1. Holder of the treatment
MIB Italiana S.p.A., in its capacity as Data Controller (hereinafter referred to as “MIB Italiana”), wishes to inform you that the EU Regulation 679/2016 (so-called GDPR) and Legislative Decree 196/2003, as applicable, regulate data protection personal data, within the scope of their processing activities.
MIB Italiana treats the processing of personal data to the principles of correctness, lawfulness and transparency and necessity, thus protecting your rights.
To this end, pursuant to article 13 of the GDPR and of the Legislative Decree 196/2003, as far as applicable, we provide you with the following information.
2. Object of the treatment
The processing we intend to carry out relates to your personal data, as defined by the GDPR, of which we are, or of which we will be aware, by virtue of the legal relations with you in place.
3. Purpose of the Treatment
The processing of your data has the following purposes:
-performance of administrative and management activities, in compliance with the fulfillment of accounting and tax obligations, and any other obligations imposed by current legislation Fulfilment of contractual and pre-contractual obligations with you in place;
-fulfillment of contractual and pre-contractual obligations with you in place;
-to proceed with the request for contact with our sales representative for the presentation of the services offered by MIB Italiana S.p.A.
The provision of data for the purposes referred to in paragraph 3, letters a), b) and c) is mandatory and the related processing, pursuant to current legislation, may be carried out without the consent of the interested party. Failure to provide the same will result in our inability to fulfill and comply with the commitments taken on you and arising from the existing contractual or pre-contractual relationship.
If you are already our customer, we can send you commercial communications relating to services similar to those of which you are already benefiting, subject to your dissent.
4. Methods of processing
Data processing will be carried out pursuant to art. 4 n. 2) of the GDPR, by means of the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
Your data will be processed either on paper or electronic and / or automated.
Your data, from their receipt / update, will be kept for a period consistent with the purposes of the treatment referred to in paragraph 3 and in any case in accordance with the law. For further clarifications regarding data retention times please write to www.mibitaliana.it.
5. Communication and data transfer
Your data, object of the treatment, will not be disclose. On the other hand, with concerns to point 3, your data may be communicated to the Group’s companies, to third parties, including business partners, consultants and freelancers, banks and credit institutions, insurance companies, financial companies, factoring, leasing, services , credit management and recovery, auditors, debt collection companies, public bodies, audit or supervisory bodies. This is so in order to fulfill obligations deriving from the law, regulations and community regulations or for aspects concerning the management and execution of the legal relationship on going or existed with you.
Your data will be processed by the following parties:
-Employees of the Company and of the Group, in Italy and abroad, who act as authorized to process data, according to the tasks performed and adequately trained.
-Managers for the processing, pursuant to art.28 GDPR.
The list of people in charge of processing personal data is available at the registered office of MIB Italiana S.p.A
For all the purposes indicated in this statement, your data may be disclosed also abroad, inside and outside the European Union, in compliance with the rights and guarantees provided by the current legislation.
6. Rights of the interested party
It is also advised that, you, as the interested party, can ask any of the following, at any time:
access to your personal data;
– their correction in case of inaccuracy;
– the deletion of data referable to you;
– the limitation of the treatment;
– the right to object to the processing of your data, where the conditions are met;
– the right to the portability of data, i.e. to receive, in a structured format of common use and readable by automatic device, the personal data provided.
We also inform you that, pursuant to art. 13 par. 2 lett. d) of the GDPR, the interested parties can place a complaint with the Competent Authority.
Although not expressly provided for by the provisions referred to above, reference should be made to the legislation in force on the subject of Privacy and specifically to articles 15, 16, 17, 18, 20 and 21 of the GDPR.
For further clarifications on this information or on any privacy topic, or in case you wish to exercise your rights, you can contact us at firstname.lastname@example.org.