Privacy notice under articles 13-14 of Regulation (EU) 2016/679 (General Data Protection Regulation)
Data subjects: suppliers.
LIODRY FOODS S.P.A. as Data Controller of the subject’s personal data, pursuant to and for the purposes of EU Regulation 2016/679 hereinafter ‘GDPR’, hereby informs that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on principles of lawfulness, fairness, transparency and protection of data subject’s privacy and rights.
Personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations provided for therein.
Furthermore, the Data Controller may be made aware of special categories of personal data and in detail: General and sensitive personal data possibly contained in email messages. The processing of personal data for these special categories of personal data is carried out in compliance with art. 9 of the GDPR.
Purpose and legal basis of the processing: in particular, personal data will be processed for the following purposes for the implementation of any fulfilments required to meet legal obligations related to:
tax and accounting purposes;
legal obligations provided for by the current laws.
Personal data will also be processed for the following purposes related to the implementation of measures deriving from contractual or pre-contractual duties:
suppliers’ management;
quality management;
activity planning;
supply orders history.
Processing methods. Personal data will be processed in the following ways:
digital processing (PC-based);
manual processing (paper-based records)
Data processing shall comply with the methods set out in articles 6, 32 of the GDPR and through the adoption of the appropriate security measures provided for.
Data will be processed exclusively by personnel expressly authorised by the Data Controller and, in particular, by the following categories of authorised personnel:
Procurement Department;
Administrative office.
Communication: data may be communicated to third parties for the correct management of the relation and in particular to the following categories of Recipients including all duly appointed Data Processors:
banks and credit institutions;
consultants and freelancers, including in association;
public or private entities to which communication of personal data is compulsory to fulfil legislative obligations or required to manage the business relation;
freight forwarders, transporters, small-scale drivers, post offices, logistics companies.
Dissemination: personal data will not be disseminated in any way.
Retention period. We hereby inform that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of personal data:
Shall not exceed the period of time necessary in relation to the purposes for which they are collected and processed in order to fulfil contract duties;
Shall not exceed the period of time necessary in relation to the purposes for which they are collected and processed in order to fulfil legal obligations.
Data Controller: the Data Controller, pursuant to legislation in force, is LIODRY FOODS S.P.A. (Via E. Mattei n. 8/a , 42043 GATTATICO (RE), P. IVA01898550353, to be reached at the following addresses: e-mail info@liodryfoods.com, phone 0522908725 in the person of its pro tempore legal representative.
The Data subject shall have the right to obtain from the Controller the erasure (right to be forgotten), restriction, updating, rectification, portability, objection to the processing of personal data, as well as in general to exercise all the rights provided for by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
Regulation EU 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 –
Data subject’s rights
1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, even in case data have not been registered yet, and, where that is the case, communications or data in an intelligible form, and the possibility to lodge a complaint with a supervisory authority.
2. The data subject shall have the right to obtain:
a. the source of subject’s data;
b. purposes and methods of data processing;
c. details on the logics applied in case of data processing through electronic devices;
d. IDs of the Controller, processors, and appointed Representative pursuant to article 5, paragraph 2;
e. the indication of subjects or subject categories to whom personal data can be disclosed or who may receive such data as appointed representatives within the State territory, of persons in charge or appointed individuals.
3. The data subject shall have the right to obtain:
a. updating, rectification or, whenever required, integration of personal data;
b. erasure, anonymisation or blocking of data unlawfully processed, including data for which retention is not required for the purposes for which it was collected and then processed;
c. a statement that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their contents, of those to whom the data have been communicated or disseminated, except when such fulfilment proves impossible or involves the use of means manifestly disproportionate to the right protected;
d. data portability.
4. The data subject shall have the right to object, in all or in part:
a. on legitimate grounds, to the processing of personal data concerning him or her, although consistent with the purposes of the data collection;
b. to processing of personal data concerning him or her for marketing purposes, direct sale, market survey or commercial communication.
