Offer information
Last updated: 01/08/2024
Privacy notice
Economic Offer Document
Privacy notice following article 13 of eu regulation 2016/679 for the economic offer document
Regulation on the protection of individuals concerning the processing of personal data and the free movement of such data
This notice informs you that, as part of any business relationship established with our Company, we may process data related to you and your employees. These will be included in Digitronica’ s database.IT S.p.A. (hereinafter referred to as “Digitronica.IT” or the “Data Controller“) in full compliance with EU Regulation 2016/679 (hereinafter referred to as the “Regulation“).
1. Identity and contact information of the Data Controller
The Data Controller is Digitronica.IT S.p.A., located in Viale del Lavoro, 52-37135 Verona, Italy, VAT No. 03444940237. The Legal Representative is Giorgio Danieli.
You can contact the Data Controller using the following details:
– Phone: 045-501901
– E-mail: privacy@digitronica.it | info@digitronica.it | compliance@digitronica.it
2. Purpose of processing personal data, data processed, and legal basis
We process the following categories of data: personal details and contact information, including name, surname, email address, company affiliation, position, and any data provided in relation to the product or service you have contracted with us.
- If you choose not to provide data required by legal or contractual obligations, we may not be able to proceed with our contractual relationship.
For data not required by legal or contractual obligations, our company will assess each case individually. The importance of the requested data will be considered concerning managing the business relationship.
In accordance with Article 13 of the aforementioned Regulation, we inform you that your data is collected for the following purposes:
Purpose | Type of data processed | Legal basis and retention |
---|---|---|
PRE-CONTRACTUAL | Personal details and contact information; data necessary for the execution and management of business relationships. | Execution of a contract or pre-contractual measures; fulfilment of legal obligations; Article 6(1)(b) and (c) of the GDPR. Data is retained by legal requirements. |
DIRECT MARKETING | Personal details and contact information. | - Consent (optional and revocable) Retention: Until consent is withdrawn and/or 5 years have passed since consent was given. |
MARKETING TO CLIENTS | Personal details and contact information; data related to company affiliation and position held. | - Legitimate interest - Article 6(1)(f) GDPR Retention: until consent is withdrawn and/or 10 years have passed since consent was given. |
SUPPORT FOR PURCHASED PRODUCTS AND SERVICES | Personal details and contact information; personal data provided in relation to the contracted product/service. | - Execution of a contract to which you are a party (for resolving issues and malfunctions) - Legitimate interest (for analyses aimed at improving the service) Retention: until consent is withdrawn or 5 years have passed since the last interaction. |
3. Scope of Data Communication and Dissemination
Data processing will be carried out by personnel directly employed by the Data Controller and/or by individuals or entities specifically designated as Data Processors. These include the following categories: employees, commercial agents/officers, manufacturers, distributors, suppliers of the Data Controller as necessary for the performance of the activities related to the contractual relationships and/or requests of the data subject, transportation companies for goods shipping and customs procedures, banks for the management of collections and payments, tax authorities and public entities in compliance with regulatory obligations, legal firms and consultants for the protection of contractual rights, competent judicial and investigative authorities upon express request by such authorities. As a rule, data will not be shared with external parties.
4. Retention period and methods of processing data
Data is processed using paper, digital, and electronic tools. The specific retention period is detailed in the table in Section 2 of this document.
5. Transfer of data
The Data Controller does not transfer data to countries outside the European Union or international organisations
6. Rights of the data subject
You have the right to: access your data at any time and exercise other rights under the GDPR by contacting us using the details provided in Section 1. Specifically, your rights include:
Right to access (Art. 15, GDPR)
You can ask the Data Controller to confirm whether your data is being processed. If it is, you have the right to access your data and receive certain information as outlined in Article 15 of the GDPR.
Right to rectification (Art. 16, GDPR)
If your data is inaccurate, you have the right to have it corrected by the Data Controller without delay. You can also provide additional information to complete any incomplete personal data.
Right to erasure (Art. 17, GDPR)
You can request the deletion of your data without undue delay. The Data Controller is required to erase your data unless there are valid reasons preventing this.
Right to restrict processing (Art. 18, GDPR)
You can request that the processing of your data be restricted under certain circumstances.
Right to data portability (Art. 20, GDPR)
If the processing is based on consent or a contract and is automated, you have the right to receive your data in a structured, commonly used, machine-readable format. You can also request that this data be transferred directly to another data controller if technically feasible.
Right to object (Art. 21, GDPR)
You have the right to object to the processing of your data at any time, based on your specific situation. This includes cases where processing is based on legitimate interests or your consent, such as profiling. The Data Controller must demonstrate compelling legitimate grounds to continue processing that outweigh your rights.
Automated decision-making and profiling (Art. 22, GDPR)
You have the right not to be subject to decisions made solely on automated processing, including profiling, that have legal or similarly significant effects on you.
Right to lodge a complaint (Art. 77, GDPR)
If you believe that the processing of your data violates the GDPR, you have the right to complain to the Data Protection Authority, in addition to any other administrative or judicial remedies.
7. Automated decision-making
The Data Controller does not use automated decision-making processes, except as explicitly mentioned in the Cookie Policy.
8. Changes to this document
This privacy notice may be updated from time to time. If we make significant changes to how we use your data, we will notify you by clearly posting the updates on our website or through other similar channels used initially for communication.