GDPR

CUSTOMER POLICY

Customer policy

LeCont S.r.l., Via del Garda, 4/A, 38068, Rovereto (TN), Italy, at Polo Tecnologico "Industria della Gomma", VAT number: 01711670222, informs you, pursuant to Art. 13 of Reg. UE 2016/679 (Reg. relative the protection of personal data, henceforth only "GDPR"), with regard to essential elements of the treatments carried out and illustrated below.

The categories of personal data processed

We use personal, identifying and non-sensitive data provided by you (such as example: name, surname, fiscal code, fiscal data, contact details, address billing).

Purpose and legal basis of processing

The personal data you provide allows us to carry out all the activities covered by the contract, fulfilling your requests, as well as to carry out all related activities the fulfilment of our obligations, such as administrative activities, tax and accounting. Specifically, your personal data are processed for the following purposes and bases legal:

  • Activities related to the performance of the contract of which you are part, including the pre-contractual phase (examples of activities are: the acquisition of information prior to the conclusion of the contract, communication of requests and/or replies to requests received, the relationship management for administration, accounting, orders, shipments, invoicing, services, fulfillment of contractual obligations and statutory); the legal basis for this purpose is contract and pre-contractual measures (Art. 6.1, letter b, GDPR)
  • Activities related to the establishment and/or the exercise and/or the defense of rights (examples of activities are: disputes related to the proper performance of the contractual relationship, warning, recovery credits); the legal basis for this purpose is legitimate interest (Art. 6.1, letter f, GDPR)
  • Keeping of accounting records; the legal basis is identifies the legal obligation (Art. 6.1, letter c, GDPR)
  • Other activities in execution of legal obligation/orders Authority (such as communication to third parties); the legal basis is identifies the legal obligation (Art. 6.1, letter c, GDPR)

None of our processing is based on consent. The legal bases on which we operate are: contract, legal obligation and legitimate interest. We do not carry out processing with automated decision-making processes or profiling.

Times of storage of data

Your personal data will be kept for the time strictly necessary to to carry out the purposes described above and to fulfil the obligations laid down by law. In particular, for activities related to the performance of the contract of which You are a party (including the pre-contractual phase), your personal data will be kept for the duration of the contractual relationship and, once the report, will be kept for purposes of assessment/exercise/defense of a the right of storage, for activities related to the investigation and/or the exercise and/or defence of rights, your personal data will be stored for 10 years, as provided for by the ordinary limitation period (Art. 2946 c.c.), save further storage in the event of interruption of the limitation period; for activities related to the retention by law, your personal data will be kept for 10 years for mandatory archiving purposes ex lege (Art. 2220 c.c.; 22, paragraphs 2 and 3 D.P.R. 29/09/1973, n. 600), save further preservation in the an interruption of the limitation period; for other activities in the execution of legal obligation/orders Authority, referring to personal data we have for the other purposes indicated in this statement, the storage times they coincide with those identified from time to time for the aforementioned purposes.

Consent and Optional/Mandatory Provision

The processing of your personal data, for the purposes explained above, may be made without your consent. The provision of your data is mandatory according to the contractual obligation, to fulfillments of law and/or regulations and is also a necessary requirement for the conclusion of the contract. Failure to provide your personal data for the purposes will, therefore, the impossibility, on our part, to give way to contracts and other related obligations, as well as to properly manage each other's trade relations.

Categories of recipients of data

Your personal data may be disclosed to third parties, for needs techniques and operations closely linked to the aims set out above and in particular to the following categories of subjects:

  1. Entities, professionals, companies or other structures entrusted by us with the processing related to the fulfilment of administrative, accounting, insurance and management related to the ordinary performance of our economic activity, also for credit recovery purposes
  2. To public authorities and administrations for related purposes the fulfilment of legal obligations or persons entitled to access them in accordance with of legal provisions, regulations, community regulations
  3. Banks, financial institutions or other entities (such as: handle the commercial transaction if the payment is made through credit card) to which the transfer of the aforementioned data is necessary to the carrying out the activity of our company in relation to the performance, from our part, of the contractual obligations assumed towards you
  4. Suppliers of installation, service and maintenance services computer and telematic systems and all functionally connected services; and necessary for the performance of the services covered by the contract
  5. Persons authorised by us to process data who have committed to the confidentiality or have an adequate legal obligation of confidentiality (e.g. employees and collaborators)

Transfers abroad

The Data Controller does not transfer personal data outside the Space European Economic. The Data Controller, however, reserves the right to use cloud; in which case, the service providers will be selected from those who provide adequate guarantees in accordance with applicable law in force.

Method of treatment

The processing of your personal data will take place both in electronic and paper format. The processing will, however, be carried out mainly with computer tools and in any case with the observance of the minimum safety precautions and confidentiality of data. In particular, technical safety measures have been implemented, information technology, organisation, logistics and procedures to prevent loss, unlawful or irrelevant use of and access to the data without authorisation.

Rights of the data subject and complaint before the Guarantor

We inform you that regarding the processing of your personal data you can exercise the following rights:

  1. Right to obtain access to your personal data (Art. 15 GDPR): may contact us to know if your personal data are being processed and legal information on processing
  2. Right of rectification (Art. 16 GDPR): obtain the correction of your data inaccurate personal or incomplete integration of those
  3. Right to erasure/oblivion (Art. 17 GDPR): obtain cancellation of your personal data, in the cases provided for by law
  4. Right to restriction of processing (Art. 18 GDPR): obtain the submission of your personal data to storage only, excluding other activities, in the cases provided for by law
  5. Right to portability (Art. 20 GDPR): obtain your personal data in a structured format, commonly used and readable by automatic device and obtain, in addition, the direct transmission to another data controller, in the cases provided for by law
  6. Right to object (Art. 21 GDPR): right to stop further processing personal data for reasons related to your particular situation, save prevalence of our compelling legitimate reasons, in the cases provided for by law
  7. Right to withdraw consent (Art. 7.3 GDPR): right to revoke consent any time consent for cases where the processing is based on the consent

To exercise these rights you can use the Data Controller's contacts provided in the this information. The exercise of rights is not subject to any formal constraint and is free of charge. We also inform you of your right to lodge a complaint before the Authority Competent Data Protection. We remind that the complaint, pursuant to Art. 77.1 GDPR, may be promoted by the data subject to the Authority the place where the person habitually resides, where he works or where he or she is verified the alleged infringement.

Data controller

The data controller is: LeCont S.r.l. Contact details of the data controller:

Amendments

This policy has been in force since 25 May 2018. We reserve the right to modify or simply update the content, in part or completely, also due to changes in the applicable legislation. We will inform you of such changes as soon as will be introduced. I, the undersigned/a, declare that I have read the above information.