Information on the Processing of Personal Data
Pursuant to Art. 13 of EU Regulation 2016/679 “GDPR”
The Data Controller is Minucoop Società Cooperativa, with registered office at Via Piemonte 2, Due Carrare (PD), 35020, telephone 0495290122, fax 0495290257, e-mail in**@******op.it
PURPOSES OF PROCESSING AND LEGAL BASIS
The Data Controller mainly collects and processes data relating to legal entities; however, for business operations and to facilitate contractual relationships, certain data referring to natural persons (employees, collaborators, etc.) working for the aforementioned legal entities will be processed as necessary for the performance of a contract or pre-contractual measures to manage the contractual relationship, fulfill obligations arising from the contract, handle billing, respond to requests from our clients/suppliers, manage logistics and any complaints, and ensure effective operational management of the business relationship. We also process your data to comply with legal obligations deriving from tax and accounting regulations.
Soft spam
The contact data of acquired customers, with whom at least one product sale has been concluded, may be used for the purpose of sending commercial communications via e-mail relating to similar products (so-called “soft spam”), as provided by Art. 130 of Legislative Decree 196/2003 (so-called “Privacy Code”), and therefore the e-mail address will be included in the mailing list. In this case, data subjects who do not wish to receive such communications may unsubscribe from the mailing list by simply clicking the appropriate link in the footer of each message.
DATA RECIPIENTS AND PROCESSING METHODS
To fulfill the contractual and legal obligations mentioned above, your data will be processed using paper, electronic and telematic tools, in compliance with the principles and provisions of the Regulation, as well as company regulations and policies, by specifically authorized internal personnel. If it is necessary to use an external entity for processing, data will be handled by specifically designated and appointed Data Processors. Additionally, data may be disclosed to the following categories of recipients: public entities and institutions (e.g. Chambers of Commerce, Tax Authorities, other national or local public administrations or public service concessionaires, Revenue Agency, Financial Police and other tax agencies); professional firms for the fulfillment of tax and accounting obligations; IT maintenance and support companies in case of intervention; postal services, couriers and shipping companies. No transfer of personal data is made to a third country or international organization outside the EU.
For the above-mentioned purposes and communications, your prior consent is not required, as the provision and processing of data is necessary for the performance of a contract or the fulfillment of legal obligations. The provision of data is optional but necessary for the correct performance of contractual obligations, as any refusal to provide such data would make it impossible to fulfill the obligations themselves.
DATA RETENTION PERIOD
Personal data processed for the purposes indicated will be retained solely for the duration of the activities covered by the contract and, in any case, not beyond the time limits necessary to ensure the possible defense of the Company’s rights in legal disputes. In any case, data will not be retained beyond the achievement of the intended purposes.
With regard to the sending of informational material, you may at any time choose to stop receiving it by clicking the unsubscribe link in each message or by directly contacting the Data Controller using the contact details provided below.
DATA SUBJECT’S RIGHTS
The data subject has the right, as provided by Articles 15 to 21 and Article 13 of the GDPR, to obtain confirmation as to whether or not personal data concerning them are being processed and, where that is the case, access to the personal data, the rectification of inaccurate data, or the erasure of the same, or the restriction of processing or to object to the processing. Data subjects who believe that the processing of their personal data is in violation of the Regulation have the right to lodge a complaint with the Data Protection Authority or another competent supervisory authority, as provided by Article 77 of the Regulation, or to seek judicial remedy (Article 79 of the Regulation).
Requests to exercise rights may be addressed to the Data Controller.
