CUSTOMER/SUPPLIER PRIVACY POLICY

Drawn up pursuant to art. 13 of EU Regulation 2016/679 

SUBJECT: Pursuant to Article 13 of EU Regulation 2016/679 (hereinafter "Regulation") the personal data provided by the interested party will be processed by Conceria Caponi Giuseppe & C. S.R.L. in order to allow the management of the pre-contractual and contractual relationship in compliance with the regulations provided for by the Regulation. This policy does not regulate the processing of personal data relating to legal persons, in particular companies with legal personality, including the company name and form of the legal person and its "contact details" (Regulation – Recital no. 14). 

DATA CONTROLLER: Conceria Caponi Giuseppe & C. S.R.L. (hereinafter referred to as the "Data Controller") with registered office in Via A. Gramsci, 348 – 56024 Ponte a Egola, San Miniato (PI). Contact email: info@conceriacaponigiuseppe.it 

PERSONAL DATA PROTECTION OFFICER: The Data Controller does not require the figure of the data protection officer pursuant to Article 37 of the Regulation. PURPOSE: Personal data will be processed for the following purposes: Management of the pre-contractual relationship, contractual and related activities (by way of example and not limited to the management and administration of contracts, orders, arrivals, invoices, etc.). Compliance with legal obligations.

LEGAL BASIS FOR PROCESSING: The legal bases for the processing of personal data are to be found in the execution of pre-contractual and contractual obligations and in the execution of legal obligations incumbent on the Data Controller. 

METHODS OF PROCESSING AND STORAGE: The processing will be carried out with computer and paper tools, in compliance with the provisions of Article 32 of the Regulation. The personal data of the data subject, in relation to the purposes referred to in this policy, will be stored for the entire duration of the contractual relationship and for the time strictly necessary to achieve the purposes indicated in the paragraph "Purposes"; thereafter they will be kept for the time allowed by Italian law to protect their interests and/or to the termination of any pending judicial or extrajudicial relationships deriving from it. 

PLACE OF PROCESSING: The data are processed at the offices of the Data Controller and at the offices of any data processors. 

SCOPE OF COMMUNICATION AND DISSEMINATION: The data of the interested party may be communicated, or may become aware of them, by the employees or collaborators of our company, expressly designated by us as "authorized to process" and/or appointed "external data processor". The complete list of subjects appointed as data processors is available at the Data Controller's headquarters. The personal data of the data subject will not be transferred to third countries or disseminated in any way. 

SPECIAL CATEGORIES OF PERSONAL DATA: For the purposes referred to in this policy, the Data Controller does not need to process personal data of a "particular" nature pursuant to Article 9 of the Regulation. 

EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING: The Data Controller, for the purposes referred to in this policy, does not adopt any automated decision-making process, including profiling, referred to in Article 22, paragraphs 1 and 4, of the Regulation. 

RIGHTS OF THE DATA SUBJECT: At any time, the data subject may exercise the rights provided for by the Regulation from articles 15 to 22 and in particular the right to: a) ask for confirmation of the existence or otherwise of their personal data; b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period; c) obtain the rectification and deletion of data; d) obtain the limitation of processing; e) obtain data portability, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance; f) object to the processing at any time and also in the case of processing for direct marketing purposes; g) object to automated decision-making relating to natural persons, including profiling. h) ask the data controller for access to personal data and the rectification or erasure of the same or the limitation of the processing concerning him/her or to object to their processing, as well as the right to data portability; i) withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal; j) lodge a complaint with the Supervisory Authority. The data subject can exercise his or her rights by sending a written request to the email address info@conceriacaponigiuseppe.it 

CONCERIA CAPONI GIUSEPPE & C. S.R.L.