Source: https://www.sculatiandpartners.com/en/privacy-policy/
Timestamp: 2019-06-20 01:27:16
Document Index: 30947744

Matched Legal Cases: ['art. 13', 'art. 13', 'art. 9', 'art. 32', 'art. 29', 'art. 24', 'art. 6', 'art. 44', 'art. 46', 'art. 7']

Sculati & Partners Srl, headquarter in Novara (Italy), as an interested party (the ‘Data Subject’), (the ‘Company’) wishes to inform you that within the meaning and for the purposes (i) of Legislative Decree of 30 June 2003, n. 196, the ‘Privacy Code’, art. 13, (ii) of UE Regulation 2016/679 on the 1protection of natural persons with regard to the processing of personal data, and on the free circulation of such data’, the “GDPR”, art. 13, (iii) of the subsequent compliance of National legislation in the internal legislative framework, also jointly called ‘Privacy Policy’, some obligations are set forth upon the subjects carrying out the processing (i.e. collection, recording, processing, storage, communication, dissemination, etc.) of personal data referred to other subjects (the ‘Processing’).
In this regard, the Company is required to provide you some information about the methods and purposes of the processing of personal data concerning you, being the Company able to come into possession of some of them during the pre-contractual negotiations as well the training activities and the performance of the contractual relationships with you, in place and / or that may be established, concerning the purchase and / or sale of goods, products and / or the supply of services (hereinafter referred to as “Contract” or “Purchase Order”).
The Data Controller is the person who determines the purposes for which and the manner in which personal data are to be processed (the ‘Data Controller’) and is identified in the Company, in the person of the Chairman of the Board of Directors.
The Data Controller may be contacted by e-mail at the following address
If you require more information on the updated list of our Data Processor, you may send a written request to the abovementioned Data Controller address.
a) Provide you the information requested;
b) comply with the preliminary requirements for the performance of the Contract for the sale/purchase of goods and/or services of the Data Controller;
c) carry out the management of administration, accounting, orders, shipping, invoicing, services;
d) comply with the pre-contractual, contractual and physical obligations deriving from the outstanding relationships with you;
e) comply with the obligations requires by law, rules, EU regulations or authorities (i.e. anti-money laundering);
f) exercise the Data Controller’s rights (e.g. the right to legal defense in the event of non-fulfillment of contractual obligations).
-the data subject has given consent to the processing of his or her personal data for one or more specific purposes (Article 6 paragraph 1 letter a) and art. 9 par. 2 lett. a) EU Reg. 679/2016);
-processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into contract (Article 6 paragraph 1 letter b) EU Reg. 679/2016);
-processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests of fundamental rights and freedoms of the data subject which require protection of personal data (Article 6 paragraph 1 letter f) Reg. EU 679/2016).
The provision of data for the abovementioned purposes is mandatory, insofar as it is requested for the fulfillment of legal and contractual obligations. Any refusal to provide them or any subsequent lack of authorization for their Processing may cause the inability of the Data Controller Owner to implement the same contractual relationships.
Processing will be carried out in an automated and/or manual manner, using methods and tools in compliance with security measures under art. 32 of the GDPR and Annex B of the Privacy Code (articles 33-36 of the Code), by specifically appointed persons, in compliance with the provisions of art. 29 GDPR, in order to pursue only the purposes for which the data were collected and, in any case, to guarantee their security and confidentiality.
We also inform you that the Company processes your personal data in full compliance with the principals of fairness, lawfulness and transparency.
Access may be granted for the purposes described in clause “Purpose od processing”:
-to the data controller’s employees and associates in charge and/or internal Processors and/or to system administrators;
-B. to banks, couriers, external professionals and consultants (e.g. tax consultants, attorneys, payroll consultants, agents, IT services, shipments, auditing firms) for the sole purpose of protecting credit and, managing individual business relationships – to be compliant with applicable laws or for functional reasons necessary for the performance of the contract – performing outsourced operations on behalf of the data controller as independent external operators or processors appointed by the data controller.
Without your consent (art. 24 a), b), d), Privacy Code and art. 6 b) and c) GDPR) the data controller may communicate your data for the purposes described in clause “Purpose od processing” to supervisory bodies, judicial authorities and all other subjects (Labour Inspector, ASL, Social Security Funds, ENASARCO, Chamber of Commerce) which by law require such communication in order to achieve these purposes. These subjects will hols data as independent data collectors.
