DATA PROTECTION DECLARATION
(ART. 13 EU REG. 2016/679)
For the purposes of the EU Regulation n. 2016/679, about the protection of physical people with regard to personal data treatment (from now on for Regulation shortness), and of Legislative Decree 196/2003 (from now on also Privacy Protection Code). We inform you that the treatment of personal data you supplied and BRIEDA E C. s.r.l. has acquired concerning the activity done by the latter, will be the object of treatment in compliance with the current legislation on the subject. We ask you to carefully read this Declaration in order to clarify the purposes and procedures of the treatment of your personal data.
a) Controller of the treatment
The controller of the treatment is BRIEDA E C. s.r.l. with legal head office in Viale Dante, 58 – 33170 – Pordenone, (VAT number 01165920933)
The controller of the treatment can be reached at the following e-mail address: info@briedacabs.com
b) Nature of treated data
Common data: as identification and contact data as an illustrative title and not exhaustive name, last name, tax code, date and place of birth, address, telephone number, e-mail address, bank details.
c) Purpose of the treatment and legal basis of the treatment:
1. Management of pre-contractual and/or contractual relationships: your personal data is necessary and will be treated to follow up your requests concerning the management of the contract, also preliminary, to related negotiations and to consequent supplying and/or selling and/or buying relationships and every other activity necessarily connected and/or linked with you in place (and so as an example and not exhaustive: establishment, execution, and management of the contractual relationship, accounting elaboration and fulfillment, administrative and financial, and also related to the fulfillment of the obligations imposed by anti-money laundering regulations, etc).
The legal basis of the treatment is constituted by the necessity of giving execution to the contract and/or to the contracts you are part of or to the execution of the pre-contractual measures you requested.
2. Marketing: your data can be used for submission, also with a periodic character for example through a newsletter, advertising material, direct sales, for the fulfillment of market and/or commercial and promotional communication research including invitations to fairs, meetings, training courses, competitions and/or other private/public events organized for promoting the activity of the company, directly made by the Company or through external specialized companies where you have given consent to such treatment.
This could happen both through traditional ways of contact, as sending paper mail, and through automatized ways of contact, by using automatized systems of call namely through e-mails, MMS or SMS or other types of messages.
The aforementioned marketing activity can be cured by a Company that is expressly nominated by the Controller of the Treatment, that will be designated to the Processor of the treatment of the data you submitted.
The legal basis for the aim of marketing is consent.
3. Marketing: During events where is expected a service of video recording and/or photography it can collect audio/images data, without the recognition of any compensation, to promote your own company also through press releases, social media, television, websites and on any other adequate support where you have expressed your explicit consent through a specific form.
The legal basis for the aim of marketing is consent.
d) Mandatory or optional nature of providing data and consequences of any refusal to respond
The nature of the provision of your personal data for the purposes referred to in point c) 1. is mandatory so that the controller of the treatment can fulfill the obligations deriving and arising from the contractual and/or pre-contractual relationship in place with you, as well as those imposed by the law or regulations. The failure to provide your personal data will effectively make it impossible to establish or continue the contractual relationship to the extent that such data is necessary for its execution.
The provision of your personal data for the purposes referred to in points c) 2 and 3 is free and optional and, failing this, the Controller will limit themself to processing the data for the purposes referred to in the further points without being prejudiced in any way the possibility of using the services/products. Even if the processing for the purposes referred to in points c) 2 and 3 is provided, it may be revoked at any time by simply making a request to the Controller of the treatment.
e) Method of the treatment
Your personal data will be processed through the use of tools and procedures suitable to guarantee security and confidentiality, both by using analogue/paper media and with the aid of IT media and tools.
f) The recipients of the personal data
Your personal data will be processed exclusively by the Controller of the treatment, by the Processors of the Treatment appointed by them and by the strictly authorized data processors. The updated list of Managers and persons in charge can always be requested from the Controller for consultation.
Your personal data may be communicated, following inspections or checks, to all the inspection bodies responsible for checks and controls relating to the regularity of legal obligations.
Your personal data may be communicated to professional companies/firms that provide assistance, consultancy or collaboration to the controller of the treatment in accounting, administrative, fiscal, legal, tax, financial, social security matters, in relation to the establishment and management of the existing contractual and/or pre-contractual relationship with you, to public administrations for the performance of institutional functions within the limits established by law or regulations or to third party service providers to whom communication is necessary for the fulfillment of the services inherent and connected to the existing contractual and/or pre-contractual relationship with you, to other employees and/or collaborators of the controller of the treatment for the time strictly necessary for the fulfillment of their instrumental and/or accessory tasks to the execution of the existing relationship with you and always under the control and supervision of the controller of the treatment, processors of the treatment and strictly authorized people in charge of the treatment. Your personal data may be communicated to public or private entities who can access personal data pursuant to legal or regulatory provisions or pursuant to provisions of the judicial authority.
