Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
1 Identity and contact details of the Data Controller
The Data Controller (pursuant to art. 24 of Regulation EU 2016/679 – hereinafter “GDPR” – being the subject that determines the purpose and means of processing) is PARMA CLIMA SRL, whose contact information is:
headquarters Via Gaetano Scirea n. 2 ZIP 43122 Parma
tel. +390521 788511
email address: info@parmaclima.it
2 The purpose and legal basis (consent, pre-contract obligation, legal obligation, legitimate interest, etc.)
The personal data subject of processing are used for the following purposes:
a) respond to specific requests;
b) comply with legal and/or regulatory obligations with regard to administrative, tax and accounting obligations;
c) comply with pre-contractual, contractual and tax obligations with regard to the signing and/or execution of contracts you are a Party of;
d) promotional, commercial and marketing activities, sending of advertising, information, promotional materials on new new products/services by PARMA CLIMA via ordinary mail, telephone, SMS, electronic mail, fax and/or attachment to invoice.
The provision of data and consent to their processing for the purposes specified under letters a), b), c) are necessary with regard to the performance of the contract you are a Party of or to the pre-contractual measures implemented upon your request; failure to provide consent will make it impossible to provide the requested products/services.
Consent to personal data processing as per letter d) is optional and any refusal does not prejudice the provision of the requested products/services.
3 Categories of recipients
With regard to the above specified purposes, personal data can be notified to recipients who collaborate with the Data Controller and in order to perform any legal obligations. These recipients are obliged to keep any information they may learn strictly confidential; such information being, by way of example, of the following categories:
– Authorities, public administrations and supervisory bodies and control for official purposes.
– Parties who cooperate with the Data Controller to achieve the purpose specified above.
– Parties that provide information system management services of the Data Controller.
– Professionals authorised for the study and for solving any legal and contract issues.
– Consultants, consultancy companies and professional firms (experts of corporate organisation, payroll processing companies, accountants, etc…).
– Banks or similar organisations.
4 Transfer outside the EU
The Data Controller does not transfer data to third countries; however, it reserves the right to use services in cloud, and in this case the providers of services will be selected amongst those who provide appropriate guarantees as established by art. 46 of GDPR 679/16.
5 Data retention period or criteria to establish it
The Controller shall process personal data for the time required to achieve the above specified purpose; personal data shall be processed and stored both in analogue and digital form by duly informed and authorised staff and by duly appointed managers, and anyway for not longer than 10 years from the termination of the relationship.
6 Rights of the data subject
With regard to personal data processing, it is notified that to ensure proper and transparent processing, the following rights can be exercised:
right to be informed and right to access (pursuant to art. 15 GDPR), with the purpose of obtaining from the Data Controller information on the existence of data processing concerning you, as well as access to your personal data and to information on the processing purposes, recipients or categories of recipients which data are forwarded to.
Right of rectification (pursuant to art. 16 GDPR), erasure (pursuant to art. 17 GDPR) and restriction (pursuant to art. 18 GDPR) with the purpose of requesting the Data Controller to rectify and erase one’s personal data and the processing restriction.
Right to data portability (pursuant to art. 20 GDPR) to receive personal data provided to the Data Controller in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another Controller, upon condition that such operation is technically feasible.
Right to object (pursuant to art. 21) to data processing.
You can exercise your rights at any time, writing to:
PARMA CLIMA SRL, Via Gaetano Scirea n. 2 43122 Parma
or to the following e-mail address: info@parmaclima.it
7 Right to consent withdrawal
With regard to art. 6 of GDPR 679/16, as data subject you can withdraw consent at any time. Following withdrawal, neither the proper performance of the services dealt with in the agreement, nor the continuation of the contractual relations can be granted, where personal data processing depends exclusively on giving consent.
8 Right to lodge a complaint with the Data Protection Authority
As data subject, you have the right to lodge a complaint with the Data Protection Authority of the country of residence.
9 Mandatory provision of data and consequences in case of failure to give consent
For the purposes under letters a), b) and c) of this Privacy policy, giving consent is necessary to perform the services provided by the Data Controller and any refusal to give consent will make providing the services impossible.
Consent to personal data processing as per letter d) is optional and any refusal does not prejudice the provision of the requested products/services.
10 Existence of an automated or profiling decision-making process and logic involved
No automated or profiling decision-making processes are used.