Data Processing Notice for Clients and Suppliers Pursuant to Article 13 of the European Regulation 2016/679
Pursuant to Article 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data that the Company will come into possession of for the execution of the requested service, we inform you of the following:
The Data Controller is DIGIMAX S.r.l. (hereinafter referred to as the "Company"), with its registered office at Via Dei Laghi, 31, 36077 Altavilla Vicentina (VI), Italy.
The Data Controller can be contacted via certified email (PEC) at digimax.amministrazione@pec.it.
The Company has appointed a Data Protection Officer (DPO): Attorney Luca De Toffani (email: dpo@digimax.it).
The data processing is carried out to conclude the contract and to properly and completely fulfill the contractual obligations or to provide the services requested by the Client.
Additionally, the data processing is aimed at all activities connected to, accessory to, and instrumental to the provision of the requested service, and in general, to comply with all obligations related to the contractual relationship.
Your data may also be processed to:
Fulfill pre-contractual obligations (e.g., preparing estimates) and contractual obligations, as well as those related to tax, administrative, and accounting matters arising from the existing relationship;
Comply with legal obligations imposed on the Company by applicable laws or by a request from a competent authority;
Exercise the rights of the Data Controller (e.g., the right to legal defense);
Communicate, with your consent, your personal data to insurance companies and their agents;
Send, with your consent, the requested estimate and related information to the client.
Personal data may be processed using paper, magnetic, electronic, and telematic media, with tools and methods strictly necessary to achieve the purposes mentioned above, ensuring the security, integrity, and confidentiality of the data in accordance with the organizational, physical, and logical measures provided for by applicable laws.
The Company processes your personal data lawfully when the processing:
Is necessary for the performance of the contract or the requested service, or for the implementation of pre-contractual measures taken at your request;
Is necessary to comply with a legal obligation to which the Company is subject;
Is based on the consent expressly provided for the performance of specific activities (e.g., sending estimates and related information, etc.).
Considering the purposes of data processing as outlined above, failure to provide, incomplete provision, or inaccurate provision of data may prevent the Company from performing the requested service and fulfilling the related obligations.
Your personal data will be retained for the period necessary to achieve the purposes for which the data were collected, and subsequently, for the time strictly necessary to complete any related or resulting obligations, without prejudice to retention obligations for tax, accounting, and other purposes required by law or regulation.
Your personal data may be disclosed to:
Consultants, professionals, or third-party service providers performing services necessary for the purposes outlined above;
Banks, financial institutions, and insurance companies providing services related to the purposes outlined above;
Entities processing data to comply with specific legal obligations;
Tax authorities or public institutions in compliance with legal obligations;
Judicial or administrative authorities for the fulfillment of legal obligations.
The transfer, even temporary, of your information to a country outside the European Union may occur only if necessary for the execution of contractual obligations, for the implementation of pre-contractual measures taken at your request, or for the conclusion or performance of a contract in your favor.
Your personal data will not be disseminated or subject to any entirely automated decision-making process, including profiling. If the Company intends to proceed in this manner, your explicit consent will be requested in advance.
Under the GDPR, you have the right to:
Receive confirmation of the existence of personal data concerning you and access to such data and related information (right of access);
Request the updating, correction of inaccurate data, and completion of incomplete data (right of rectification);
Request the deletion of personal data under specific conditions outlined in Article 17(1) of the GDPR and subject to the exceptions provided in Article 17(3), or request the restriction of processing under the conditions set forth in Article 18(1) (right to erasure and restriction of processing);
Request and obtain from the Company, in cases where the legal basis for processing is the contract or consent and the processing is carried out by automated means, your personal data in a structured, commonly used, and machine-readable format, including for transmission to another data controller (right to data portability);
Object at any time to the processing of your personal data due to specific situations that concern you (right to object);
Withdraw consent at any time, limited to cases where processing is based on your consent, without affecting the lawfulness of processing based on consent before its withdrawal;
Lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).
The exercise of your rights may be carried out by sending a request via email to digimax.amministrazione@pec.it or by registered mail to the following address: DIGIMAX S.r.l., Via Dei Laghi, 31, 36077 Altavilla Vicentina (VI), Italy, or via email to dpo@digimax.it.
Location and Date: Altavilla Vicentina, 06/08/2020
DIGIMAX S.r.l.