POLICY REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 (“GDPR”) AND NATIONAL LEGISLATION ON PRIVACY
Data processing controller
[INSERIRE SOCIETA] (“Company”)
Registered Office – []
Tax Code, VAT Code and Rome Enterprise Registry Code []
Tel. [] - privacy@mairetecnimont.it
Data protection officer (DPO)
The DPO can be contacted at: dpo@mairetecnimont.it
Personal data processed (common data)
Name, surname, company role/ job title, email
Source of data
The data is collected from the interested party (therefore it is provided directly by you).
| PROCESSING PURPOSES | LEGAL BASIS OF PROCESSING | DATA RETENTION PERIOD |
|---|---|---|
| Allow you to access the features of the Site, including: - the provision of comparative and/or marketing services; - assistance for the potential establishment of trade relations. |
Execution of the agreement. | Contractual duration and, after termination, for a period of 5 years. |
| Allow to respond to support requests for platform malfunctions. | Execution of the agreement. | Contractual duration and, after termination, for a period of 5 years. |
| Carrying out control in relation to the registered subject. | Need to comply with the legal obligations. | Contractual duration and, after termination, for a period of 5 years. |
| If necessary, to ascertain, exercise or defend the rights of the Controller in court. | Legitimate interest (defence in court). | In the case of judicial litigation, for the entire duration of the same, until the exhaustion of the terms of practicability of appeals. |
Once the above retention terms have elapsed, the data will be destroyed, deleted or made anonymous.
Data supply
The provision of these data is mandatory, the refusal to provide implies the impossibility of using the services offered by the platform.
Categories of data recipients
The data may be communicated to parties operating as data controllers, including, in particular, tax, social security, insurance authorities, qualified professionals, companies for administrative-accounting purposes, banks and credit institutions, auditing firms, supervisory and control authorities and bodies and in general public or private parties entitled to request data. Moreover, data can be communicated to European companies of the Maire group as well as, for contractual and commercial purposes, to partners.
The data may be processed, on behalf of the controller, by parties designated as external data processors, including, in particular, companies responsible – for examples - accounting, tax and insurance obligations, consulting management, platform maintenance activities.
Parties authorized for processing
The data may be processed by employees and collaborators belonging to departments responsible for the pursuit of the aforementioned purposes that have been expressly authorized for processing and have received adequate operating instructions.
Transfer of personal data in countries not belonging to the European Union
Data will not be transferred outside the European Union.
Rights of parties concerned - Complaints to the control authority
By contacting the Group Corporate Affairs Department, Governance & Compliance Depart. via e-mail privacy@mairetecnimont.it parties concerned may:
ask the data controller to have access to their data, the correction, integration or deletion thereof, as well as the limitation of processing;
oppose processing in the hypotheses of legitimate interest of the controller;
receive the data in a structured form that is commonly used and legible by an automatic device, and, if technically feasible, transmission thereof to another controller without impediments (“right to data portability”).
Parties concerned shall also have the right to file a complaint with the competent Supervisory Authority.