Aredici srl with registered and administrative office in Via Francesco Zanardi 329/3, Bologna (BO), in the person of the legal representative Mr. Paolo Morisi, as Data Controller of personal data, informs you that, pursuant to Legislative Decree no. 2003/96 “Code regarding the protection of personal data” and pursuant to REGULATION (EU) 2016/679, the personal and sensitive data provided by you will be processed for the following purposes:
a) for the insertion of personal data in the company information databases;
b) for the keeping of accounting and accounting, insurance, financial and credit protection requirements;
c) for the management of receipts and payments:
d) for the fulfillment of the obligations provided for by the civil and tax law, by regulations, by community laws.
e) for sending by email: newsletters, commercial communications and / or advertising material regarding products or services offered by the Owner, subject to explicit consent
These purposes are pursued in accordance with the principles of correctness, lawfulness and non-excess and in compliance with the provisions of the law on the protection of data privacy. Therefore, the Data Controller may communicate your data to all natural and legal persons (legal, administrative, fiscal, auditing, consulting firms, couriers and freight forwarders, data processing centers, etc.) in cases where communication is necessary for the purposes described above, to banks for the management of receipts and payments and to our employees and collaborators specifically appointed and within the scope of their duties.
The data, except for legal obligations, will not be disclosed without your explicit consent. The provision of data is mandatory because they are essential for the conduct and management of the employment relationship. In case of refusal to provide data it will not be possible to implement the employment relationship and the related contractual and legal obligations.
In cases where the Data Controller intends to process your personal data for purposes other than those for which they were collected, any further processing will be preceded by new information and submitted, if requested, to the consent of the data subject.
We also inform you that all the data collected will not be subject to any automated decision-making process. The processing of personal data takes place primarily through the use of electronic and / or computer tools and technical and organizational measures to ensure the security and confidentiality of the data.
Your data may be stored both on computer and paper media, as well as on any other type of support deemed most suitable for processing.
The Data Controller clarifies, on the basis of the Register of Treatment Activities, the cases in which the transfer of non-EU data is foreseen or to international organizations ensuring the transfer of non-EU data in compliance with the applicable legal provisions.
The data are kept for a period not exceeding the achievement of the purposes for which they are processed. Once the storage period has expired, the data will be destroyed or made anonymous.
With regard to the purpose, legal basis, categories of recipients and retention period for data relating to individual treatments, it is specifically indicated in the Register of Treatment Activities that can be consulted on request. The interested party has the right:
• access to personal data (eg obtain a copy or know where it was made available)
•to obtain the correction or cancellation of the same or the limitation of the treatment that concerns him;
•to oppose the treatment;
• to the portability of data (eg to receive data in a structured format, commonly used and readable by an automatic device);
•to withdraw the consent (except in cases where the processing is necessary to fulfill legal obligations) at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;
• to propose a complaint to a Supervisory Authority (Privacy Authority, mail: firstname.lastname@example.org)
It should be noted that, in order to comply with the Rules, the Company has set up an integrated privacy system identifying as Managers of Treatment the responsible figures present in the Treatment Activity Register, a document kept and appropriately updated at the administrative headquarters by the Data Controller. For further information and / or for the exercise of their rights, please contact the Data Controller free of charge at Via Francesco Zanardi 329/3, Bologna (BO), Italy, mail: email@example.com.