accounting | |
Criteria | Purposes | Consent |
| the processing is necessary for the performance of a contract to which the data subject is party or the performance of pre-contractual measures taken at the request of the data subject. |
| In connection with the related purposes, processing may be carried out without your consent. |
| the processing is necessary to comply with a legal obligation to which the data controller is subject. |
| In connection with the related purposes, processing may be carried out without your consent. |
Data processed
| Biographical data (first name, last name, gender, place and date of birth, residence, domicile) |
| Sales contract data (contract value, subject matter, terms, conditions, etc.). |
| Contact information (phone number, e-mail, etc.). |
| Data related to orders and/or quotations |
| Invoices |
| Type of goods and services purchased |
| Habits of living and consumption |
The provision of your personal data and consent to the processing is mandatory and your refusal to provide the data will result in the total impossibility of entering into the contract.
Methods of Processing
The processing of your personal data will be carried out using paper and computer tools in accordance with the provisions on the protection of personal data and, in particular, the appropriate technical and organizational measures referred to in Article 32.1 of the Regulations, and with the observance of all precautionary measures to ensure the relative integrity, confidentiality and availability.
Categories of recipients
Your personal data may be communicated, in strict relation to the purposes indicated above, to the following subjects or categories of subjects:
l Third parties identified by us as Data Processors
l Providers of transport and logistics services
l Credit institutions and banks
l Consultants and freelancers also in associated form
l Public bodies in relation to which the obligation of communication
is provided for In relation to these categories of recipients, the Data Controller undertakes to rely exclusively on subjects that provide adequate guarantees regarding data protection, and will appoint them as Data Processors ex art. 28 of the Regulations. The list of Data Processors is available at the Entity/Company and you may view it upon request to the Data Controller..
Your data, moreover, will be processed, exclusively for the above purposes, by employees and/or collaborators of the Entity/Company, specifically authorized and instructed by the Data Controller pursuant to Article 29 of the Regulations.
Your personal data will not be disseminated, unless required by a rule of law or regulation or by EU legislation.
Transfer of personal data
Your personal data will not be transferred to non-European countries or international organizations.
Retention period
Your personal data will be retained for contractual and legal obligations.
Once the existing relationship with our Company is terminated, the data related to the specific processing, and those necessary, will be kept for the period imposed by current regulations, all others will be deleted immediately.
Rights granted to the data subject
At any time you may exercise, with respect to the Data Controller, your rights provided for in Articles 15-22 of the Regulations. In particular, at any time, you will have the right to request:
.
In particular, at any time, you will have the right to request:
- Access to your personal data;
- Their correction in case of inaccuracy of the same;
- cancellation;
- The restriction of their processing.
It will also have:
- the right to object to their processing if they are processed in pursuit of a legitimate interest of the Data Controller, if it considers its fundamental rights and freedoms have been violated;
- The right to revoke your consent at any time in relation to the purposes for which it is needed;
- The right to portability of your data, i.e., the right to request and receive in a structured, commonly used, machine-readable format, personal data relating to you.
Identity and contact details of the Data Controller Data Controller
GI.PI srl, registered office: Via Avogadro 24 – 602010 Montelupone (MC), tel.: 0733-228707, e-mail: amministrazione@gipi-snc.com