Privacy policy

PRIVACY POLICY PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 – COSTUMERS



CONTROLLER

IEN Industrie S.p.A.

Via Toniolo, n. 26, 61032 – Fano (PU)

P.IVA. 01301170419

Tel.: + 39 0721 853711

e-mail info@ienindustrie.com

(“Company”).



PERSONAL DATA PROCESSED

Name, surname, place and date of birth, fiscal code/VAT number, telephone contacts, general email address, contact email address, tax data, company data, bank details.



PURPOSES OF THE PROCESSING


LEGAL BASIS OF THE PROCESSING

DATA RETENTION PERIOD AND PLACE

Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Performance of a contract to which you are party (art. 6, par. 1, point b, GDPR) 

The Data will be held in a form which enables the Data Subject to be identified for no longer than is necessary for the collection purposes, given the laws covering the activities and sectors in which the Data Controller operates. Once the periods thus established have transpired, the Data will be deleted or processed anonymously, unless further retention is necessary to comply with obligations (e.g. tax and accounting) that may persist even after termination of the contract (Art. 2220 of the Civil Code) or to comply with orders issued by Public Authorities and/or Supervisory Bodies.

In the event of a dispute, the terms could be extended.


The place of data storage is the Italian Republic.

Compliance with legal national and supranational obligations to which the controller is subject

Compliance with legal obligations to which the controller is subject (art. 6, par. 1, point c, GDPR)

The Data Subject's personal data are processed to ascertain, exercise or defend a right of the Data Controller and/or to defend itself against third party claims, in court or out of court.

Legitimate interests pursued by the controller (art. 6, par. 1, point f, GDPR)


MANDATORY NATURE OF THE PROVISION OF DATA

The provision of data is mandatory for the conclusion of the contract, therefore the failure, partial or incorrect provision of such data makes it impossible to conclude the same.


CATEGORIES OF RECIPIENT

Data may be processed by external parties, including but not limited to:

a.  Supervisory and control authorities and bodies;

b.  Suppliers;

c.  Data Processors (accountant, employment consultant, system administrator, software house that manages data and software development, law firms).


The data may also be processed, on behalf of the Company, to subjects who are given appropriate operational instructions. These entities are essentially included in the following categories: 

a.  companies that offer email services; 

b.  companies offering website maintenance services; 

c.  companies that offer support in carrying out market studies.


Personal data will not be transferred outside the European Union.


SUBJECTS AUTHORISED FOR PROCESSING

The data may be processed by the employees and collaborators of the company departments designated for the purposes indicated above, which have been expressly authorized to process and have received appropriate operational instructions.





DATA SUBJECT’S RIGHTS

As a data subject, you are guaranteed all the rights specified in art. 15 - 20 GDPR, including the right to access, rectification and erasure of data, the right to restrict and object to processing, the right to withdraw consent to processing (without prejudice to the lawfulness of the processing based on the consent acquired before the revocation), as well as the right to lodge a complaint with the Italian Data Protection Authority if you believe that the processing concerning you infringes the GDPR or the Italian legislation.

The exercise of the aforementioned rights is not subject to any formal constraint and is free of charge. The controller shall provide you with information on the action taken in respect of a request under Articles 15 to 22 without undue delay and, in any event, at the latest within one month of receipt of the request. This period may be extended by two months, if necessary, taking into account the complexity and the number of requests. The data controller will inform you of this extension, and the reasons for the delay, within one month of receipt of the request. 

These rights may be exercised by written communication to be sent by e-mail to info@ienindustrie.com.