Dear Customer / Supplier

We wish to inform you that the EU Reg. 2016/679 ("European Regulation on the protection of personal data") provides for the protection of people and other subjects, and respect for the processing of personal data. Pursuant to art. 13, therefore, we provide the following information:

1. Purpose, legal basis of the processing for which the data are intended

a) The processing of personal data supplied by you is aimed solely at fulfilling contractual obligations and fulfilling specific requests, as well as fulfilling regulatory obligations, in particular accounting and tax requirements required by our activity.

2. Methods of processing

In relation to the aforementioned purposes, your data are processed electronically and manually. The processing operations are carried out in such a way as to guarantee the logical, physical security and confidentiality of your personal data.

3. Legitimate interests pursued by the holder of the data processing or third parties

The legitimate interests pursued by the holder of the data treatment in the processing of data is given by having to respect and honor the contractual obligations signed between the parties.

4. Nature of personal data

Object of data treatment are Your personal data, processed for the performance of the service requested by you.

5. Mandatory or optional nature of the contribution

Your personal data are processed: without your consent, with mandatory nature, to fulfill the pre-contractual, contractual and fiscal obligations; fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority; exercise the rights of the owner, for example the right to defense in court.

6. Scope of communication and dissemination of data

Your data may be communicated to:

• all the subjects to whom the right of access to such data is recognized by virtue of regulatory provisions;

• to our collaborators and employees, as part of their duties;

• to all those natural and / or legal persons, public and / or private, when the communication is necessary or functional to the performance of our business and in the manner and for the purposes illustrated above, for example: banks, insurance companies, auditing bodies, control bodies, debt collection companies, etc.

7. Transfer of personal data to a third country

The data will not be transferred to outside the European Union.

8. Mode and duration of personal data retention

Your personal data will be kept for the time strictly necessary. Specifically, fiscal and accounting data 11 years from the termination of the relationship.

9. Existence of an automated decision-making process

There is no automated decision-making process.

10. Identification information of the data treater

The "HOLDER" OF THE DATA PROCESSING, under Article 28 of the Code regarding the protection of personal data is: Italpres di Zani Bruno snc di Zani Duilio & C. based in Via Mameli 10, 25065 Lumezzane (BS) tel. 030/8970111.

11. Rights of the interested party

11.1 Article 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679

The interested party has the right to obtain confirmation from the data treater as to whether or not, personal data concerning him, or her, are being processed, and, if this is the case, to obtain access to the personal data and the information described in this statement.

11.2 Right pursuant to art. 17 of EU Reg. 2016/679 - right to cancellation ("Right to be forgotten")

The interested party has the right to obtain from the holder of data treatment the deletion of personal data concerning him, or her, without undue delay, and the holder of data treatment is obliged to cancel the personal data without undue delay if one of the following reasons exists:

a) personal data are no longer necessary with respect to the purposes for which they were collected, or otherwise processed;

(b) the interested party revokes the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a), and if there is no other legal basis for the processing;

(c) the interested party opposes the processing pursuant to Article 21 (1) and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21 (2);

d) personal data have been processed unlawfully;

e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the holder of data treatment is subject;

f) personal data have been collected in relation to the information society service offer referred to in Article 8, paragraph 1 of EU Reg. 2016/679

11.3 Right referred to in art. 18 Right of limitation of treatment

The interested party has the right to obtain from the holder of the data treatment the limitation of processing when one of the following occurs:

a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;

b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;

c) although the data processor no longer needs it for processing purposes, personal data are necessary for the interested party to verify, exercise or defend a right in court;

d) the interested party has opposed the treatment pursuant to article 21, paragraph 1, Reg EU 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

11.4 Right pursuant to Article 20 Right to data portability

The interested party has the right to receive, in a structured, commonly used and automatically readable form, the personal data concerning him / her, which he / she provided to a data controller, and has the right to transmit such data to another data controller without impediments from part of the data controller.

If you want more information on the processing of your personal data, or exercise the rights referred to in paragraph 11 above, you can contact the following email address: 0308970111

Before we can provide to you, or change any information, in the shortest possible technical time, you may need to verify your identity and answer some personal questions about the data provided.

12. Revocation of consent to data processing

The interested party has the right to revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.

You have the right to revoke your consent to the processing of your personal data by sending a certified email to the following email address: italpres@pec.italpres.comtel. 0308970111, accompanied by a photocopy of your identity document, with the following text: << revocation of consent to the processing of all my personal data >>. At the end of this operation your personal data will be removed from the archives as soon as possible.