Personal data processing
(pursuant to articles 13 and 14 of Regulation 2016/679/EU)

HABITO S.r.l. as Data Controller pursuant to and for the purposes of the European Regulation 2016/679/EU (hereinafter referred to as the "Regulation"), hereby inform you that the processing of personal data will be based on principles of correctness, lawfulness, transparency and protection of confidentiality and the rights of the interested parties.

Personal data will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligations set forth therein.

 

Processing purposes: in particular, the data will be processed for the following purposes related to the implementation of obligations relating to legislative and/or contractual obligations set out below

• Compulsory obligations by law in the tax and accounting field;

• Management of customers and suppliers;

• Management of relationships during purchase or sale operations;

• Litigation management and credit recovery;

• Quality Management;

• Planning of activities;

• History of supplies and sales;

The processing of functional data for the fulfillment of legislative and regulatory obligations is necessary for the correct management of the relationship. The Data Controller also informs that any non-communication, or incorrect communication, of one of the mandatory information, may cause the Data Controller to be unable to guarantee the adequacy of the treatment itself.

 

Processing methods: personal data may be processed in the following ways

• Assignment of processing operations to third parties;

• Treatment by means of electronic instruments;

• Manual treatment by means of paper archives.

Each treatment takes place in compliance with the methods set out in the articles. 6, 32 of the Regulation and through the adoption of the adequate security measures envisaged.

The data will be processed only by personnel expressly authorized by the Data Controller, or by third parties expressly appointed as Responsible for the processing of their competence pursuant to Art. 29 of the regulation.

 

Communication: the data will be communicated exclusively to competent and duly appointed subjects for the performance of the services necessary for a correct management of the relationship, with a guarantee of protection of the rights of the interested party

• Consultants and freelance professionals, also in associated form;

• Banks and credit institutions;

• Public and/or private subjects for whom the communication of data is mandatory or necessary for the fulfillment of legal obligations or is in any case functional to the administration of the relationship;

• Forwarders, Carriers, Post Offices, Logistics Companies and similar.

 

Retention period: it should be noted that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Art. 5 of the GDPR, the data retention period is equal to a period of time not exceeding the achievement of the purposes for which they are collected and processed for the execution and fulfillment of the contractual purposes, subject to compliance with the mandatory times prescribed from Law.

 

Dissemination: there will be no by HABITO S.r.l. any disclosure of personal data except exclusively as regards the use of photographic reports of the works carried out which may be published on the website of the same. The data may also be stored at Internet Providers that provide hosting and e-mail services, located within the European Union.

The interested party has the right to obtain from the Data Controller the cancellation, communication, updating, rectification, integration of personal data concerning him, and in general can exercise all the rights provided for by the articles. From 15 to 22 of the Regulation indicated below.

 

 

EUROPEAN REGULATION 2016/679/EU

Article 15 – Right of access of the interested party

1. The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information:

• Purpose of the treatment;

• Categories of data in question;

• Recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients from third countries or international organisations;

• Whenever possible, the envisaged retention period of personal data or, if this is not possible, the criteria used to determine this period;

• Existence of the right of the interested party to ask the data controller to rectify or cancel personal data or limit the processing of personal data concerning him or to oppose their treatment;

• Right to lodge a complaint with a supervisory authority;

• If the data is not collected from the interested party, all the available informations on their origin;

• The existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and envisaged consequences of such processing for the interested party.

 

1. If personal data are transferred to a third country or to an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to article 46 relating to the transfer.

 

1. The data controller provides a copy of the personal data being processed. In case of further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.

 

1. The right to obtain a copy referred to in paragraph 3 must not prejudice the rights and freedoms of others.

 

1. For the information of the interested party, the other articles of the Regulation on the exercise of one's rights are listed, which the Data Controller is required to apply in the processing of personal data.

 

Article 16 - Right of rectification

Article 17 - Right to cancellation ("right to be forgotten")

Article 18 - Right to limit treatment

Article 19 - Obligation to notify in the event of rectification or cancellation of personal data or limitation of treatment

Article 20 - Right to data portability

Article 21 - Right to object

Article 22 - Automated decision-making process relating to natural persons, including profiling.

 

To exercise the rights guaranteed by the aforementioned articles, the interested party should contact: habitocostruzionigenerali@pec.it