Skip to main content

(E) MODEL INFORMATION NOTICE FOR THE PROCESSING OF PERSONAL DATA OF SUPPLIERS
INFORMATION ON THE PROCESSING OF PERSONAL DATA
PURSUANT TO ART. 13 OF THE EUROPEAN REGULATION 679/2016

 

Dear Sir/Madam,
we need to process information about you, your personal data, for the preparation and execution of the supply contract to which you are a party, or intervene as a representative of the supplier, or participate as a contractor; for this purpose, as prescribed by the European legislation for the protection of personal data (European Regulation 679/2016), we provide you with the following information.

1. Data controller

The Data Controller, i.e., the person who is responsible for decisions regarding the purposes, methods and security of personal data, is Sintagma S.r.l., headquartered in 06132 San Martino in Campo (PG), Via Roberta, 1, P.IVA 01701070540, in the person of the legal representative pro tempore.

2. Purpose and legal basis for processing

The personal data that you provide to us and that will be collected in the course of the provision of the services covered by the supply contract will be processed for the purposes and according to the legal bases indicated below:

PURPOSE
(Why we process your data)
LEGAL BASIS.
(On the basis of which provision of the Regulations we treat them)
CONSEQUENCES IN CASE OF REFUSAL TO PROCESS
(What happens if you refuse to provide personal data and/or authorize processing)
Fulfillment of the contract to which you are a party, or in which you represent the legal entity that is a party, or in which you participate as a provider. Art. 6, Par. 1, Lett. b) GDPR - the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject. Consent is not required, however, in the event that you refuse to give personal information, the contract cannot be executed.
For legal requirements related to the Company's participation in public procurement procedures, limited to the data of individuals directly involved in the order. Art. 6, Par. 1, Lett. c) GDPR (processing is necessary to comply with a legal obligation to which the data controller is subject). Consent is not required, in case of your refusal in giving the data it will not be possible to proceed with the employment relationship.
Fulfillment of legal obligations in accounting and tax matters related to the said contract. Art. 6, Par. 1, Lett. c) GDPR - the processing is necessary to comply with a legal obligation to which the data controller is subject. Consent is not required, however, in the event that you refuse to give personal information, the contract cannot be executed.
To assert or defend a right in court (breach of contract, warnings, settlements, debt collection, arbitration, litigation). Art. 6, Par. 1, Lett. f) GDPR - processing is necessary for the pursuit of a legitimate interest of the data controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data are not overridden, in particular if the data subject is a child. Consent is not required; if you refuse to give the data, we will not be able to proceed with the contract.
To respond to requests from Judicial Authorities. Art. 6, Par. 1, Lett. c) GDPR (processing is necessary to comply with a legal obligation to which the data controller is subject). Consent is not required, in case of your refusal in giving the data, the contract cannot be executed.

3. Recipients and categories of data processed

Personal data provided by you or acquired in the course of performance will be processed exclusively by personnel authorized for this purpose or by data processors designated for this purpose. In addition to the subjects towards whom the law mandatorily prescribes communication, your data may be communicated exclusively to:

PURPOSE CATEGORY OF DATA RECIPIENTS
Fulfilments of accounting, administrative, fiscal obligations. Fulfillments related to legal, statutory obligations. Identifiers of contract representatives or contact persons. Professionals and/or companies performing accounting/tax data processing activities.
Protection in case of breach of contract. Identifiers, economic data, contract data. Companies and professionals in charge of any litigation.
To ensure the operation of the enterprise computer system. Identification and contract data in the company's computer system. Companies in charge of the management, support and maintenance of the company's computer network, electronic, computer and/or telematic tools.
Legal obligations related to the Company's participation in public procurement procedures, limited to the data of individuals directly involved in the contract. Identifying, biographical and professional data. Contracting Stations, Public Supervisory Authorities (i.e. ANAC).

4. Transfer abroad.

Your personal data are transferred outside the European Union only if the transfer of your data is necessary for the performance of a contract concluded between the data subject and the Data Controller, or for the performance of pre-contractual measures taken at the request of the data subject; the legal basis is Article 49(1)(b) GDPR.

5. Period of storage of personal data and criteria used

Personal data subject to processing are collected in documents whose retention is established consistent with the purposes of processing as summarized below.

DOCUMENT SHELF LIFE
Contract documents. 10 years from the termination of the contractual relationship unless legitimate cause for suspension.
Administrative, accounting, tax documentation. 10 years from the termination of the contractual relationship unless legitimate cause for suspension.

6. Rights of the data subject

The Regulations give you the following rights, which you may exercise against and in relation to each joint owner. A complete excerpt of the following articles of law is available on the Internet at

A full excerpt of the following articles of law is available on the Internet at http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/6264597.

  • Right of access: Article 15 of the European Regulation allows you to obtain confirmation from the data controller as to whether or not data processing is being carried out on you and if so, to obtain access to that data.
  • Right of rectification: Article 16 of the European Regulation allows you to obtain from the data controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.
  • Right of deletion: Article 17 of the European Regulation allows you to obtain from the data controller the deletion of personal data concerning you without undue delay if one of the grounds provided by the regulation exists.
  • Right of Limitation: Article 18 of the European Regulation allows you to obtain from the data controller the limitation of the processing when one of the hypotheses provided for in the rule occurs.
  • Right to object: Article 21 of the European Regulation allows you to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f), including profiling on the basis of these provisions.
  • Right to portability: Article 20 of the European Regulation allows you to receive in a structured, commonly used and machine-readable format personal data concerning you that you have provided to a data controller and you have the right to transmit such data to another data controller without hindrance from the controller to whom you have provided it in accordance with the conditions set out in the regulation.
  • Right to withdraw consent: Article 7 of the European Regulation allows you to withdraw the consent you have given at any time. Revocation of consent does not affect the lawfulness of the processing based on the consent before revocation.
  • Right to Complaint: Article 77 of the European Regulation, if you believe that the processing concerning you is in violation of the regulation, grants you the right to lodge a complaint with a supervisory authority, namely in the member state in which you habitually reside, work, or of the place where the alleged violation occurred.

7. Further information

More information, our privacy policy and this policy statement are available on our website at www.sintagma-ingegneria.it. A complete abstract of the above-mentioned articles of law is available at the Privacy Office of the Company at Via Roberta, 1, 06132 San Martino in Campo (PG). This office will be able to provide you with any explanations you may need regarding the exercise of your rights; requests may be made in writing, accompanied by a valid identification document, at the office of the owner as indicated above.

8. Collaboration

The protection of the data concerning you and compliance with the principles laid down in the regulations, with particular reference to the principle of transparency, are values of primary importance to us, we would be grateful if you would help us by pointing out any misunderstandings of this document or suggesting improvements at the owner's references as indicated above.

Perugia, 30/06/2021