DATA CONTROLLER, MODES AND PURPOSES OF PROCESSING OF DATA OF SUPPLIERS, CUSTOMERS AND POTENTIAL CUSTOMERS
Kimoco srl, Via della Gremina, 7, 56029 Santa Croce sull’Arno (PI), Vat n. 00382610509 ph. +39 0571 31942 – info@kimoco.it, as data controller, pursuant to art. 13 EU Regulation n. 2016/679 hereby informs that the personal data freely provided by the involved party shall be processed both manually and by means of computer-related technologies and applications to:
1. fulfil with legal and contractual obligations (e.g. for accounting and tax obligations, sending of pre-contractual proposals)
2. for sending newsletters, business communications and/or advertisement material on products or services offered by the Data Controller
LEGAL BASIS OF THE PROCESSING
The provision of the data shall be optional, but it is required for the fulfilment of the contractual and regulatory obligations towards the involved party (purposes referred to in the previous point 1) and consent shall not be required for such purposes. Also for such purposes, moreover, the incorrect communication of the personal data required, apart from not allowing the fulfilment of the contractual obligations, may also result in the impossibility for the data controller to assure consistency with the processing and the possible mismatch of the results of the same processing with the obligations enforced by the regulations, to which it is addressed. The purpose as per the previous point 2) shall be, instead, possible only with the express and specific consent of the involved party, who is free to do so or not, without any consequences in case of refusal.
RETENTION PERIOD
The data provided shall be processed only for the time required for the execution of the service or to provide you with the information required and stored for 24 months. Shall you be (or have become, further to precontractual relations) a customer or a supplier of Kimoco, your data shall be stored for a period of 10 years from the completion of the last service for tax purposes or according to the maximum period required by law.
COMMUNICATION TO THIRD PARTIES
Personal data shall be processed by the Data Controller and by expressly authorized persons, who must assure safety and confidentiality and commit to not disclose or communicate them to third parties. Your data may be forwarded only for needs connected to their relating purposes, to the professionals, the services of whom the data controller uses, expressly appointed as external data processors.
You may request an updated list of such data processors and their contact data at any time from the data controller.
RIGHTS OF THE INVOLVED PARTY
In relation to the data provided, at any time, you may exercise the following rights for all or part of the data:
Right of access (art. 15): you may ask the data controller to confirm the existence of a processing of your data, access the same and/or obtain a copy of the data, concerning you and processed by us.
Right of rectification (art. 16): you may request to update, correct or supplement your personal data
Right to oblivion (art. 17): if there is one of the reasons, provided for by this regulation, you may request the cancellation of your personal data, which will be permanently deleted by us
Right of limitation (art. 18): if there is one of the conditions provided for in this rule, you may request the limitation of the processing of your personal data. In this case, we shall store the data, which will no longer be processed for other purposes
Right of data portability (art. 20): under the conditions provided for by this rule, you may request to receive your relating personal data in an interoperable format and/or to convey them to another data controller
Right of opposition (art. 21): you may object all or part of the processing operations, pointing out the reason, if the conditions provided for by this rule are met. If the legal basis of the processing is the consent, you may revoke the consent given at any time. In this case, the processing shall cease for all operations, for which the consent has been withdrawn, unless there is a different legal basis for the processing.
Such rights may be exercised by a request addressed informally to the data controller at the aforementioned addresses, which will be answered without delay.
If you believe that your rights have been violated, you may, moreover, submit a claim to the Italian Data Protection Authority pursuant to art. 77 Reg. EU 2016/679.
This policy may be amended at any moment due to changes in our practices. We, therefore, invite you to consult it periodically. In case of amendment, the “Last modified” date shall be updated at the end of this notice.
Last modified on: May 7, 2020