Data Protection Directive. Legislative Decree n. 196/2003 "for customers and suppliers

This information is provided to customers and suppliers, whether they are natural persons, or natural persons who operate in the name and on behalf of the same legal persons, of Officina Fratelli Bertolotti S.p.A., pursuant to art. 13 and 14 of EU Regulation 2016/679 "European regulation on the protection of personal data".

Purpose of data processing

Personal and fiscal data acquired directly and / or through third parties by the company Officina Fratelli Bertolotti S.p.A. with registered office in Via Milano, 4, 10088 Volpiano (TO) Italy, data controller, are processed in paper, computerized, telematic form for contractual and legal requirements, as well as to allow effective management of commercial relationships, tax compliance, organizational management and bureaucratic fulfillment of the requested services. Management of negotiations and pre-contractual relationships. Management of commercial activities object of the business activity.

Finally, all personal data of the aforementioned interested parties will be entered in the Data Controller's archives and used for sending communications concerning activities relating to our products.

Legal Basis

The legal basis is the execution of a contract between the parties of which the interested party is a party, or the execution of pre-contractual measures adopted at the request of one of the parties.

Data recipients

The personal data processed by the Data Controller will not be disclosed, that is, it will not be disclosed to indeterminate subjects, in any possible form, including that of making them available or simple consultation. Instead, they may be communicated to the Data Controller's workers and to some external subjects who collaborate with them. They may also be communicated, within the strictly necessary limits, to subjects who, for the purpose of issuing orders, processing purchases, requests for information and quotes, supplies of goods, execution on our behalf of services and services or other requests relating to the transaction or to the contractual relationship with the Data Controller. Finally, they may be communicated to subjects entitled to access it by virtue of the provisions of the law, regulations, community regulations.

In particular, on the basis of the roles and work tasks performed, some workers have been entitled to process personal data, within the limits of their competences and in accordance with the instructions given to them by the Data Controller.

The data may be disclosed in Italy and / or abroad to:

• credit institutions;
• credit recovery company;
• credit insurance company;
• professionals and consultants;
• companies operating in the transport sector;

exclusively for the purposes indicated above and, consequently, processed only for those purposes.

For the same purposes, the following categories of persons in charge and / or company managers may become aware of the data:

• members of statutory administrative, control and management bodies;
• people in charge of the Integrated Management System (SdG);
• people in charge of the administrative area;
• production area structure coordinators;
• people in charge of the Quality Control, testing and laboratory area, technical office;
• people in charge of the management and maintenance of electronic instruments (telephones, computers, etc ...);
• people in charge of the purchasing area;
• people in charge of the tenders and contracts area;
• system administrators;
• people in charge of the commercial area.

Data Transfer

The Data Controller does not transfer personal data to third countries or to international organizations. However, it reserves the right to use cloud services, in which case, the service providers will be selected from those who provide adequate guarantees, as required by art. 46 EU Regulation 679/2016.

Data retention

The Data Controller keeps and processes personal data for the time necessary to fulfil the purposes indicated. Subsequently, the personal data will be stored, and not further processed, for the time established by the current civil and tax provisions.

Rights of the interested party

With reference to articles 15 - right of access, 16 - right of rectification, 17 - right to cancellation, 18 - right to limitation of processing, 20 - right to portability, 21 - right of opposition, 22 - right of opposition to the automated decision-making process of the EU Regulation 2016/679, the interested party exercises his rights by writing to the Data Controller at the above address, or by email, specifying the subject of his request, the right he intends to exercise and attaching a photocopy of an identity document certifying the legitimacy of the request.

Failure to provide data, where not mandatory, will be evaluated from time to time by the data controller company and will determine the resulting decisions related to the importance of the data requested with respect to the management of the business relationship.

The interested party may exercise all the rights referred to in art. 7 of legislative decree n. 196/2003 (including the rights of access, rectification, updating, opposition to processing and cancellation).

Revocation of the consent

With reference to art. 6 of EU Regulation 2016/679, the interested party can revoke any consent given at any time.

However, the processing covered by this information is lawful and permitted, even in the absence of consent, as it is necessary for the execution of a contract to which the interested party is a party (the relationship of supply of products and services).

Last modified: June 13, 2018