PERSONAL DATA PROTECTION POLICY
Dear Supplier,
This Policy is being provided pursuant to and in accordance with Art. 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”), on the protection of natural persons with regard to the processing of personal data.
Purposes and legal basis for processing
Your personal data will be processed for the following purposes:
- to satisfy obligations deriving from a contract or to respond to your specific requests, before and after fulfilment of the contract;
- to satisfy legal obligations of an administrative, accounting, statutory and fiscal nature, and also national, EU and/or non-EU regulations;
- to manage any dispute;
- to manage any supplier qualification and monitoring process.
The processing necessary for said purposes is based on principles of lawfulness, fairness and transparency and protection of your confidentiality and your rights.
Data storage period
Your personal data will also be stored after termination of the contract to satisfy any obligations connected with or deriving from the contract, for the period laid down by current laws at the time and according to the time limits on the rights deriving from said contract.
Nature of providing the data and consequences in the case of refusal
It is obligatory to provide the data for all aspects required by legal and contractual obligations, so refusal to provide all or part of the data may make it impossible for the company to fulfil the contract or to satisfy the related obligations correctly.
Categories of recipients
Exclusively for the purposes specified above, all the data collected and processed will be disclosed to internal figures authorised to process it according to their respective duties, and also to the following external categories:
- credit institutes;
- professional consultants or service companies that operate on behalf of our Company;
- public and private entities, also following inspections and audits.
If said recipients process the data on our behalf, they will be appointed as data processors, through a specific contract or legal document.
Transfer of personal data to third countries or international organisations
Your personal data will not be transferred to non-European third countries.
Rights of data subjects
You are entitled (see Arts. 15-22 GDPR) to ask our company for access to your personal data and request its rectification if incorrect, erasure or restriction of processing, or object to its processing for legitimate interests of our company, and also to obtain portability of the data you have supplied, only if it is subject to automated processing based on your consent or on the contract. You are also entitled to withdraw consent given for the processing purposes that require it, without affecting the lawfulness of processing based on consent before its withdrawal. You are entitled to file a complaint with the Supervisory Authority.
Parties involved in processing
The Controller of your personal data is Armony SpA, which may be contacted at privacy@armonycucine.it
