Information on personal data processing in compliance with articles 13-14 of General Data Protection Regulation EU 2016/679

Interested subjects: customers

CASEIFICIO PUGLIESE FRATELLI RADICCI S.P.A. as Controller of the processing of your personal data, pursuant to and by effect of Regulation EU 2016/679 hereinafter GDPR, herewith gives you notice that the aforementioned legislation provides for the protection of the interested subjects as for the processing of personal data and that this processing will be based on principles of fairness, legality, transparency and protection of your privacy and rights.

Your personal data will be treated in compliance with the regulations of the aforementioned law and the obligations of confidentiality therein.

Purpose and legal basis of processing:

In particular your data will be processed for the following purposes connected to the fulfilment of legislative or contractual obligations:

  • Performance of the existing contractual relationship and pre- and post-contractual activities (legal basis: performance of a contract)
  • Submit requests and process received requests (legal basis: performance of a contract)
  • Statutory duties in the field of taxation and accounting (legal basis: legal obligation)
  • Execution of obligations under laws and regulations (legal basis: legal obligation)
  • Soft marketing activities and sending of offers, technical, informative, commercial material or freesamples (legal basis: performance of a contract and legitimate interest)
  • Management of payments (legal basis: performance of a contract)
  • Verification of solvency (legal basis: legitimate interest)
  • Possible handling of complaints (legal basis: performance of a contract)The processing of functional data for the fulfilment of these obligations is necessary for the proper management of the relationship and their provision is mandatory to implement the above stated purposes. The Data Controller also makes it known that any non-communication or incorrect communication of one of the mandatory information may cause the Data Controller to be unable to guarantee the appropriateness of the processing.Mode of processing: Your personal data may be processed in the following ways: processing using electronic computersmanual processing using paper archives

    Each treatment is carried out in accordance with the procedures laid down in articles 6, 32 of GDPR and through the adoption of the appropriate security measures.

    Communication: Your data may be communicated exclusively to public bodies and offices to which tax data must be communicated (income revenue authority, Municipalities, Regions, Province, Chambers of Commerce, I.N.P.S., I.N.A.I.L. and similar); where necessary for the execution of the services requested, to competent and duly appointed subjects responsible for the performance of the services necessary for the proper management of the relationship, with a guarantee of protection of the rights of the data subject.

    Your data will be processed only by personnel expressly authorized by the Data Controller. Dissemination: Your personal data will in no case be subject to dissemination.

Period of Retention: Please note that, in accordance with the principles of lawfulness, purpose limitation and data minimisation, according to article 5 GDPR, the retention period of your personal data is:

– 10 years in compliance with the obligations related to the retention of the accounting records (article 2220 Civil Code that provides for the retention for 10 years of the accounting records; article 22 of D.P.R. 29 September 1973, no.600)
– 5 years from the date of termination of the contract (article 2948 Civil Code providing for a 5-year prescription period) for contract data

– Until the stated purpose is achieved as for other data
Data Controller: the Data Controller, according to the Law, is CASEIFICIO PUGLIESE FRATELLI RADICCI

S.P.A.

You have the right to obtain from the Data Controller cancellation (right to be forgotten), limitation, updating, correction, portability, opposition to the processing of personal data concerning you, and in general you may exercise all the rights provided for in articles 15, 16, 17, 18, 19, 20, 21, 22 GDPR.
You can exercise your rights by sending an email to privacy@caseificiopugliese.com.

In addition, if the data subject considers that the processing of their data is contrary to the law in force, they may lodge a complaint with the Supervisory Authority for the protection of personal data pursuant to article 77 of Regulation 2016/679.

Regulation EU 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Right of the data subject

  1. The data subject has the right to obtain confirmation of the existence or otherwise of personal data, even if not yet registered, concerning them and their communication in intelligible form.
  2. The data subject shall have the right to obtain the indication of the following:
    1. origin of personal data;
    2. purposes and modalities of processing;
    3. logic applied in the case of processing using electronic means;
    4. identification details of the Data Controller, the managers and the representative appointed

    pursuant to article 5, paragraph 2;

e. the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as a designated representative in the territory of the State, subjects responsible for or entrusted with.

3. The data subject shall have the right to obtain:

  1. updating, rectification or, where relevant for them, data integration;
  2. deletion, transformation into an anonymous mode or blocking of data processed in violation of

the law, including data for which storage is not necessary in relation to the purposes for which they were collected or subsequently processed;
c. attesting that the operations referred to in letters a) and b) have been brought to the attention, including as regards their content, of those to whom the data have been communicated or given out to, excepting if this fulfilment proves impossible or involves the use of means which are manifestly disproportionate to the protected right;
d. data portability.

