Information pursuant to art. 13 of the European Regulation 679/2016 and consent
Pursuant to art. 13 of European Regulation (EU) 2016/679 (hereafter GDPR), and in relation to personal data of which Assuli Srl, in person of the Legal Representative Pro tempore, with registered office in Via Archi, 9 – 91100 – Trapani (TP) – PIVA: 02448630810 will enter in the availability of the personal data supplied by you, in the execution of a contract of which you are part or in carrying out pre-contractual activities on your request, we inform you as follows:
Data controller and responsible for the protection of personal data
The data controller is Assuli Srl (hereinafter referred to as “HOLDER of the TREATMENT” in person of the Legal Representative Pro tempore, with registered office in Via Archi, 9 – 91100 – Trapani (TP) – VAT: 02448630810. The owner can be contacted for any communication concerning privacy to the following e-mail address: firstname.lastname@example.org
Purposes of data processing and legal basis of processing
The Data Controller processes personal data of natural persons, legal entities, sole proprietorships and / or freelancers (“Interested parties”) for the following purposes:
a) the need to execute a contract for which the interested party is a party or to perform pre-contractual activities upon his request. This need represents the legal basis that legitimizes the resulting treatments. The provision of data necessary for these purposes represents, depending on the case, a contractual obligation or a necessary requirement for the conclusion of the contract; in the absence of these, the owner would be unable to establish the relationship or to implement it;
b) the need to comply with legal obligations (eg obligations under the anti-money laundering legislation, instructions given by the Supervisory Authority, the Magistrates, etc.). This need represents the legal basis that legitimizes the resulting treatments. Providing the data necessary for these purposes is a legal obligation; in the absence of them the owner would be unable to establish relationships and could have the obligation to make reports;
c) the need to carry out activities of promotion and sale of wholesale and retail trade of agricultural products, with particular reference to wines, aromatic and liqueur musts, sparkling wines, liqueurs and wine products in general, high beverages, olive oil and food products of all kinds. The provision of data necessary for these purposes represents, depending on the case, a contractual obligation or a necessary requirement for the conclusion of the contract. In the absence of them, the owner would be unable to establish the relationship or to implement it;
d) the need to carry out activities of sending dedicated commercial communications, also by sending news letters, text messages, e-mails and phone calls, carrying out promotional activities, marketing and selling “dedicated” products and services of the owner or of third-party companies , specifically identified through the elaboration and the analysis, also through the use of techniques or automated systems, of information related to preferences, habits, consumption choices, aimed at dividing the interested parties into homogeneous groups for specific behaviors or characteristics (profiling) of customers) also implemented through the enrichment of data with information acquired from third parties (enrichment). The legal basis that legitimizes the resulting processing is the consent of the interested party who is free to give or not and who can, however, revoke at any time. The provision of data necessary for these purposes is not mandatory and the refusal to supply them does not determine any negative consequences, except for the impossibility of receiving dedicated commercial communications.
Personal data may be processed by means of both paper and electronic files (including portable devices) and processed in ways strictly necessary to meet the aforementioned purposes.
Consequences of failure to communicate personal data
With regard to personal data relating to the execution of the points a, b, c above mentioned of which you are a part, or related to the fulfillment of a regulatory obligation (for example the obligations related to the keeping of accounting records and tax), the failure to communicate personal data prevents the improvement of the contractual relationship itself and / or in any case the possibility of carrying out and carrying out the commercial and contractual collaboration activities in progress and of fulfilling the contractual obligations deriving from points a, b, c. With regard to personal data related to the execution of point d) the legal basis that legitimizes the resulting processing is the consent of the interested party that is free to give or not and that can, however, revoke at any time. The provision of data necessary for these purposes is not mandatory and the refusal to supply them does not determine any negative consequences, except for the impossibility of receiving dedicated commercial communications.
Your personal data, object of treatment for the above mentioned purposes, will be kept for the duration of the contract and, subsequently, for the time in which the Controller is subject to conservation obligations for fiscal purposes or for other purposes, foreseen, by law or regulation
Communication of data
Your personal data may be disclosed to:
a) consultants and accountants or legal advisors who provide functional services for the purposes indicated above;
b) banking and insurance institutions that provide functional services for the purposes indicated above;
c) subjects that process data in execution of specific legal obligations;
d) Judicial or administrative authorities, for the fulfillment of legal obligations;
Profiling and dissemination of data
Your personal data are not subject to disclosure or to any fully automated decision making process, including profiling.
Rights of the interested party
Among the rights recognized by the GDPR are those of:
- ask the Owner to access your personal data and information relating to them; the correction of inaccurate data or the integration of incomplete data; the cancellation of personal data concerning you (upon the occurrence of one of the conditions indicated in article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (upon the use of one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR);
- request and obtain from the Data Controller – in the cases in which the legal basis of the treatment is the contract or consent, and the same is done by automated means – your personal data in a structured and readable format by automatic device, also in order to communicate such data to another data controller (so-called right to the portability of personal data);
- oppose at any time the processing of your personal data to the occurrence of particular situations that affect you;
- revoke the consent at any time, limited to the cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (eg data revealing your racial origin, your political opinions, your religious beliefs, your health status or your sex life). The treatment based on consent and carried out prior to the revocation of the same preserves, however, its lawfulness;
- propose a complaint to a supervisory authority (Authority for the protection of personal data – www.garanteprivacy.it)