pursuant to Article 13 of the Code regarding the protection of personal da (Legislative Decree No. 196/2003) and of the art. 13 of EU Regulation 679/2016

CREAZIONI FUTURA SRL, as Data Controller, pursuant to and for the purposes of art. 13 of Legislative Decree 30 June 2003, n. 196 (Privacy Code), as well as art. 13 of EU Regulation 679/2016 (GDPR), and subsequent amendments and additions, collects and subsequently processes personal data of its Customers and Suppliers.

1. Purposes and methods of processing.

The personal data of the interested party are processed within the normal activity of the Data Controller, for the pursuit of the following purposes:

1. correct and complete execution of the obligations of the contractual relationship established (hereinafter, the “Contract“);
2. administrative and accounting requirements strictly connected to the Contract;
3. fulfillment of specific obligations provided for by law, by a regulation or by EU legislation (for example, those provided for in the matter of “anti-money laundering”);
4. updating of the interested party on promotional and marketing initiatives, also by sending advertising and / or promotional material (for example, newsletters), through automated tools and / or traditional methods of contact.

The processing of personal data takes place, under the authority of the Data Controller, by subjects specifically appointed, authorized and trained in processing pursuant to art. 30 of the Privacy Code and of the art. 29 of the Privacy Regulations, using manual, IT or telematic tools, with logic strictly related to the purposes and in any case in order to guarantee the confidentiality and security of personal data. The processing of personal data may also take place, on behalf of the Data Controller, by data processors specifically designated pursuant to art. 29 of the Privacy Code and of the art. 28 of the privacy regulation.

Personal data will be stored for a specific period based on criteria based on the nature and duration of the Contract and on the needs to protect the interests of the Interested Party.

2. Legal basis of the processing, nature of the provision and consequences of a possible refusal, consent of the interested party.

2.1) Purposes referred to in the previous paragraph 1, points 1., 2. and 3.

With reference to the purposes referred to in paragraph 1, points 1., 2. and 3., the provision of personal data is mandatory and is a necessary requirement for the execution of the Contract; in fact, the failure to provide data determines the impossibility of receiving the service object of the Contract itself and, therefore, the legal basis of the relative treatment is the correct execution and management of the Contract.

2.2) Purpose referred to in the previous paragraph 1, point 4.

With reference to the purposes referred to in paragraph 1, paragraph 4., provision is optional and failure to provide the relative consent only determines the impossibility of receiving updates on promotional and marketing initiatives, also by sending advertising material and / or promotional (for example, newsletters).

3. Subjects or categories of subjects to whom the personal data can be communicated and scope of communication.

In relation to the purposes of the processing indicated above, and within the limits strictly pertinent to the same, the personal data of the Data Subject will be or may be communicated to the following categories of subjects:

(I) to the tax authorities and other public authorities, where required by law or at their request;

(II) credit institutions for payment orders or other financial activities instrumental to the execution of the Contract;

(III) to the external structures and / or companies used by the Data Controller, in charge of carrying out related activities, instrumental or consequent to the execution of the Contract

(IV) to external consultants (for example, for the management of tax obligations), if not designated in writing Responsible for processing;

(V) to external parties that carry out control activities, such as independent auditors, board of auditors, supervisory body;

(VI) to factoring companies and / or specialized companies or law firms for debt collection and / or for the protection of their interests / rights;

The aforementioned subjects, to whom the personal data of the Data Subject will be or may be communicated (as they are not designated in writing as Data Processors), will process the personal data as Data Controllers pursuant to the Privacy Code and the Privacy Regulation, in full autonomy, being extraneous to the original treatment performed by the Owner.

The updated list of the subjects indicated and of the Data Processors can be provided upon request by the interested party.

The data of the interested party will not be disseminated.

If this is necessary for the performance of the Contract, the personal data of the Interested Party may be transferred to countries belonging to the EU and / or to countries outside the EU, in full compliance with the provisions of the Privacy Code, the Privacy Regulation, the provisions and by the decisions of the Privacy Guarantor on the subject, as well as by the community legislation. In particular, the Owner undertakes to comply with the provisions set forth, respectively, by Decisions 2001/497 / CE, 2004/915 / CE and 2010/87 / EU (depending on the case in question), which require the signing of CDs. “Standard contractual clauses” between legal entities involved in the processing of non-EU data.

4. Rights of the interested party.

Article. 7 of the Privacy Code and Articles 15 and ss. of the privacy regulations give the interested party the right to obtain:

• confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form;
• the indication of the origin of the personal data, of the purposes and methods of the processing, of the logic applied in case of treatment carried out with the aid of electronic instruments, of the identification details of the owner;
• updating, rectification, integration, deletion, transformation into anonymous form or blocking of data processed in violation of the law (including those for which conservation is not necessary in relation to the purposes for which the data is collected or subsequently processed). The attestation that these operations have been brought to the attention of those to whom the data have been communicated or disseminated (also as regards their content), except in the case where such fulfillment proves impossible or involves a manifestly disproportionate use of means with respect to the protected right.

The interested party also has the right:

– to revoke at any time the consent given for the processing of personal data, where envisaged (without prejudice to the lawfulness of the processing based on the consent given before the revocation);

– to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;

– to object, in whole or in part to the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication;

– to make a complaint to the Guarantor for the protection of personal data in the cases provided for by the Privacy Regulation;

– to the portability of personal data within the limits set by art. 20 of the privacy regulations.

To know the detailed and constantly updated list of the subjects to whom the personal data of the interested party may be communicated and to exercise the rights referred to in art. 7 of the Privacy Code and Articles 15 and ss. of the Privacy Policy, the same may contact the Data Controller:

CREAZIONI FUTURA SRL

VIA IV NOVEMBRE – 36077 – ALTAVILLA VICENTINA (VI) – Tel: +39 0444348282 – E.mail: info@creazionifutura.it