Data Processing Notice for – Suppliers

 

INFORMATION ON PERSONAL DATA PROCESSING

Dear Sir/Madam,

We need to process information concerning you, your personal data, for the purposes set forth below; therefore, as required by European data protection law (European Regulation 679/2016), we provide you with the following information.

  1. Data Controller and Data Protection Officer.

The Data Controller, i.e. the entity responsible for decisions regarding the purposes, methods and security of personal data, is Ciancaleoni S.r.l. VAT IT00261620546, headquartered at Via della Meccanica 2/4, – 06038 Spello (PG) – Tel. 0742/301626 emailinfo@ciancaleoni.com
, represented by its current legal representative.

  1. Purposes, Legal Bases and Exemptions for Processing.

The personal data you provide and that will be collected within our employment relationship will be processed in compliance with the lawfulness requirements indicated below:

Purposes

(Why we process your data)

Legal Basis

(On which legal provision we process them)

Consequences in case of refusal to process

(What happens if you refuse to provide your personal data and/or to authorize processing)

For the fulfillment of obligations related to the initiation, management and termination of the employment relationship, including the payment of salaries, allowances, bonuses, other remuneration, perks or additional benefits.

Art. 6, Paragraph 1, Letter b) GDPR
(Processing is necessary for the performance of a contract to which the data subject is a party).

Consent is not required; if you refuse to provide the data, it will not be possible to proceed with the employment relationship.

For compliance with legal obligations in accounting and tax matters related to the aforementioned contract.

Art. 6, Paragraph 1, Letter c) GDPR
(Processing is necessary to comply with a legal obligation to which the Data Controller is subject).

To enforce or defend a legal right in court (for contractual breaches, warnings, settlements, debt recovery, arbitration, judicial disputes).

Art. 6, Letter f) – Processing is necessary for the pursuit of the legitimate interests of the Data Controller or third parties, provided that such interests do not override the fundamental rights and freedoms of the data subject, especially if the data subject is a minor.

  1. Recipients and Categories of Processed Data.

The personal data you provide or acquire during the performance of services will be processed exclusively by duly authorized personnel or by designated data processors.

Your data may be disclosed exclusively to those entities to which you grant permission; in particular, the data categories and recipients will be as follows:

Purposes

Data Category

Recipients

For the application of social security and supplementary assistance legislation, workplace hygiene and safety, as well as fiscal, trade union and health protection matters.

Identifying data, economic data, employment-related data, health-related data.

Revenue Agency, Public Authorities

For the execution of the contract, in your interest.

Identifying data, economic data, contractual data.

Specialists for specific issues in providing opinions and/or consultations or for carrying out mandatory tasks.

  1. International Data Transfer

Your personal data are not transferred outside the European Union.

  1. Retention Period of Personal Data and Criteria Used

The personal data processed are recorded in documents whose retention period is established in accordance with the purposes set forth below.

Except in cases of interruption or suspension (e.g. in the event of litigation), contracts and the related documentation will be retained for ten years from the termination of the contract; payroll data will be retained for six months from the date of issuance of the pay slip.

  1. Data Subject Rights

You have the right to obtain from the Data Controller, where applicable, access to your personal data and the rectification or erasure of such data or the restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation). The appropriate request, accompanied by a copy of an identification document, must be submitted to the Data Controller at the contact details provided above.

  1. Right to Lodge a Complaint

If you believe that the processing of your personal data by the Data Controller violates the Regulation, you have the right to lodge a complaint with the Supervisory Authority (Art. 77 of the Regulation) or to take legal action (Art. 79 of the Regulation).

  1. Collaboration

The protection of your data and compliance with legal principles, particularly the principle of transparency, are of utmost importance to us; we would be grateful if you could inform us of any misunderstandings in this document or suggest improvements by contacting the Data Controller as indicated.

CONSENT TO DATA PROCESSING

Having read the notice above, I hereby freely express my consent by checking the corresponding box below. In the absence of any selection, or if contradictory options are provided, consent is deemed to be denied.

To promote the company in informational materials regarding images taken during events, exhibitions and/or promotional setups.

  I CONSENT

  I DO NOT CONSENT

For fulfilling specific requests, such as union deductions.

  I CONSENT

  I DO NOT CONSENT