GDPR - Privacy e Cookie Policy

Information provided pursuant to art. 13-14 of the GDPR (General Data Protection Regulation) 2016/679

We inform you that, for the establishment and execution of contractual relationships with you in progress, our organization is in possession of your data, also acquired verbally, directly or through third parties, qualified as personal by Regulation Europe 2016/679 from ( GDPR).
According to the law, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
According to article 13 of the GDPR 2016/679, therefore, we provide you with the following information::

Nature of the data processed: We process your personal data, fiscal and economic data necessary for the performance of contractual relationships, in place or future, with your company. as well as to achieve an effective management of business relationships.
The data are processed without your express consent (Article 24 letter a, b, c Privacy Code and Article 6 letter b, and GDPR), only and exclusively for the following Service Purposes: fulfill the pre-contractual, contractual obligations and taxes deriving from relations with you in existence; fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority; exercise the rights of the owner, for example the right to defense in court.
We are not in possession of your data qualifiable as special or of a judicial nature (articles 9 and 10 of the GDPR).

Purpose of the processing and duration: Your data are processed for the entire duration of the contractual relationship and also subsequently, for contractual requirements and related fulfillment of legal and fiscal obligations, and for an effective management of financial and commercial relationships, operations indicated to art. 4 of the Privacy Code and art. 4 n. 2) GDPR.
The Data Controller will process the personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes of service.

Processing methods: The processing will be carried out with manual and / or computerized and telematic tools with organizational and processing logics strictly related to the purposes themselves and in any case so as to guarantee the security, integrity and confidentiality of the data in compliance with the organizational, physical and logical measures provided for by the provisions in force.

Obligation or right to provide data: With regard to the data that we are obliged to know, in order to fulfill the obligations established by law, their failure to provide your data implies the impossibility of establishing or continuing the relationship, within the limits where such data are necessary for the execution of the same.

Scope of knowledge of your data: The following categories of subjects may become aware of your data, as managers or processors, appointed by the undersigned company, data controller: directors, directors and auditors; internal secretarial offices; accounting and invoicing staff; employees in the marketing of services; agents and representatives.

Communication and dissemination: Your data will not be disclosed to us by indeterminate subjects through their availability or consultation.
Your data may be communicated to us, as far as their respective and specific competence is concerned, to Bodies and in general to any public or private entity with respect to which there is an obligation for us (or faculty recognized by law or secondary legislation or community) or need for communication, as well as to our consultants, within the limits necessary to carry out their task at our organization, after our letter of appointment imposing the duty of confidentiality and security.

Your rights: In your capacity as an interested party, you have the rights set forth in art. 7 of the Privacy Code and art. 15 GDPR and precisely the rights to:

  1. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
  2. obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, the managers and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers or agents;
  3. obtain: a) updating, rectification or integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment is it proves impossible or involves a use of means manifestly disproportionate to the protected right;
  4. to object, in whole or in part: IV. : a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by email and / or through traditional marketing methods by telephone and / or paper mail.

Where applicable, you will also have the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority. at any time you can obtain confirmation of the existence or not of personal data concerning you and the communication of such data and the purposes on which the treatment is based. In addition, you can obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as the updating, correction or, if there is an interest in it, the integration of data. You can oppose, for legitimate reasons, to the treatment itself.

We kindly ask you to promptly report to the Office of reference of the company any variation of your personal data in order to comply with the art. 11, letter (c) of the aforementioned legislation, which requires that the data collected are accurate and, therefore, updated.

Owner and manager of the treatment:

The data controller is CARLO BRAMBILLA SRL based in VIA IGINIO ROTA N.24 Vimercate (MB).

The Data Processor, which you can contact to exercise your rights and / or for any clarifications regarding the protection of personal data can be reached at: info@carlobrambilla.it.

Yours sincerely.
Carlo Brambilla Srl