Pursuant to UE Regulation no. 2016/679 (GDPR) and to the applicable regulation, Indikon Srl, Controller of the processing of data, wishes to inform you on the purposes and methods of the processing of your personal data.
In this agreement, the following words shall have the following meanings:
Processing: means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Personal data or Data: means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Controller: Indikon Srl determines the purposes and means of the processing of personal data.
Processor: means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Interested party: the subject to which Personal data refers.
Types of personal datas
Data can be collected and processed by the Controller for the purposes detailed below:
Personal data, tax code, VAT number, name, registered office, residence and
address and contact details;
Data relating to the contractual relationship describing the type of contract, as well as information related to its execution and necessary for the fulfillment of the contract itself;
Accounting data relating to the economic relationship, the amounts due and the payments, to their periodic performance, to the summary of the accounting status of relationship;
Data to make the relationship with our structure more defined and our own more effective collaboration and operational efficiency;
Data relating to: employees and / or collaborators, information on the profession performed or on your company.
Purposes of the processing
Below we list the purposes for collecting, keeping and processing your data:
a) administrative and accounting purposes and for sending commercial invoices by e-mail;
fulfillment of tax or accounting obligations;
customer management (customer administration, administration of contracts, orders, shipments and invoices; reliability and solvency control);
management of litigation (contractual breaches, warnings, transactions, recovery credits; arbitration; judicial disputes);
internal control services (safety, productivity, quality of the services, integrity of the heritage);
b) periodic sending of e-mail messages containing informational and promotional material and initiatives, as well as commercial communications by email or sms;
c) processing of the personal data provided by you and the data gathered from your navigation in our site to define your commercial profile for marketing and promotional purposes, to establish relations with users and to meet requests for information and assistance sent to us through various channels.
Conferral of personal data
Conferral of your personal data for the purposes listed in the foregoing points a) and b) is an indispensable condition for provision of the service. With reference to the other purposes of the treatment indicated above, the agreement to the treatment of your data is purely optional.
Data processing methods
Your data will mainly be processed with electronic or automated means, according to the modalities and with the instruments eligible to grant the safety and the confidentiality of the data, according to the prescriptions of the EU Regulation no. 2016/679. In particular, there will be the adoption of all the technical, IT, organizational, logistical and safety procedural measures, as prescribed by the Regulation, so that the minimum protection level of the data prescribed by law is granted, allowing the access only to persons in charge of the treatment and authorized by the Controller or Processor.
The information received and the treatment modalities will be coherent and not exceeding compared to the kind of services rendered. The data will also be managed and protected in an environment whose access is under constant control.
Data communication and disclosure
Your data can be communicated:
a) to all those parties (including the Public Authorities) having access to the personal data according to by-law or administrative provisions;
b) to third companies whose products or services are proposed or sold through Indikon Srl;
c) to companies or third parties in charge of printing, shipping or delivering the goods or services;
d) to banking institution and to companies managing the national or international payment circuits;
e) to companies, consultants or professionals eventually in charge of the set-up, maintenance, updating and, in general, management of the hardware and software used for the service;
f) to all those public and/or private parties, physical and/or juridical persons (legal, administration and tax firms, Chambers of Commerce, Law Chambers and Offices, etc…), should the communication be necessary of functional to the correct filing of the contractual obligations arose, as well as of the by-law obligations.
The data regarding you will only be disclosed in an anonymous and aggregated way for statistical or research purpose.
Processors of personal data
In accordance with art. 28 of the EU Regulation no. 2016/679, Indikon Srl has nominated Processors the following entity:
– Carlo Erba with registered office in Collebeato, via Roma 45 – 25060 Collebeato (BS) Tel. 030 2511965 Fax 030 2519938 email: email@example.com
Archive of the personal data
Your personal data will be be kept for the whole duration of the relationship or collaboration with the our organization and for 10 years from the date of termination of the relationship.
Rights of the interested party
According to the applicable regulation, you have the right – among others – to:
indications on the origin of the personal data, on the treatment purposes and methods, on the legal basis and on the logic applied in case of treatment effected through electronic instruments;
indication of the identification details of both the Controller and Processors of the processing;
indication about the parties or the party categories the data can be communicated to or that can know the data as representatives granted in the territory of the State, as responsible persons or persons in charge;
indication about the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;
an access to your data and the possibility to update, adjust or integrate them;
the cancellation of your data without unjustified delay or the limitation of the processing;
the portability of the data to be transmitted directly from one controller to another (where technically feasible);
proof that the operations here listed have been communicated also to any third party to whom the personal data had been disclosed (except if the burden of this duty is disproportional with regard to the risks associated to the right protected);
b) to lodge a complaint with a supervisory authority;
c) to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
d) oppose, wholly or partially, at any time, to the treatment of your data for the purposes of commercial information or of deliver of advertising material or of direct sales or for effecting market or commercial communication researches.
The above rights can be exerted with request made without any formality to the Controller: Indikon Srl, via Roma 45 – 25060 Collebeato (BS) Tel. 030 2511965 Fax 030 2519938 email: firstname.lastname@example.org