Pursuant to art. 13 EU Regulation n. 2016/679, Vimatic as the Data Controller, informs you that the personal data of your contact persons, as identified or identifiable natural persons, that are collected in the context of this contractual relationship will be treated in full compliance with current national and European legislation on protection personal data relating to individuals, exclusively for the purposes connected and instrumental to the performance of the obligations contractually assumed by the parties and for the fulfillment of legal obligations.
The legal basis of the treatment is the contract signed with Vimatic: the provision of personal data that may be requested by Data controller for this purposed is required as essential to allow the execution of the contract and a refusal will make impossible for Vimatic to execute the contract. Vimatic does not carry out direct marketing activities by sending promotional communications by e-mail; in any case, if these services are subsequently activated, Vimatic will request a specific and explicit consent before starting any processing activity. In these cases, the legal basis of the processing will be the consent of the interested party and the refusal to provide it will not entail any consequence, in particular for the regular execution of the contract.
The personal data collected in this way will be processed both in paper form and in computerized form, even partially automated, through insertion in Data Controller computer systems and databases, to which will have access only the staff or subjects expressly authorized and educated by the same, always within the limits of their respective competences and of what is necessary for the correct performance of the tasks entrusted to them. In case of cloud mode use, the data will be managed with appropriate cryptographic methods.
The Data Controller has also designated, as data controllers, third parties who provide services to Data Controller related to their business and who, in the context of these relationships, process personal data on his behalf; the relative list is available to interested parties at the headquarters of the Data Controller.
The acquired data can be communicated to companies belonging to the Data Controller company group and to persons expressly authorized to do so by law. The data will be preserved for the period of time necessary to achieve the purposes related to the Execution of the contract and for the fulfillment of the law, in particular fiscal, and of eventual defense, also in court, of the rights of Vimatic.
As interested parties, the identified or identifiable natural persons to whom the processed data refer may request access to the data held by the Data Controller at any time, as well as their correction and their deletion, if the latter does not conflict with contractual or law obligations regarding the data retention to which in kept the Data Controller; in relation to the data processed in an automated way, they have the right to request the portability of data in a format that can be read with the most common applications; they have the right to complain to the Supervisory Authority (Guarantor for the protection of personal data) in the event of unlawful processing or of delay or impediment from the Data Controller to exercise the rights of the interested party.
At any time they also will be able to revoke the consent given for marketing purposes, firmly remaining the lawfulness of the processing carried out before this revocation. Finally is always recognized to them the possibility of opposing to the processing of data that concern them carried out for direct marketing purposes (right of opposition).
Please note that at any time you can request more information about the data processed, the exercise of rights, as well as request the updated list of subjects who have access to data in the context of this processing, contacting the Data Controller at the following addresses:
by post: Vimatic S.r.l., Via Riviera, 39 - 27100 Pavia (PV)