NOTICE ON PERSONAL DATA PROCESSING

In compliance with the provisions of EU Reg.  2016/679 (European Regulation for the protection of personal data), we provide you with the necessary information regarding the processing of personal data provided. 

This is a notice provided pursuant to art. 13 of the EU Reg.  2016/679 (European regulation for the protection of personal data).

The notice is intended to allow you to know, before giving your data, how ACMI SpA processes your personal data.

1. DATA CONTROLLER

Data Controller of personal data is

ACMI SpA with registered office in Via G. Di Vittorio no. 60, 43045, Fornovo di Taro (PR)

Email: info@acmispa.com

Tel.  0039 0525 401811

2.  PURPOSES AND MODALITIES OF THE PROCESSING

Personal data provided will be processed in compliance with the conditions of lawfulness, correctness and transparency provided by the regulation EU Reg.  2016/679.

The personal data requested in the contact form are collected by ACMI SPA in order to:

- send replies to requests for information and assistance sent by users and provide information on the company’s goods and services: the legal basis is the performance of a pre-contractual obligation and the performance of a service upon request of the interested party (Art. 6, para. 1, letter b) of the GDPR);

- improve the content of the site: the legal basis is the legitimate interest of the holder in ensuring constant functioning of the site (Art. 6, para. 1, letter f) of the GDPR);

- send commercial communications to potential customers and customers who show an interest in the services and products of ACMI SpA: the legal basis is the consent of customers and potential customers (Art. 6, para. 1, letter a) of the GDPR).

The personal data collected will be processed in a predominantly automated manner, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed for this purpose.

The data will be processed for the purpose indicated and for the time necessary to achieve the purpose for which they were collected.

3. NATURE OF DATA AND THEIR PROVISION

Provision of data is optional. However, failure to enter data will not allow ACMI SPA to execute the requested service.

4. COMMUNICATION AND DISCLOSURE OF DATA

 Personal data may be disclosed to third parties who will process data as data processors (article 28 of the EU Reg.  2016/679) and/or as individuals acting under the authority of the Data Controller and the Data Processor (article 29 of the EU Reg.  2016/679), for the purposes specified above.

Data may be disclosed to:

- companies of the Group of companies to which ACMI SpA belongs;

- to the sales/distribution network on the territory;

- subjects that provide services for the management of the Website and the information system;

- firms or companies during assistance and consultancy relationships;

- competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request.

The subjects belonging to the aforementioned categories play the role of Data Processors or work in complete autonomy as separate Data Controllers. As part of this relationship, the company undertakes to process such data in compliance with the compliance requirements established by the GDPR, guaranteeing any communication to these additional subjects exclusively in the context of specific legal obligations.

The updated list of Data processors can be requested by writing to

info@acmispa.com or the contact details specified in point 1 of this notice.

Personal data provided will not be disclosed in any way.

5. DATA TRANSFER TO THIRD COUNTRIES

Within the scope of purposes indicated in this notice, personal data collected may be communicated/transferred to third parties located in countries belonging to the European Union or in extra EU countries, in compliance with the provisions of the regulation, Article 44 - General principle for transfer; Article 45 - Transfer based on an adequacy decision; Article 46 - Transfer subject to adequate guarantees.

The data subject can obtain information about the guarantees for the transfer by writing to info@acmispa.com

6. DATA RETENTION PERIOD

In compliance with the provisions of Art. 5, para. 1, letter e) of EU Reg 2016/679, the personal data collected will be stored in a form that allows the identification of the interested parties for a period of time not exceeding the achievement of the purposes for which the personal data are processed and, in any case, no later than 12 months after processing the request. With regard to data collected for purposes of commercial communications, the data will not be kept longer than 24 months after their collection, except in the case in which the interested party objects to the processing before the end of this period.

Consent to the processing of personal data provided by the interested party may be revoked at any time by writing to info@acmispa.com, if the processing is based on consent.

7. RIGHTS OF THE DATA SUBJECTS

Data subjects have the right to exercise their rights as provided for in the EU Regulation 2016/679, by sending an e-mail to info@acmispa.com. or by addressing to the registered office of the Data Controller indicated above.

Data subjects have the following rights:

- The right, at any time, to ask the Data Controller to access their personal data (article 15), to correct (article 16) or to delete (article 17) them, or to limit their processing (article 18) or to object to their processing based on the legitimate interest (article 21).

- The right to withdraw consent: if the processing is based on consent, data subjects have the right to withdraw their consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal.

- The right to file a claim with a supervisory authority.

