Via Casale, 23 S.S. 31 15040 OCCIMIANO (AL) – ITALY
INFORMATION SUPPLIED IN ACCORDANCE WITH ART. 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679 – CUSTOMERS
MIX S.R.L., a company specialising in the production and sale of systems for car washes and water treatment, based in Via Casale, 23 S.S. 31 15040 OCCIMIANO (AL) – ITALY, as Data Controller (hereinafter “Data Controller”) informs you in conformity with articles 13 and 14 of the GDPR 2016/679 that your data will be processed according to the principles of correctness, lawfulness, transparency and protection of your privacy and your rights, in the manner and for the following purposes.
- Object of the Treatment
The Holder will process the personal identifying data (for example, name, surname, company name, address, telephone number, e-mail address, tax number, VAT number, bank and payment details – hereinafter, “personal data” or simply “data”) communicated by you when the business relationship is established or subsequently.
- Purpose of the processing
The data are collected directly from the interested party and are processed without his express consent (Article 24 letter a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following Service Purposes:
2.1 Contractual Purposes
The personal data provided will be processed in relation to contractual obligations inherent in the business relationship. More specifically, the processing may be aimed at issuing quotes, receiving orders, issuing order confirmations, managing shipments/deliveries, invoicing and all related activities.
2.2 Purpose of fulfilment of obligations set out in the law, regulations or EU regulations
Secondly, personal data will also be processed to fulfil the obligations set out in law or regulations or community legislation and for civil, accounting and tax purposes.
Taking into account the purposes of the processing indicated above, the provision of data is mandatory and their failure, partial or incorrect conferment, will result in the inability to continue the business relationship.
We point out that subjects who are already our customers will be able to receive commercial communications relating to services and products of the Data Controller similar to those from which it has already benefited, except in the case of their refusal (art. 130 para. 4 of the Privacy Code).
The collected data will not be transferred to third parties.
- Processing methods
The processing of personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and more precisely: collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data are subjected to processing in both paper and electronic and/or automated media and in any case in such a way as to assure the security, integrity and confidentiality of the data in compliance with the organisational, physical and IT measures required by current regulations.
- Data retention period
The Data Controller will process personal data for the time necessary to fulfil the aforementioned purposes and in any case for at least 10 years from the termination of the business relationship, unless otherwise communicated in this regard.
- Identity and contact details of the Data Controller
The “data controller” of the data processing is: MIX S.r.l. Via Casale, 23 S.S. 31 15040 OCCIMIANO (AL) – ITALY, tax and VAT number 01309790069, Tel. (+39) 0142 400400 – Fax (+39) 0142 808061. Certified email: email@example.com
- Communication and disclosure of personal data for the purposes of the processing purposes.
The Data Controller may communicate personal data to third parties with whom the communication is necessary for the fulfilment of the provisions of law (as a non-comprehensive example: individuals, companies or professional offices that provide assistance, advice or collaboration in accounting, administrative, legal, tax, financial matters or management systems). In addition, personal data may be disclosed to any other third party when the communication is required by law or to fulfil correctly the services required by the regulation. With reference to art. 13, para. 1, letter (e) of the EU Regulation, below is a list of the subjects or categories of subjects who may become aware of personal data as agents and a specific list is provided of categories updated at the date of preparation of this information:
- SHIPPERS (only the data required for deliveries)
- IT PARTNERS
- SUPPLIERS OF CORPORATE SERVICES
- MANAGEMENT CONSULTANTS
- INTERNAL EMPLOYEES AUTHORISED FOR THE DATA PROCESSING (ADMINISTRATIVE FUNCTIONS, COMMERCIAL FUNCTIONS, MANAGEMENT) None of the personal data will be disseminated.
- Transfer of data outside the EU
- Exercising of rights
In accordance with articles 13, paragraph 2, letters (b) and (d), 15, 18, 19 and 21 of the Regulations, the interested party is informed that he can at any moment exercise the following rights:
- access to personal data;
- obtain the correction or cancellation of the same or the limitation of the processing that concerns him;
- reject the processing;
- the portability of data;
- revoke consent, where foreseen: the revocation of consent does not affect the lawfulness of the treatment based on the consent given before the revocation;
- make a complaint to the supervisory authority (Privacy Guarantor).
The exercising of one’s rights may be implemented by sending a request by email to the following address: firstname.lastname@example.org