Privacy notice in the terms of art. 13-14 of the GDPR (General Data Protection Regulation) 2016/679

We inform you that, for the establishment and execution of the contractual relationship in progress with you, our organization is in possession of your data, also acquired verbally, directly or through third parties, qualified as personal by Regulation Europe 2016/679 from (GDPR).

According to the above mentioned law, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

According to article 13 of the GDPR 2016/679, therefore, we provide you with the following information:

Nature of the processed data: we process your personal, fiscal and economic data necessary for the performance of contractual relations, current or future, with your company, as well as to achieve an effective management of business relationships. The data are processed without your express consent art. 6 lett. b, e, GDPR, only and exclusively for the following Service Purposes: fulfill the pre-contractual, contractual and tax obligations arising from existing relationships with you, fulfill the obligations established by law, by a regulation, community legislation or an authority order; exercise the rights of the owner, for example the right of defense in court. We do not possess data which can be qualified as specific or of a judicial nature (articles 9 and 10 of the GDPR).

Purpose and duration of processing: your data are processed for the entire duration of the contractual relationship and also subsequently, for contractual requirements and related fulfillment of legal and tax obligations, and for an effective management of financial and commercial relationships, operations indicated art. 4 n. 2) GDPR. The Holder will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes of service.

Processing methods: the processing will be carried out with manual and / or computerized and telematic tools with organizational and processing logics strictly related to the purposes themselves and in any case in order to guarantee the security, integrity and confidentiality of the data in compliance with the organizational, physical and logical measures provided by the provisions in force.

Obligation or right to provide data: with regard to the data that we are obliged to know, in order to fulfill the obligations established by law, the failure to provide your data implies the impossibility to establish or continue the relationship, within the limits where such data are necessary for the execution of the same.

Scope of knowledge of your data: the following categories of subjects may become aware of your data, as managers or processors, appointed by the undersigned company, data controller: directors, managers and auditors; internal secretarial offices; accounting and invoicing staff; employees in the marketing of services; agents and representatives.
Communication and circulation: your data will not be communicated by us to indeterminate subjects through their availability or consultation. Your data may be communicated by us, as regards their respective and specific competence, to entities and in general to each public or private subject towards which we have an obligation (or faculty recognized by law or secondary or community legislation) or a need for communication, as well as to our consultants, within the limits necessary to carry out their duties at our organization, following our letter of appointment which imposes the duty of confidentiality and security.

Your rights: in your capacity as an interested party, you have the rights set forth in art. 15 GDPR and precisely the rights of: i. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form; ii. obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, the managers and the designated representative pursuant to art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers or agents; iii. obtain: a) updating, rectification or integration of data; b) the cancellation, transformation into anonymous form or blocking of unlawfully processed data, including data whose retention is unnecessary for the purposes for which they were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case such fulfillment is impossible or involves means manifestly disproportionate to the protected right; iv. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. Where applicable, you will also have the rights set forth in articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority. At any time you can obtain confirmation of the existence or otherwise of personal data concerning you and the communication of such data and the purposes on which the treatment is based. In addition, you can obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as the updating, correction or, if there is an interest in it, the integration of data. You can oppose, for legitimate reasons, the treatment itself. We kindly ask you to promptly report to the Office of reference of the company any variation of your personal data in order to comply with the art. 11, letter (c) of the aforementioned legislation, which requires that the data collected are accurate and, therefore, updated.

Owner and manager of the treatment: the data controller is APTACA Spa based in Regione Monforte 30 CANELLI (AT) ITALY. The Data Processor, which can be contacted to exercise the rights and / or for any clarifications regarding the protection of personal data can be reached at the address: privacy@aptaca.com

Yours sincerely.