Personal data are to be processed within the European Union and stored on services located in that area. Anyway, if necessary, the Data Controller will have the right to transmit such data to a third country or to an international organization and/or to move the servers even outside UE. In this case, the Data Controllers ensures that the transfer for non-EU data will be carried out accordance with the applicable legal previous under art. 44 of the Policy Code and art. 46 and following of the GDPR.
The Company will retain in its system your personal data acquires for a period of time not exceeding the termination of the abovementioned purposes to the duration of the contractual relationship to which it relates.
However, in compliance with the principle of processing limitation and minimization of data collection, the Company will reserve the right to keep your data in any case no later than ten years from the expiry date of the last Contract / Purchase Order signed by the parties.
Finally, the Company informs you that, pursuant to art. 7 of the Privacy Code and articles 15-22 of the GDPR, you, in relation to your personal Data Subject may exercise specific rights at any time, by contacting the Data Controller, such as:
a) Right to access: The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data concerning the origin, purpose, category of data processed, recipients of communication and/or data transfer, retention period of personal data or the criteria used to determine this period;
b) Right to rectification: The data subject shall have the right to obtain from the controller without under delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement;
c) Right to erasure: The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
ii. the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing;
iv. the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
v. the data subject objects to processing and there are no overriding legitimate grounds for the processing or the data subject objects to the processing pursuant to Article 21(2) of the GDPR (personal data processed for direct promotional purposed).
d) Right to restriction of processing: The data subject shall have the right to obtain from the controller restriction of processing, including profiling, if interest, rights and fundamental rights of the Data SUbject prevail over the legitimate interest of the Data Controller, if it is carried out for direct marketing purposes and if the personal data are processed for scientific or historical research purposes or for statistical purposes;
e) Right to limit the processing: The data subject shall have the right to obtain from the Controller the limitation pf Processing, in cases where the accuracy of personal data is contested (for the period necessary to the Data Controller to verify the accuracy of such personal data), if the Processing is illicit and/or the Data Subject has opposed to the processing requesting its limitations;
f) Right to data portability: The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent and the processing is carried out by automated means;
g) Right to withdraw consent: if the Processing is based on your explicit consent, you have the right at any time to withdraw the previously given consent without prejudice to the lawfulness of the processing carried out upon your consent legitimately given before the revocation;
h) Right to lodge a complaint with a supervisory authority: in case of a breach of the Privacy Law, as a data subject, he has the right to lodge a complaint with the supervisory authority of the member state which he resides or habitually works, or the state in which the supposed violation has occurred, without prejudice to any other administrative or judicial appeal.
If you request more information about your data, the data controller shall respond promptly – unless this provides impossible or involves a manifestly disproportionate effort compared with the right to be protected – and in any case no later than thirty days from the request. The data controller will justify any inability or delay in doing so to meet the request.
For sculatiandpartners.com to work properly, we install on your device “cookies” files.
A cookie is a small text file that websites save on your computer or mobile when you first visit them. Cookies allow the website to remember your actions and preferences (such as login, language, text dimension and other visualization settings) so that you don’t have to change them every time you visit the website or move within it.
Google Analytics Third-party service cookies
Sculatiandpartners.com uses this Google Inc. analysis web service to obtain aggregated statistical information in order to evaluate the website’s performance and user activities. Google stores cookies’ information on servers, which could be located in the United States. Google reserves the right to pass cookie’s information onto third-parties if required by law or if the third-party is processing the information for Google.Google will not connect your IP address to any other data in its possession in order to create a more detailed user profile. For further information about privacy management and about how to refuse or cancel this kind of cookies, please visit:http://www.google.com/intl/it_ALL/analytics/learn/privacy.html.The User can deactivate these cookies installing on the browser a Google opt-out. To disable Google Analytics from collecting these data, please visit the website: https://tools.google.com/dlpage/gaoptout
Embedded contents Third-party service cookies Sculatiandpartners.com uses You Tube videos and other embedded contents on different platforms. Sculatiandpartners.com has no control over these third-parties’ cookies and we recommend that you contact directly the third-parties that dispense them in order to know how to control these cookies.
Social Network Cookies for ‘sharing’ e ‘follow’ widgets Third-party service cookies Cookies are necessary for social network widgets to work, in particularTwitter, Facebook, Linkedin, YouTube share buttons. These widgets will not be available until the cookie policy is accepted.