Privacy Policy
Contedoro s.r.l.
c.da Brecceto – 83031 Ariano Irpino (AV) – ITALY
Tel. +39 0825 824 855
INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION NO. 679/2016
Data Controller
The Data Controller for the processing of data relating to its Customers, Suppliers, Employees, and Collaborators, pursuant to Art. 13 of EU Regulation No. 679/2016 (hereinafter the “Regulation”), is Contedoro s.r.l., a company with its registered office at c.da Brecceto – 83031 Ariano Irpino (AV) , who can be contacted for requests or communications at the e-mail address:
Subject of Processing
The Controller processes personal, identifying data (for example, name, surname, company name, address, telephone, e-mail, bank and payment references) – hereinafter, “personal data” or simply “data” communicated by You upon the conclusion of contracts for the Controller’s services. According to the indicated legislation, such processing will be based on principles of correctness, lawfulness, transparency, and the protection of Your privacy and Your rights.
Purposes and legal basis for the processing of personal data
The processing of the aforementioned data is aimed at:
the management and fulfillment of relationships in both the pre-contractual and contractual phases aimed at the sale/purchase of products and services;
the fulfillment of internal operational or management needs and any regulatory obligations, fiscal and tax provisions resulting from the conduct of business activities, as well as bookkeeping.
We inform you in particular that Your personal data are processed:
without Your express consent and if provided directly by You ex Art. 6 lett. b), e) GDPR), for the following Service Purposes:
concluding contracts for the Controller’s services;
fulfilling pre-contractual, contractual, and tax obligations arising from existing relationships with You;
fulfilling obligations provided for by law, a regulation, community legislation, or an order from the Authority (such as in anti-money laundering matters);
exercising the rights of the Controller, for example, the right of defense in court;
Only with Your specific and distinct consent (Art. 7 GDPR), for the following Marketing Purposes:
sending You via e-mail, mail and/or SMS and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Controller and measuring the degree of satisfaction with the quality of services;
sending You via e-mail, mail and/or SMS and/or telephone contacts commercial and/or promotional communications from third parties (for example, business partners).
Categories of recipients to whom the data refer
Customers, Suppliers, Employees.
Processing methods
The processing of Your personal data is carried out by means of the operations indicated in Art. 4 n. 2) GDPR and precisely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data. Your personal data are subjected to both paper and electronic and/or automated processing.
The Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no longer than 10 years from the termination of the relationship for Service Purposes and for no longer than 2 years from the collection of data for Marketing Purposes.
Access to data
Your data may be made accessible for the purposes referred to in Art. 2.A) and 2.B):
to employees and collaborators of the Controller in Italy and abroad, in their capacity as persons in charge and/or internal data processors and/or system administrators;
to third-party companies or other subjects (by way of example, credit institutions, professional firms, consultants, mailing companies, etc.) that perform outsourcing activities on behalf of the Controller, in their capacity as external Data Processors.
Communication of data
Without the need for express consent (Art. 6 lett. b) and c) GDPR), the Controller may communicate Your data for the purposes referred to in Art. 2.a) to judicial authorities, as well as to those subjects to whom communication is mandatory by law for the fulfillment of said purposes. These subjects will process the data in their capacity as independent data controllers.
Your data will not be disseminated.
Data transfer
Personal data are stored by Contedoro s.r.l. within the European Union. It is understood in any case that the Controller, should it become necessary, will have the right to move the servers even outside the EU. In this case, the Controller ensures as of now that the transfer of data outside the EU will take place in accordance with applicable legal provisions, following the stipulation of the standard contractual clauses provided by the European Commission.
Nature of data provision and consequences of refusal to respond.
The provision of data for the purposes referred to in Art. 2.A) is mandatory. In their absence, we will not be able to guarantee You the Services of Art. 2.A).
The provision of data for the purposes referred to in Art. 2.B) is instead optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, You will not be able to receive newsletters, commercial communications, and advertising material relating to the Services offered by the Controller. You will however continue to be entitled to the Services referred to in Art. 2.A).
Rights of the data subject
Pursuant to Articles 15 to 22 of the Regulation, in the cases provided for, the data subject may exercise the following rights.
Right of access: consists of the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data and other information.
Right to rectification: right to obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay.
Right to erasure: (“right to be forgotten”): right to obtain from the data controller the erasure of personal data concerning him or her without undue delay, and the data controller has the obligation to erase personal data without undue delay where specific grounds apply.
Right to restriction: right to obtain from the data controller the restriction of processing when certain hypotheses occur.
Right to portability: right to receive in a structured, commonly used, and machine-readable format the personal data concerning him or her provided to a data controller;
Right to object: right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1), letters e) or f) of the Regulation.
Right to lodge a complaint with the supervisory authority: where the data subject believes that his or her rights have been violated, he or she may lodge a complaint or make a report to the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or file an appeal with the Judicial Authority. The contact details for the Garante per la Protezione dei Dati Personali can be found on the website garanteprivacy.it.
Methods of exercising rights
a registered letter with return receipt to Contedoro s.r.l., C.da Brecceto – 83031 Ariano Irpino (AV) – ITALY
an e-mail to the address info@contedoro.com
Update This document is updated as of 2023-03-15