Privacy policy pursuant to the Regulation EU 2016/679 of the European Parliament and of the Council
(on the protection of individuals with regard to the processing of personal data)
The company AUTOELETTRIC S.r.l. – SOCIETA’ UNIPERSONALE (c.f./p.iva 01650120247) with registered office in Via Dell’Impresa n.9 – 36040 Brendola (VI), as holder of the data processing (hereinafter “Autoelettric” and/or ” Holder of the Data Processing “) as defined in the applicable law, intends to inform it pursuant to art. 13 of EU Regulation 2016/679 (hereinafter for brevity “Regulation“) to assume the title of holder of personal data that will be provided by you and that will proceed with the related processing for the purposes and in the manner indicated below.
1. Purpose and legal basis of processing which do not require the data subject’s consent
Your data will be processed exclusively for the following purposes for which your consent is not required:
a) execution of the contract;
b) compliance with legal obligations (including tax and accounting obligations);
c) customer management;
d) use/provide the service and/or fulfil contractual obligations arising from the existing relationships with the data subject;
e) to assert or defend a legal right related to the establishment, execution and termination of the contractual relationship between the parties.
Should you provide personal data of third parties (therefore not directly related to you) to Autoelettric, you are the independent Holder of the Data Processing, assuming all the obligations and responsibilities of the law. In this sense, you confer on the point the widest indemnity with respect to any claim, claim, claim for compensation for the damage from treatment, etc. that should reach Autoelettric from third parties whose personal data have been processed through your spontaneous sending in violation of the applicable data protection rules.
In any case, if you provide or otherwise process personal data of third parties, you guarantee right now – assuming any related responsibility – that this particular processing hypothesis is based on an appropriate legal basis pursuant to art. 6 of the Regulation that legitimizes the processing of the information in question.
The treatment referred to in higher letters a), b), c), d) and e) is necessary for the provision of the service requested by the user with the consequence that Autoelettric is not obliged to acquire specific consent to the processing of data as the legal basis for the processing of your personal data for the purposes indicated above are the following:
– art. 6(1)(b) of the Regulation (“[…] the processing is necessary for the execution of a contract to which the interested party is party or for the execution of pre-contractual measures taken at the request of the same“);
– art. 6(1)(c) of the Regulation (“[…] the processing is necessary to fulfil a legal obligation to which the Holder of the Data Processing is subject“).
– art. 6(1)(f) of the Regulation (“[…] “the processing is necessary for the pursuit of the legitimate interests of the data controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data are not overridden, particularly if the data subject is a child”).
2. Purpose and legal basis of the processing that requires the data subject’s consent
Subject to your consent, your personal data (spontaneously provided or collected through the site cookies) may be processed by Autoelettric for the following purposes:
– marketing by sending commercial and/or promotional communications, by e-mail, of Autoelettric products.
It is understood that the processing of data for this purpose will be possible only with your consent, pursuant to article 6(1)(a) of the Regulation (“the data subject has given his consent to the processing of his personal data for one or more specific purposes”).
The consent can be revoked at any time freely in the ways indicated in this email or through the cancellation link available in each electronic communication. Failure to grant or revoke consent in no way affects the performance of the contract.
3. Any recipients of personal data or categories of recipients of personal data
Your personal data may be communicated, to the extent necessary, to other parties, including:
1) authorized personnel, properly trained and trained by the Holder of the Data Processing, who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality;
2) the staff of third parties who provide services to the Holder of the Data Processing who carry out data processing on behalf of and on instructions from the latter as Holder of the Data Processing, including:
– firms providing assistance, advice or cooperation in accounting, administrative and legal matters; with regard to which a contract has been concluded pursuant to and for the purposes of Article 28 of the Regulation;
– third-party companies involved in the management of marketing campaigns with which a contract has been concluded pursuant to Article 28 of the Regulation.
In any case, your personal data may be disclosed to courts in the exercise of their functions when required by applicable law.
4. Data transfer to third countries
Your data will only be transferred within the European Union.
Autoelettric ensures that the electronic and paper processing of your personal data by the recipients takes place, in addition to complying with current legislation, also in accordance with the principles set out in Articles 45 and 46 of the GDPR.
5. Data retention period
Your personal data will be stored for the period of time strictly necessary for the pursuit of the specific purposes of processing for which the user has given his consent and, specifically:
– for the purposes indicated in letter a), b), c), d) and e) of point 1 above for the time necessary for the fulfilment of contractual obligations and, in any case, and, in any event, no later than 10 years after the termination of the contractual relationship;
– for the purposes indicated in the point 2 above (for marketing purposes), for 24 (twenty-four) months from the moment of granting consent to processing.
6. Obligation to provide personal data
Autoelettric specifies that the communication of data for the purposes referred to in the upper point 1 letter. a), b), c), d) ed e), comes from a legal obligation and/or necessary for the conclusion of the contract and that in case of failure to communicate Autoelettric will not be able to proceed with the execution of the contract.
As regards the data communicated for the purposes referred to point 2 above (marketing purposes), it is specified that the communication is optional and that Autoelettric will be authorized for processing only after obtaining the consent given by the data subject.
7. Rights of the data subject
Pursuant to articles 15 and following of the Regulation, you have the right to ask Autoelettric, at any time, access to his personal data, the rectification or cancellation of the same or to oppose their processing in the cases provided by art. 21 of the regulation. Besides, you are entitled to demand the limitation of the treatment in the cases previewed from art. 18 of the regulation, as well as to obtain in a structured format, commonly used and machine-readable data concerning you, in the cases provided for by art. 20 of the Regulation.
For this reason, Autoelettric makes available, on its website, the model to be able to submit the request.
The aforementioned rights can be exercised by sending a specific request (also using this model) to the following e-mail address: amministrazione@autoelettric.com
Requests relating to the exercise of your rights will be processed without undue delay and, in any case, within one month of the application; in cases of particular complexity this deadline can be extended by a further 2 (two) months.
In any case, you always have the right to lodge a complaint with the competent supervisory authority (guarantor for the protection of personal data), pursuant to art. 77 of the Regulation, if it considers that the processing of its personal data is contrary to the legislation in force.