Data processing information for customers and suppliers

PRIVACY POLICY TO CUSTOMERS AND SUPPLIERS PROVIDED PURSUANT TO ART. 13 UE REGULATION 2016/679



According to art. 13 of the European Regulation (EU) 2016/679 (below GDPR), and in relation to the data that the Company will process for the fulfilment of the service required, we communicate the following:



Data Controller and DPO (Data Protection Officer)



The Data Controller is DIGIMAX Ltd. (also referred to as "Company") with legal headquarters in (36077) Altavilla Vicentina (VI), Via Dei Laghi, 31. The Data Controller may be contacted via PEC at digimax.amministrazione@pec.it. The Company has appointed a personal data protection officer: Lawyer Luca De Toffani (email: dpo@digimax.it)



Purpose of data processing and legal basis



The processing of data is aimed at concluding the contract as well as giving correct and complete execution of contractual services or providing the services requested by the Customer. The processing of data is also aimed at all related activities, ancillary and instrumental to the provision of the requested service, and in general to fulfill all obligations related to the contractual relationship. Your data shall also be processed in order to:

    • Fulfil the pre-contract obligations (such as the drafting of the quote) and contractual obligations, as well the tax and administrative- accounting purposes arising from the existing relationship;
    • comply with any obligations incumbent on the company and provided for by the legislation in force or by an order of the Authority;
    • exercise the Data subject’s rights (e.g. the right to defend in court);
    • communicate, with prior consent, your personal data to insurance companies and their appointed;
    • transmit to the customer, with prior consent, the requested quote and related information.

Personal data shall be processed by means of paper, magnetic, electronic and telematics media, with tools and methods strictly necessary to cope the above mentioned purposes, and in any case in order to ensure the security, integrity and confidentiality of the data itself in accordance with the organizational, physical and logical measures provided by the current provisions.



Legal basis for treatment



The Company processes your personal data lawfully, where the treatment:

  • is necessary for the fulfilment of the agreement and the requested performance, or for the implementation of pre-contractual measures adopted on request;
  • necessary to fulfil a legal obligation incumbent on the company itself;
  • is based on the consent expressly provided for the performance of certain activities (e.g. sending quotes and related information, etc.).



Consequences of lack of data communication



Considering the purposes of the processing as described above, failure, partial or incorrect provision of data prevents the Company from carrying out the requested activities and fulfil the required obligations.



Data retention



Your personal data will be retained for the period of time necessary for the fulfilment of the purposes for which the data has been collected, and also subsequently, for the time strictly necessary to fulfill any legal obligations. In any case, personal data will be processed and store for the period necessary for the proper fulfillment of the conservation obligations for fiscal purposes or for other purposes provided by law or regulations.



Data disclosure



Your personal data may be disclosed to:

  1. consultants, professionals or third-party service providers who provide functional services for the purposes mentioned above;
  2. banks, financial institutions and insurance companies that provide functional services for the purposes mentioned above;
  3. persons who process data in the execution of specific legal obligations;
  4. financial administrations or public institutions for fulfilling of regulatory obligations;
  5. judicial or administrative authorities for fulfilling legal obligations.



Data transfer



The transfer, even temporarily, of the information concerning you to a non-EU country, may only take place if necessary for the fulfillment of obligations arising from the contract, or to fulfill, before the conclusion of the contract, to your specific requests or for the conclusion or execution of the contract stipulated in your favour.



Data Profiling and Dissemination



Your personal data is not subject to dissemination or to any completely automated decision-making process, including profiling. Only when Company intends to do so, the Company will promptly request your express consent.



Rights of the Data Subject



According to GDPR, you have the following rights:

    • right to receive confirmation of the existence of personal data concerning you, and in this case to access to the same and related information (right of access);
    • right to obtain the update, rectification of the inaccurate data and the integration of incomplete data (right to rectify);
    • right to request the erasure of personal data concerning you upon the occurrence of one of the conditions indicated in art. 17, paragraph 1 of the GDPR and in compliance with the exceptions provided in paragraph 3 of the same article or right to request the limitation of the processing of your personal in the event of the hypotheses indicated in art. 18, paragraph 1 of the GDPR (right to be forgotten and right to limit);
    • right to request and obtain from the Company - in the case where the legal basis of the treatment is the contract or consent, and the same is carried out by automated means – to receive your personal data in a structured format and readable by automatic device, also in order to communicate such data to another controller (right to data portability);
    • right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you (right to object);
    • right withdraw the consent at any time, in case of processing of personal information based on consent, without prejudice to the legality of the processing, based on consent, made before the withdrawal;
    • right to complain (The Data Protection Authority – www.garanteprivacy.it).

These rights may be exercised by sending a written communication to: digimax.amministrazione@pec.it or by sending a registered letter to the following address: DIGIMAX srl (36077) Altavilla Vicentina (VI), Via Dei Laghi, 31, or by email to the email address: dpo@digimax.it.





Place and date

Altavilla Vicentina, 06/08/2020





DIGIMAX SRL