To object to the processing and to exercise the other rights, the data subjects may contact the Data Controller at the address: info@acmispa.com

Last update 01.07.2024

INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR CUSTOMERS AND SUPPLIERS

Customers / suppliers and their contact persons (hereinafter “interested parties”, pursuant to Article 4, paragraph 1 of the GDPR) are hereby informed that the professional relationships established with the undersigned data holder may involve the processing of personal data, in compliance with the following principles of a general nature:

- all data are processed in a lawful, correct and transparent manner in relation to the interested party, in compliance with the general principles set out in Article 5 of the GDPR;

- specific security measures are observed to prevent loss of data, illicit or incorrect use and unauthorised access;

- the data holder is the undersigned company: ACMI SpA, Via G. di Vittorio 60, 43045 Fornovo di Taro (PR), Tel. 0525 401811, e-mail: info@acmispa.com

1. OBJECT OF DATA PROCESSING

The data holder processes the personal identification data of the customer / supplier (for example: name, surname, company name, personal / fiscal data, address, telephone, email, bank and payment details) and of their operational contact persons (name, surname and contact data) acquired and used in the context of the supply of products.

2.  PURPOSE AND LEGAL BASIS OF DATA PROCESSING

The data are processed for the following purposes:

- to conclude contractual / professional relationships. The legal basis is the execution of a contract, of which the customer / supplier is a party, or the performance of pre-contractual measures taken at their request (GDPR - Article 6, paragraph 1, letter b);

- to fulfill the pre-contractual, contractual and fiscal obligations deriving from existing relationships, as well as managing the necessary communications connected to them. The legal basis is the execution of a contract, of which the customer / supplier is a party, or the performance of pre-contractual measures taken at their request (GDPR - Article 6, paragraph 1, letter b);

- to fulfill the obligations established by law, by a regulation, by EU legislation or by an order from the Authority. The legal basis is the fulfillment of a legal obligation to which the data holder is subject (GDPR – Article 6, paragraph 1, letter c);

- to exercise a legitimate interest as well as a right of the data holder (for example: the right of defense in court, the protection of credit positions, ordinary internal operational, management and accounting needs). The legal basis is the legitimate interest of the data holder to defend their rights (GDPR – Article 6, paragraph 1, letter f).

Failure to provide these data will make it impossible to establish a relationship with the data holder.

3. METHOD OF DATA PROCESSING

The processing of personal data is carried out by means of the operations indicated in Article 4 paragraph 2 of the GDPR and more precisely: collection, recording, organisation, retention, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Personal data shall be subject to both paper and electronic and / or automated processing. The data holder will process personal data for the time necessary to fulfill the purposes for which they were collected and related legal obligations.

4. DATA RETENTION

The data collected by the company, for the above-mentioned purposes, shall be kept for 10 years from the termination of the contractual relationship with the customer / supplier as well as, subsequently, for the time strictly necessary to fulfill the applicable legal or regulatory obligations and in any case for the time necessary to guarantee the exercise of the company’s rights, including in court.

5. SCOPE OF DATA PROCESSING

Within the scope of the purposes indicated in this notice, the personal data collected may be communicated / transferred to third parties established in countries belonging to the European Union or in non-EU countries in accordance with the provisions of the regulation, in Article 44 – General principle for transfer, Article 45 – Transfer on the basis of an adequacy decision, Article 46 – Transfer subject to adequate safeguards.

The interested party may obtain information regarding the guarantees for the transfer by writing to info@acmispa.com

6. DATA RETENTION PERIOD

The data are processed by duly authorised and trained in-house subjects pursuant to Article 29 of the GDPR. It is also possible to request the scope of communication of personal data by obtaining precise indications on any external subjects acting as independent data processors or holders (consultants, technicians, banking institutions, transporters, etc.). Please also note that personal data may be subject to inter-company communication between the companies of the Group of companies to which ACMI SpA belongs. The data are not subject to dissemination or transfer to non-EU countries. Should it become necessary, in the context of tenders / contracts or in the fulfillment of regulatory obligations (for example: joint liability, anti-corruption, anti-mafia, anti-money laundering, etc.) to acquire personal data on their employees from customers / suppliers, it is agreed between the parties that the undersigned company shall be authorised to process such data in its capacity as an external data processor (Article 28 GDPR) or authorised party (Article 29 GDPR). Within the scope of this relationship, the undersigned company undertakes to process such data in compliance with the compliance requirements set forth by the GDPR, guaranteeing any communication to further parties exclusively within the scope of specific legal obligations.

7. RIGHTS OF THE INTERESTED PARTY (GDPR ART. 15-22)

At any time, the interested party may exercise the right to:

- request confirmation of whether or not their personal data are being processed and, if so, obtain access to that data;

- obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention or the criteria used to determine the retention period;

- obtain the rectification and deletion of data;

- obtain the limitation of processing;

- obtain data portability, i.e., receive them from a data holder in a structured format, commonly used and readable by an automatic device, and transmit them to another data holder without impediments;

- object to the processing at any time and also in the case of processing for direct marketing purposes;

- object to an automated decision-making process relating to natural persons, including profiling;

- lodge a complaint with the Italian Data Protection Authority.

Date of update 01.07.2024