Your personal data will not be disclosed, except in cases where it is foreseen and you have given your express and explicit consent. In this last case, the diffusion will in any case be limited and governed by what you have expressly consented to with a deed signed by you.
g) Data retention period
The storage of your personal data will take place for the entire duration of the contractual and/or pre-contractual relationship in place with you and for a further 10 (ten) years limited and functionally to the need to be able to guarantee the Company the possible exercise and protection, judicial and /or out of court, of your rights and interests deriving from, connected to or connected to the existing relationship with you and/or their object. The personal data processed for further optional purposes (marketing purposes) will be deleted after 2 years, a term deemed appropriate given that they are data connected to the sale of the goods/services covered by the contract and in any case they will be deleted upon revocation of consent, without prejudice to the lawfulness of the processing based on consent before its revocation.
h) Existence of an automated decision-making process
Profiling is foreseen subject to the consent of the interested party.
i) Transfer of personal data to third countries or international organization.
If the controller of the treatment transfers your personal data to countries not belonging to the EU or in any case not belonging to the European Economic Area (consisting of Switzerland, Iceland, Liechtenstein and Norway) they will proceed as follows.
In the event of data transfer to the aforementioned third countries, the controller of the treatment will guarantee an adequate level of protection pursuant to art. 45 European Regulation n. 679/2016 (the Commission has the power to establish this adequacy through a specific decision and on this point please refer to the list of decisions on the website of the Guarantor for the protection of personal data www.garanteprivacy.it).
In the absence of an adequacy decision pursuant to art. 45 of the European Regulation, the controller of the treatment will provide adequate guarantees pursuant to articles 46 – 47 of the European Regulation n. 679/2016.
Any information relating to the adequate guarantees referred to in the previous paragraph will in any case always be available at the headquarters of the Controller of the Treatment and can be requested at the email address info@briedacabs.com.
Lastly, in the event that there is no adequacy decision pursuant to art. 45 of the R.E. 679/2016 or adequate guarantees pursuant to art. 46 of the aforementioned Regulation, including the binding corporate rules, the transfer of personal data to a Country will be permitted only in the presence of exceptions in specific situations referred to in the art. 49 of the R.E. 679/2016.
l) Rights of the interested party
In relation to the personal data subject to the processing referred to in this information, at any time you are granted the right to:
– Access (art. 15 EU Reg. n. 2016/679): the Controller guarantees the right of access to personal data concerning the interested party;
– Rectification (art. 16 EU Regulation n. 2016/679): the Controller will, upon request of the interested party, rectify inaccurate personal data without unjustified delay.
– Cancellation (art. 17 EU Reg. n. 2016/679): the Controller of the treatment will delete the personal data of the interested party without unjustified delay if: the personal data are no longer necessary with respect to the purposes for which they were collected or treated; the interested party withdraws consent; the interested party objects to the treatment and there is no overriding legitimate reason to proceed with the treatment; the personal data have been processed unlawfully.
– Limitation (art. 18 EU Reg. n. 2016/679): the Controller of the treatment will limit it upon request of the interested party when: the interested party contests the accuracy of the data; the treatment is unlawful and the interested party opposes the deletion of the data but requests the limitation of the treatment; the data are no longer necessary for the purposes of the treatment, but are necessary for the assessment, exercise and defense of a right in court; the interested party has objected to the processing and is waiting for the legitimate reasons of the Controller of the treatment to prevail over those of the interested party.
– Portability (art. 20 EU Regulation n. 2016/679): understood as the right to obtain data from the Controller of the treatment in a structured format commonly used and readable by an automatic device to transmit them to another controller of the treatment without impediments.
– Opposition to the treatment (art. 21 EU Regulation n. 2016/679): the interested party has the right to object at any time to the processing of personal data concerning them.
– Exercise the right to revoke consent, if given for one or more specific purposes, at any time without prejudice to the lawfulness of the processing until the aforementioned consent is revoked.
The exercise of the aforementioned rights may be exercised by written communication to be sent via email to info@briedacabs.com.
Or by registered letter with return receipt to the following address: BRIEDA E C. s.r.l. with legal head office in Viale Dante, 58 – 33170 – Pordenone, (VAT n. 01165920933) – PEC e-mail: amministrazione@pec.briedacabs.com
– Propose a complaint to the Guarantor authority for the protection of personal data (art. 51 EU Reg. n. 2016/679): to exercise this right, see the instructions on the guarantor’s website (www.garanteprivacy.it)
Signature of the controller of the treatment
Brieda E C. Srl