|
INFORMATION TO SUPPLIERS
(in accordance with the provisions set forth in Italian Legislative Decree no. 196 of the 30th of june 2003 regarding Personal Data Protection)
Dear Supplier,
1st January 2004 has become effective the Decree 196/03 (published on the G.U n. 174 of the 29/7/03) that introduces the new ‘Code in matter of Personal Data Protection'. In accordance with the art. 13 of such regulation, any Company, as Responsible of the Processing of personal data, is bound to supply suitable information regarding the management of the personal data.
The provisions provide that those concerned, whose personal data are subject to processing, where processing means: “any operation or set of operations, carried out also without the aid of electronic tools, concerning the collection, recording, organization, maintenance, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, block, communication, diffusion, cancellation and destruction of data, even if not recorded in a data bank”, are informed in advance as to the following points:
1. origin of the personal data
The personal data are generally collected directly from those concerned, in some cases data may be collected from thirds parties authorized by the supplier.
2. sensitive personal data
Our Company, in the accomplishment of its own activity, processes data defined as “personal sensitive data” by the Decree no. 196/2003:
(Art. 4, paragraph 1, letter d) defines as sensitive data: “the personal data suitable to reveal the racial and ethnic origin, the religious, philosophical beliefs or of other kind, the political opinions, the adhesion to parties, unions, associations or organizations of religious, philosophical, political or trade-union nature, as well as the personal data suitable for revealing the state of health and the sexual life”).
For the processing of such data the Law establishes a specific manifestation of consent.
The data processing could not take place without the previous consent of the person concerned.
3. purpose of the data processing
The personal data provided by supplier directly as person concerned or through thirds parties, are processed for purposes relating to: proposals, foundation, continuation and execution of contractual relationships relating to the services of supply of assets of any kind.
In particular we inform You that:
a) The data are processed in relation to the contractual requirements and the consequent fulfilments of legal and contractual obligations, as well as to achieve an effective management of the commercial relationships;
b) The data are processed in relation to the contractual agreements with Public Bodies, Agencies / Companies / Enterprises whose validity regulates the matter of commercial legislation;
c) The data could be transmitted to the above mentioned subjects, provided that they will always have to be made available to the Inspection, Control and Justice Authorities, during however the period of the time of their conservation (see specific paragraph);
d) The aforesaid data could be transmitted electronically or on paper by our processing system, for administrative, organizational, insurance, legal, and internal and statistical control purposes.
4. data processing procedures
The personal data processing is performed through manual, computerized and data transmission tools, with logics strictly correlated to the indicated purposes and such however as to always guarantee confidentiality and security of the data themselves and includes - in the respect of the limits and the conditions of art. 11, Decree n. 196/2003 - all the operations or set of operations provided in the art. 4, paragraph 1, lett. a) of same the Decree and necessary to the processing in question, including their communication to the subjects mentioned at the subsequent point 6.
5. mandatory or optional nature of data communication
As provided by law, all the identification data must be acquired (for natural persons: personal data; for legal persons, Companies, Bodies, Associations: company title/trade name – registered office, Fiscal Code/VAT Code – eventually personal data of the legal representative/procurator etc.)
The communication of the data for the purposes of the points a), b), c) is to be considered mandatory, while the lack of consent for the point d) would not allow us to accept proposals or to subscribe and execute purchase contracts.
6. data communication/diffusion ambit
The people of our company and of third companies, in charge for one or more operations referable to data processing, are allowed to become acquainted of supplier personal data
The data will not have any diffusion but they could be communicated on the national territory for the attainment of the previously indicated purposes. In addition to the communications made in execution of the obligations of Law and contract, the data could be communicated to:
· People in charge of data processing
· Transportation and shipment companies
· Suppliers of goods and services
· Insurance companies
· State, Regional and Local (municipal and/or province districts) Administrative Agencies
· Public Bodies, Authorities and Judicial Offices
· Credit collection companies and credit institutions
· Agents, promoters and collaborators even external
· Companies in charge of system maintenance, assistance and security
· Freelance, even if associated, within relationships of consulting / assistance
· Companies/enterprises, private legal subjects eventually with arrangements.
The subjects to which the data could be communicated will use the data as Holders of the Data Processing, according to of the Law in full autonomy, being unconnected with the original processing carried out by our Company, except the eventual subjects that we have specifically charged.
7. rights as of art. 7
As to data themselves, the supplier can exercise his/her rights provided by the art. 7 Decree 196/2003, as quoted in the excerpt below:
Art. 7
(Right to access personal data and other rights)
1. The party concerned has the right to obtain confirmation as to the existence of personal data concerning him/her, including data not yet registered, and communication thereof in a clear way.
2. The party concerned has the right to obtain an indication:
a) as to the origin of the personal data;
b) as to the purposes and methods of processing;
c) as to the logic applied in the event of processing carried out with the aid of electronic tools;
d) as to the identification details of the holder, of the managers and representative appointed in accordance with the provisions set forth in article 5, paragraph 2;
e) as to the entities or categories of entities to whom the personal data may be communicated or who may become aware of such personal data in their capacity as appointed representative in that Country or as managers or persons in charge.
3. The party concerned has the right to obtain:
a) the updating, amendment or, where appropriate, the integration of said data;
b) the cancellation, transformation into anonymity or the blocking of data processed by breach of law, including details that do not need to be kept for the purposes for which the data was collected or subsequently processed;
c) a certification that the operations set forth in points a) and b) were made known, also with regard to their content, to those to whom such data had been communicated or disclosed, with the exception of those cases where such performance is found to be impossible or involves the use of means clearly excessive compared with the right actually protected.
4. The party concerned has the right to object, fully or in part:
a) for legitimate reasons, to the processing of his/her personal data, even if these pertain to the purpose of the data collection;
b) to the processing of his/her personal data for the purposes of sending advertising or direct sales material or for the performance of market research or commercial communications;
Holder/Responsible identification elements
More information about data processing and the communication of your personal data can be obtained from
Consorzio Apiub, Via Andrea Doria 7 10123 Torino, Tel. +39 011 5163711 E-mail: privacy@apiub.com.
In accordance with the provisions of the Decree 196/2003, the Holder for data processing, in the person of its President, is Consorzio Apiub,
Via Andrea Doria 7 10123 Torino.
Consorzio Apiub has appointed as Responsible for Data Processing  . |