Disclosure in accordance with EU Regulation no. 679/2016.
The data controller is Thermokey S.p.A. — Via dell’Industria, 1 — 33061 Rivarotta di Rivignano Teor (UD), in the person of its pro temporelegal representative.
Purposes of the treatment:Thermokey S.p.A. will process your personal data (personal and fiscal) for the following purposes:
- management of ordinary business relationship such as the definition, management and execution of contracts with us stipulated;
- Compliance with legal obligations related to civil, accounting, fiscal (filling in of registry lists, keeping accounts of customers / suppliers, invoicing, management of the creditor) and fulfilment of all obligations under current regulations.
If you already are a customer, your personal data (name, company, email address) may be used by us for the management of communications, the reply to your possible requests, and to send informative and advertising material regarding alike services such as the ones of the existing commercial relationship (up to your possible consent withdrawal to the treatment for such uses).
Your personal data will be used only after your specific and distinct consent (articles 23 and 130 of the Privacy Code and article 7 of the GDPR) to send you using automated communication tools (by mail, post and/or text message and/or telephone contacts) newsletters, commercial communications and/or advertising material on products or services offered by the Owner.
The interested party has the right to withdraw their consent to the processing of their personal data at any time.
Method of treatment
The data will be processed following lawfulness, righteousness, pertinence and non excess, using paper-based and electronic instruments, ensuring the confidentiality and integrity of the data.
The data may be seen by the operators in charge and by the external Data Controller’s collaborators in charge of carrying out activities that are necessary to the procurement of the requested services or services of a complementary nature (in compliance with the requirements of existing legislation on administrative, legal and tax matters).
Legal basis for the processing:The legal basis for the processing is based on the request to our company for the procurement of products and services.
Possible recipients / categories of recipients of personal data
Without a need for an express consent (art. 6 lett. b) and c) GDPR), your data may be disclosed as a result to inspections or checks (when required), to all supervisory bodies responsible for checks and inspections relating to the regularity of legal obligations.
Your data may also be disclosed to companies/professional firms that provide assistance, advice or collaboration to the Data Controller, in accounting, administrative, tax, legal, tax and financial matters, to public administrations for the carrying out of the institutional functions within the limits established by the law or by regulations and to third party service providers to whom the communication is necessary for the carrying out of the services subjected to the contract. Your personal data shall not be disseminated.
Obligations regarding the providing of data
In addition to what is specified for navigation data, the user is free to provide or not their personal data.
The providing of data necessary for the fulfilment of obligations under the existing contractual relationship is required for a proper management of the relationship and their communication is mandatory for the fulfilment of the above indicated purposes. Please note that any non-communication, or incorrect communication, of one of the mandatory data, may cause the Data Controller’s inability to guarantee the adequacy of the processing itself.
The providing of personal data for marketing purposes is optional.
Transfer of data to third countries
Your personal data will not be transferred to third countries; the treatment will be carried out within the borders of the European Union.
Conservation period of personal data
Personal data will be kept for the period needed for the fulfilment of existing contractual obligations and other obligations dictated by the applicable regulations on the activity of the Data Controller, and in any case for no more than 10 years from the termination of the relationship for accounting and administrative purposes.
Rights of the interested party
Pursuant to articles 15-22 of the GDPR, the interested party has the right to know at any time which are their data stored at the Organization and how this data is used; he also has the right to have the data updated, corrected, completed or cancelled, request their blocking and object to their treatment.
The interested party may at any time exercise hisrights by sending:
a registered letter A.R. to Thermokey S.p.A. — Via dell’Industria, 1 — 33061 Rivarotta di Rivignano Teor (UD);
• an e-mail to the address: firstname.lastname@example.org