PRIVACY POLICY UNDER ART. 13 AND 14 OF GDPR

Dear customer/supplier
Under the EU Regulation on the protection of personal data (GDPR) Articles 13 and 14, paragraph 1, we are required to inform you of basic data processing where personal data are collected directly or indirectly from you, as specified in paragraph 1, letters a-f. In conformity with the GDPR APA-CT srl informs you of the following:

IDENTITY OF THE CONTROLLER
The controller is the company PURPOSES
Data is collected for the following purposes: performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract; discharge of obligations laid down by law, regulations, community law; customer management (customer administration; administration of contracts, orders, shipments and invoicing; monitoring of reliability and solvency); management of providers (administration of providers; administration of contracts, orders, arrivals, invoicing; selection as required by the company); management of disputes (breach of contract; formal notice; transactions; debt collection; arbitration; legal disputes); sending of advertising materials (newsletters; catalogues/brochures). The legal basis shall be based on: your consent provided for one or more specific purposes; specific contractual or pre-contractual requirements; legal obligations to which the company is subject. The categories of data processed are personal data. The sources of said data are sales agents, representatives, business brokers.

METHODS OF PROCESSING
In relation to the aforementioned purposes, personal data are processed in hardcopy and and via computer, with the logic strictly related to the aforementioned purposes and, in any case, to ensure the safety and privacy of your data and full compliance with the law.

COMMUNICATION
Recipients or categories of recipients are: postal authorities or other businesses/courier services for the delivery of correspondence; banks and credit institutions; debt collectors; law firms; computer maintenance/repair businesses; professional firms and/or businesses and/or associations of businesses and business owners which provide us with specific accounting and/or taxation services, etc.; self-employed, temporary, occasional workers; agents or representatives. Data will not be released.

PERIOD OF STORAGE
The period for which personal data will be stored in databases in reference to processing for contractual purposes shall coincide with the duration of the contract, while in reference to legal obligations it shall be laid down by the law. Regarding marketing, promotions, sending of advertising materials, the period of storage shall be 3 years.

RIGHTS OF THE DATA SUBJECT
You have the right to request access to and rectification or erasure of your personal data or restriction of processing concerning the data subject and to object to processing as well as the right to data portability. As our processing is legally based on your consent (point (a) of Article 6(1) or point (a) of Article 9(2) ), you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You have the right to lodge a complaint with a supervisory authority.

CONSEQUENCES OF NOT PROVIDING DATA
It is necessary to provide your personal data to enter a contract, therefore refusal to provide personal data shall determine the impossibility of contract performance. When treatment of personal data is required by law and refusal to provide personal data shall determine the impossibility of discharge of legal obligations; additionally, comunication of your personal data for marketing and advertising purposes is optional, therefore refusal to provide personal data shall determine the impossibility, including indirectly, of receiving advertising materials or participating in promotional activites.

Forlì, 25/5/2019

Download the original document in pdf [in Italian]