Information notice pursuant to and for the purposes of Art. 13 of Legislative Decree no. 196 of 30 June 2003 (Personal Data Protection Code) and Regulation 679/2016
Pursuant to Article 13 of Legislative Decree no. 196/2003 and Articles 13/14 of European Regulation 679/2016 containing the Code regarding the protection of personal data, the undersigned T.A.B. S.R.L., with registered office in Via Alessandria 3-10015 Ivrea (TO), in its capacity as Data Controller, informs you that the personal data acquired in reference to the established relationships will be processed in compliance with the aforementioned legislation. Such processing will be based on principles of correctness, lawfulness, transparency, and the protection of your privacy and rights.
a) Purposes of the data processing
The collected data is intended for the following processing operations:
- Administrative and accounting purposes;
- Fulfillment of contractual obligations, and everything provided for by current legislation regarding work, supplies, and services;
- Fulfillment of obligations upon request of the Judicial Authority;
- Fulfillment of obligations upon request of other independent Authorities.
During such processing, it is possible to become aware of data that European Regulation 679/2016 defines as “sensitive” as it is suitable for revealing: state of health, judicial data, religion, political orientations, family situations, etc.
b) Processing methods
The processing will be carried out using manual and automated systems designed to store, manage, and transmit the data, with logic strictly related to the purposes themselves, based on the data in our possession. You undertake to promptly communicate any corrections, additions, and/or updates.
The data will be entered into relevant databases accessible to personnel in charge of processing personal data, who may perform consultation, use, and processing operations, always in compliance with legal provisions to guarantee, among other things, the confidentiality and security of the data, as well as its accuracy, storage, and relevance to the declared purposes.
Within the scope of the described processing, it is necessary to know and store information relating to personal details, tax codes, VAT numbers, and accounting data. Any failure to communicate, or incorrect communication of any of the indicated information, results in the controller’s inability to guarantee the consistency of the processing with the contractual agreements for which it is performed.
c) Nature of data provision
The provision of data and the related processing are mandatory in relation to purposes concerning contractual and legal requirements, and regarding activities necessary and functional to the execution of contractual and legal obligations. The provision of data and related processing is to be considered optional in other situations.
d) Consequences of a refusal to respond
Your eventual refusal to provide consent for the processing of data for the aforementioned purposes may result in the undersigned being unable to proceed with the contractual relationships and legal obligations.
e) Scope of communication and dissemination of data
In relation to the indicated purposes, the dissemination of your data outside the company is not planned, but it may be communicated to the following subjects or categories of subjects:
- Judicial Authorities;
- Banks and credit institutions within the scope of the company’s financial management;
- Companies providing IT and telematics networks;
- Accounting data processing companies and tax compliance services;
- Postal service companies;
- Debt collection companies or entities for related actions;
- Legal and other technical consultants.
The aforementioned subjects will act as autonomous data controllers. For the declared purposes, personal data may be transferred to countries within the European Union to the categories of subjects indicated above if the transfer is necessary for the performance of obligations arising from contracts to which the data subject is a party.
f) Data Controller
The Data Controller is: T.A.B. S.R.L – Via Alessandria 3 – 10015 Ivrea (TO)
- VAT No.: 05880820013
- Email: gdpr@tabsrl.it
The data provided will be processed by appointed personnel and will be kept for the entire duration of the current contractual period. Beyond this period, specific sector-specific legal provisions apply.
g) Rights under Art.7 of Legislative Decree 196/2003
At any time, you may exercise your rights towards the Data Controller pursuant to Art. 7 of Legislative Decree 196/2003, which is reproduced in full below for your convenience, within the limits of the conditions set out in articles 8, 9, and 10.
Art. 7 – Right of Access to personal data and other rights The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet recorded, and its communication in an intelligible form.
The data subject has the right to obtain indication of:
- The origin of the personal data;
- The purposes and methods of processing;
- The logic applied in the case of processing carried out with the aid of electronic instruments;
- The identification details of the Controller, the Processors, and the representative designated pursuant to art. 5, paragraph 2;
- The subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representative in the State territory, processors, or persons in charge.
The data subject has the right to obtain:
- The updating, rectification or, when interested, the integration of the data;
- The erasure, transformation into anonymous form, or blocking of data processed in violation of the law, including data whose storage is not necessary for the purposes for which the data was collected or subsequently processed;
- Attestation that the operations mentioned above have been brought to the attention, also as regards their content, of those to whom the data was communicated or disseminated, except where this proves impossible or involves a disproportionate effort.
The data subject has the right to object, in whole or in part:
- For legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of the collection;
- To the processing of personal data concerning them for the purpose of sending advertising material or direct sales, or for carrying out market research or commercial communication.
This right may be exercised by addressing a request to the data controller.