4. The data subject shall have the right to object, in whole or in part:

a. for legitimate reasons to the processing of personal data concerning them, although relevant to the purpose of the collection;
b. to the processing of personal data concerning them for the purpose of sending advertising material or for direct sale or for carrying out market research or commercial communication.

 

Interested subjects: suppliers

CASEIFICIO PUGLIESE FRATELLI RADICCI S.P.A. as Controller of the processing of your personal data, pursuant to and by effect of Regulation EU 2016/679 hereinafter GDPR, herewith gives you notice that the aforementioned legislation provides for the protection of the interested subjects as for the processing of personal data and that this processing will be based on principles of fairness, legality, transparency and protection of your privacy and rights.

Your personal data will be treated in compliance with the regulations of the aforementioned law and the obligations of confidentiality therein.

Purpose and legal basis of processing:

In particular your data will be processed for the following purposes connected to the fulfilment of legislative or contractual obligations:

  • Performance of the existing contractual relationship and pre- and post-contractual activities (legal basis: performance of a contract)
  • Submit requests and process received requests (legal basis: performance of a contract)
  • Statutory duties in the field of taxation and accounting (legal basis: legal obligation)
  • Execution of obligations under laws and regulations (legal basis: legal obligation)The processing of functional data for the fulfilment of these obligations is necessary for the proper management of the relationship and their provision is mandatory to implement the above stated purposes. The Data Controller also makes it known that any non-communication or incorrect communication of one of the mandatory information may cause the Data Controller to be unable to guarantee the appropriateness of the processing.Mode of processing: Your personal data may be processed in the following ways:
  •   processing using electronic computers
  •   manual processing using paper archives
    Each treatment is carried out in accordance with the procedures laid down in articles 6, 32 of GDPR and

through the adoption of the appropriate security measures.

Communication: Your data may be communicated exclusively to public bodies and offices to which tax data must be communicated (including, but not limited to, income revenue authority, Municipalities, Regions, Province, Chambers of Commerce); where necessary for the execution of the services requested, to competent and duly appointed subjects responsible for the performance of the services necessary for the proper management of the relationship, with a guarantee of protection of the rights of the data subject.

Your data will be processed only by personnel expressly authorized by the Data Controller. Dissemination: Your personal data will in no case be subject to dissemination.

Period of Retention: Please note that, in accordance with the principles of lawfulness, purpose limitation and data minimisation, according to article 5 GDPR, the retention period of your personal data is:

– 10 years in compliance with the obligations related to the retention of the accounting records (article 2220 Civil Code that provides for the retention for 10 years of the accounting records; article 22 of D.P.R. 29 September 1973, no.600)
– 5 years from the date of termination of the contract (article 2948 Civil Code providing for a 5-year prescription period)

Data Controller: the Data Controller, according to the Law, is CASEIFICIO PUGLIESE FRATELLI RADICCI S.P.A.

You have the right to obtain from the Data Controller cancellation (right to be forgotten), limitation, updating, correction, portability, opposition to the processing of personal data concerning you, and in general you may exercise all the rights provided for in articles 15, 16, 17, 18, 19, 20, 21, 22 GDPR.
You can exercise your rights by sending an email to privacy@caseificiopugliese.com.

In addition, if the data subject considers that the processing of their data is contrary to the law in force, they may lodge a complaint with the Supervisory Authority for the protection of personal data pursuant to article 77 of Regulation 2016/679.

Regulation EU 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Right of the data subject

  1. The data subject has the right to obtain confirmation of the existence or otherwise of personal data, even if not yet registered, concerning them and their communication in intelligible form.
  2. The data subject shall have the right to obtain the indication of the following:
    1. origin of personal data;
    2. purposes and modalities of processing;
    3. logic applied in the case of processing using electronic means;
    4. identification details of the Data Controller, the managers and the representative appointed

    pursuant to article 5, paragraph 2;

e. the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as a designated representative in the territory of the State, subjects responsible for or entrusted with.

3. The data subject shall have the right to obtain:

  1. updating, rectification or, where relevant for them, data integration;
  2. deletion, transformation into an anonymous mode or blocking of data processed in violation of

the law, including data for which storage is not necessary in relation to the purposes for which they were collected or subsequently processed;
c. attesting that the operations referred to in letters a) and b) have been brought to the attention, including as regards their content, of those to whom the data have been communicated or given out to, excepting if this fulfilment proves impossible or involves the use of means which are manifestly disproportionate to the protected right;
d. data portability.

4. The data subject shall have the right to object, in whole or in part:

a. for legitimate reasons to the processing of personal data concerning them, although relevant to the purpose of the collection;
b. to the processing of personal data concerning them for the purpose of sending advertising material or for direct sale or for carrying out market research or commercial communication.

Lauriano (TO), 30th April 2019