Information art.13 European Regulation GDPR 679/2016 for the Processing of Personal Data

Dear Customer, in accordance with Article 13 of the European Regulation GDPR 679/2016 for the processing of personal data, SIDEL SRL is the owner and responsible for the storage and processing of personal data; below we want to inform about the management of personal data provided or collected by us.

Personal data source

Our company collects data from end users, customers, suppliers and the data you provide directly, through our appointees or from third parties in order to carry out our business activity or through inclusion in our digital platforms. We collect personal data when we are asked for news related to our products, services or information about our business activity. The data may include first and last name, contact details and other information necessary for the issuance of documents pertaining to our sales.

Purposes of the processing for which the data are intended

Personal data will be processed as part of our business for the following purposes:

1. Management of all activities pertaining to the business and contractual relationship
2. Fulfillment of tax and accounting obligations inherent in established business relationships
3. To provide important communications and improve the business relationship with our company
4. For commercial initiatives and advertising communications related to our products within the scope of our business activities, unless your explicit consent

Methods of data processing and storage

Data are processed by manual, computer and telematic tools with logic strictly related to the purposes themselves and, in any case, in such a way as to ensure the security and confidentiality of the data. The data are stored on our servers and by appointed parties.

The data of which we will become aware will be kept and stored for the performance of services inherent to the existing commercial and contractual relationship. Refusal to provide such data may result in the non-performance of all or part of the contract.

The data will be kept in our files for as long as necessary for the fulfillment of contractual obligations and in accordance with the legal terms provided for record keeping. If you give your consent for the processing of your data for commercial and advertising purposes, the information about you will be kept in our archives until you request the deletion of the data; in any case, it will be processed only for the indicated purposes, as described in this notice.

Data Disclosure

The data thus collected will not be disclosed or communicated to third parties except where expressly consented to by the data subject and in cases expressly provided for by law or in cases of legal obligations.

If necessary we will communicate the data to:

• Entities and institutions in charge exclusively within the scope of the purposes related to the contractual relationship
• Professionals assigned solely for the purposes related to the contractual relationship and its inherent obligations
• In case of litigation
• When disclosure is required by law or specifically requested by public authorities

Owner and controller

Data controller: SIDEL SRL – via Nazionale, 84032 Buonabitacolo SA Partita I.V.A. 00851390658

Data processor: Damiani dr. Marilena – via Nazionale snc 84032 Buonabitacolo (SA)

For comments or questions about this policy please contact: amministrazione@sidelsrl.it

At any time, the rights provided for in art.15 of the European Regulation GDPR 679/2016 are unaffected by contacting us at the contact details indicated in this policy. This policy is subject to change, for any updates we encourage you to constantly read the policy.

Article 15 Right of access of the interested party

1. The data subject has the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data and the following information:

1. The purposes of the processing;
   (b) the categories of personal data concerned;
   (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly if recipients in third countries or international organizations;
   (d) when possible, the expected period of retention of personal data or, if this is not possible, the criteria used to determine this period;
   (e) the existence of the data subject’s right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing
   (f) the right to lodge a complaint with a supervisory authority;
   (g) where the data are not collected from the data subject, all available information about their origin;
   (h) the existence of an automated decision-making process, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information about the logic used, as well as the importance and the envisaged consequences of such processing for the data subject.
2. Where personal data are transferred to a third country or international organization, the data subject shall have the right to be informed of the existence of appropriate safeguards pursuant to Article 46 relating to the transfer.
3.  The data controller shall provide a copy of the personal data being processed. In case of additional copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the data subject makes the request by electronic means, and unless otherwise specified by the data subject, the information shall be provided in a commonly used electronic format.
4.  The right to obtain a copy referred to in paragraph 3 shall not infringe upon the rights and freedoms of others.

Data Controller