We would like to inform you that EU Regulation 2016/679 (“General Data Protection Regulation”) provides for the protection of individuals and other parties regarding the processing of personal data. In compliance with Articles 13 and 14 of EU Regulation 2016/679, we provide you with the following information:
-
Purposes and legal basis of the data processing
The personal data you provide and communicate when assigning tasks will be processed exclusively to comply with legal, contractual, or regulatory obligations, and specifically for the following purposes:
-
Supply of goods, provision of services, and execution of contracts;
-
Compliance with national and EU regulations;
-
Legitimate interest of the Data Controller;
-
Marketing.
-
Methods of processing
The processing of your personal data is carried out using the operations described in Article 4 of the Privacy Code and Article 4 (2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data is processed both manually and electronically/automatically to ensure security and confidentiality. Your personal data is processed by the company within the European Union territory and, if necessary, for technical or operational reasons, the company reserves the right to transfer your personal data to countries outside the European Union for which “adequacy” decisions by the European Commission exist, or based on appropriate guarantees or specific derogations provided for by the Regulation.
-
Nature of data collection and consequences of failure to provide data
The personal data subject to processing pertains to the service you requested. Providing your personal data is mandatory to fulfill the obligations arising from the employment relationship and to comply with legal requirements in general. Failure to provide such data may result in the inability to establish the relationship or to carry out the requested services or continue with the same.
-
Communication and dissemination of data
Your data may be communicated to:
-
Employees and collaborators of the Data Controller, within their duties;
-
All parties with access to such data as recognized by legal provisions;
-
All individuals or legal entities, public or private, where communication is necessary or functional to the execution of the contract and for the purposes stated above.
-
Data retention methods and duration
Personal data will be stored at the offices located at Via Sandro Pertini, 41/43 – 25046 Cazzago San Martino (BS) using both computerized and manual procedures, as necessary to pursue the aforementioned purposes. The data controller will process the personal data in accordance with the applicable laws and, in any case, no longer than 10 years after the termination of the relationship for service-related purposes. Personal data may also be processed for a longer period if an interrupting and/or suspending act of the limitation period justifies the extension of data retention.
-
Data controller and data processor
The Data Controller is G.B.C. Industrial Tools S.P.A., with its registered office at Via Eugenio Carpi, 20 20131 Milan (MI), and operational headquarters at Via Sandro Pertini, 41/43 – 25046 Cazzago San Martino (BS). The updated list of Data Processors and authorized persons is kept at the operational headquarters.
-
Rights of the data subject
As the data subject, you have the rights specified in Article 7 of the Privacy Code and Article 15 of the GDPR, including the following rights:
-
Obtain confirmation of the existence of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
-
Obtain the following information:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied in case of processing carried out with the aid of electronic tools;
d) the identification details of the Data Controller, the Data Processors, and the designated representative pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1 of the GDPR;
e) the recipients or categories of recipients to whom personal data may be communicated or who may become aware of it as designated representatives within the State, or as processors or authorized persons;
-
Obtain:
a) the updating, rectification, or, where applicable, the integration of the data;
b) the deletion, anonymization, or blocking of data processed in violation of the law, including those that do not need to be retained for the purposes for which the data were collected or subsequently processed;
c) the confirmation that the operations referred to in letters a) and b) have been communicated, including their content, to those to whom the data has been disclosed, except when this proves impossible or involves a disproportionate effort in relation to the right protected;
-
Object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning you, even if relevant to the purpose of collection;
b) to the processing of personal data for the purpose of sending advertising materials or direct sales or for market research or commercial communication purposes, through the use of automated calling systems without human intervention, by email, and/or through traditional marketing methods, such as phone and/or postal mail. Please note that the right to object for direct marketing purposes via automated methods extends to traditional methods, and the data subject may exercise the right to object in part, such as by only receiving communications via traditional methods or automated methods, or neither.
-
Where applicable, exercise the rights under Articles 16-21 of the GDPR (Right to Rectification, Right to Erasure, Right to Restriction of Processing, Right to Object), as well as the right to lodge a complaint with the Data Protection Authority.
-
Right under Article 20: right to data portability
The data subject has the right to receive personal data concerning them, provided to the Data Controller, in a structured, commonly used, and machine-readable format, and to transmit such data to another Data Controller without hindrance.
-
Withdrawal of consent to processing
You have the right to withdraw your consent to the processing of your personal data by sending a registered letter to the following address: G.B.C. Industrial Tools S.P.A., Via Sandro Pertini, 41/43 – 25046 Cazzago San Martino (BS), accompanied by a photocopy of your identification document, with the following text: << Withdrawal of consent to the processing of all my personal data >>.
Upon completion of this procedure, your personal data will be removed from our records as soon as possible.