New regulation on the processing of personal data - GDPR EU

Dear Interested Party, we wish to inform you that the "European Regulation 2016/679 relating to the protection of natural persons with regard to the Processing of Personal Data, as well as the free movement of such data" (hereinafter "GDPR") provides for the protection of individuals and other subjects with respect to the processing of personal data.

Seitron S.p.A., as Data Controller, pursuant to Article 13 of the GDPR, therefore, provides you with the following information:

A. DATA CATEGORIES

Seitron S.p.A. will process your personal data such as identification data, personal data and contact data.

B. SOURCE OF PERSONAL DATA

The personal data of which Seitron S.p.A. will come into possession are collected directly from the interested party.

C. DATA CONTROLLER

The data controller is Seitron S.p.A. with registered office in Via del Commercio 9/11, 36065 Mussolente (VI).

D. PURPOSE OF DATA PROCESSING AND LEGAL BASIS

Personal data is processed by the Data Controller for the following purposes:

  • Purposes related to legal obligations
  • Purposes related to the management of the contractual relationship and the provision of products/services: establishment, management and termination of the contractual and commercial relationship; fulfillment of accounting and tax obligations; dispute management; provision of services; communication of your data to any partners of the Data Controller for the performance of contractual obligations.

E. RECIPIENTS OF THE DATA

Within the limits relevant to the purposes, your data may be communicated to various recipients such as public and private bodies by legal obligation or communicated to subjects functional to achieving the purposes set out above, internal and external to the Data Controller such as, but not limited to, collaborators, freelancers, insurance companies, insurance intermediaries, law firms, technical partners, banking institutions.

F. TRANSFER OF DATA TO THIRD COUNTRIES

Seitron S.p.A. could also transfer personal data outside the European Union, to subsidiaries, associated companies, as well as to external service companies even only for technical IT reasons. In these cases, the data transfer will take place in compliance with the provisions of the art. 44 et seq. of the GDPR.

G. STORAGE PERIOD

The data collected will be stored for a period of time not exceeding the achievement of the purposes for which they are processed ("conservation limitation principle", art.5, GDPR) or according to the deadlines established by law. Verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

H. RIGHTS OF THE INTERESTED PARTY

The interested party always has the right to request from the Data Controller access to their data, the rectification or cancellation of the same, the limitation of processing or the possibility of opposing the processing, to request data portability, to revoke consent to processing by asserting these and the other rights provided for by the GDPR by simple communication to the Data Controller. The interested party can also lodge a complaint with a supervisory authority.

I. OBLIGATION TO COMMUNICATE DATA

For the purposes indicated above, the communication of personal data is necessary either by legal obligation or to manage communications within the contractual relationship.

J. DATA PROCESSING METHODS

The personal data provided by you will be the subject of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the Data Controller's activity. The data will be processed both with IT tools and on paper supports and on any other type of suitable support, in compliance with adequate technical and organizational security measures required by the GDPR.