Customers and Suppliers privacy Notice Tomasetto Achille spa

You are here:
  1. Home
  2. Customers and Suppliers privacy Notice Tomasetto Achille spa

Information pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)

This notice is addressed to customers, suppliers, business partners and their respective individual contacts with whom Tomasetto Achille S.p.A. maintains or intends to establish commercial or contractual relationships.

Tomasetto Achille S.p.A., with registered office at Via del Progresso n. 47/53, 36020 Castegnero Nanto (VI), VAT No. 00931330245 (hereinafter the “Company” or the “Data Controller”), informs you that the personal data provided will be processed in compliance with Regulation (EU) 2016/679 (“GDPR”) and the applicable legislation on personal data protection.

. Data Controller

The Data Controller is:

Tomasetto Achille S.p.A.
Via del Progresso n. 47/53
36020 Castegnero Nanto (VI) – Italia
Ph. +39 0444 638326
Email: info@tomasetto.com

The Company has not appointed a Data Protection Officer (DPO), as the conditions required by the applicable legislation are not met.

2. Types of data processed

The Company processes ordinary personal data relating to customers, suppliers and their respective contacts, such as:

  • first name and surname;
  • company name;
  • address;
  • telephone contacts;
  • email addresses;
  • tax-related data;
  • banking details;
  • any additional data necessary for the management of the commercial and contractual relationship.

3. Purposes of processing

Personal data are processed for the following purposes.

3.1. 3.1 Contractual and administrative purposes

  • management of pre-contractual negotiations;
  • preparation of offers, quotations, orders, order confirmations and transport documents;
  • performance of the contractual relationship;
  • provision of technical and commercial assistance;
  • administrative, accounting and tax management;
  • management of collections and payments;
  • compliance with obligations imposed by applicable laws, regulations and provisions.

3.2 Commercial communication purposes

Subject to the data subject’s consent, personal data may be used for:

  • sending newsletters and informational communications;
  • invitations to trade fairs, events and meetings;
  • commercial communications relating to the Company’s products and services;
  • information regarding promotional activities and corporate initiatives.

Failure to provide consent for these purposes shall in no way affect the establishment or continuation of the contractual relationship.

4. Legal basis for processing

The processing of personal data is based on the following legal grounds:

  • performance of a contract or pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR);
  • compliance with legal obligations to which the Data Controller is subject (Art. 6(1)(c) GDPR);
  • pursuit of the Data Controller’s legitimate interest in managing the commercial relationship and protecting its rights (Art. 6(1)(f) GDPR);
  • consent of the data subject for marketing and commercial communication activities (Art. 6(1)(a) GDPR).

5. Provision of data

The provision of data necessary for establishing and managing the contractual relationship is mandatory. Failure to provide such data may prevent the establishment or proper execution of the relationship.

The provision of data for marketing purposes is optional.

6. Data retention

Personal data shall be retained:

  • for the entire duration of the contractual relationship;
  • thereafter, for the period required by applicable civil, tax and administrative legislation;
  • for marketing purposes, until consent is withdrawn and, in any case, for a period not exceeding 24 months from the last significant interaction with the data subject, unless consent is renewed or a different legal obligation applies.

7. Disclosure of data

Personal data may be disclosed to:

  • tax, legal and administrative consultants;
  • banking and insurance institutions;
  • IT companies and technical service providers;
  • transport and logistics companies;
  • public bodies, supervisory authorities and competent authorities where required by law.

Such parties shall act, depending on the circumstances, either as independent Data Controllers or as Data Processors appointed by the Data Controller.

8. Data transfer

Personal data are processed primarily within the European Union.

Should organisational or technical needs require the transfer of data to countries outside the European Union, such transfer shall take place in compliance with the conditions and safeguards provided for by Articles 44 et seq. of the GDPR.

9. Automated decision-making processes

Personal data are not subject to fully automated decision-making processes nor to profiling activities.

10. Rights of the data subject

The data subject may exercise the rights provided for by Articles 15–22 of the GDPR, including:

  • obtaining access to their personal data;
  • requesting rectification or updating thereof;
  • requesting erasure in the cases provided for by law;
  • obtaining restriction of processing;
  • objecting to processing in the cases provided for by law;
  • receiving the data in a structured format and requesting data portability, where applicable;
  • withdrawing any consent previously given at any time.

The data subject also has the right to lodge a complaint with the Data Protection Authority.

11. How to exercise rights

To exercise your rights or request information regarding the processing of personal data, you may contact the Data Controller at:

Tomasetto Achille S.p.A.
Via del Progresso n. 47/53
36020 Castegnero Nanto (VI) – Italia
Email: info@tomasetto.com