Information to customers

PROCESSING OF PERSONAL DATA – CUSTOMER NOTICE pursuant to Art. 13 EU Reg. 679/2016

Zero Branco (TV),  10/25/2022

Dear Customer,
In accordance with the provisions of EU Regulation No. 679 of 2016 on the protection of personal data, and in particular Article 13 thereof, L’ORTOLANA S.A.S. (fiscal code and VAT number 02421580263, with headquarters in Via Scandolara 126, 31059 Zero Branco (TV) Tel. 0422 345033 Email info@lortolana.com) inform you that, in relation to the establishment and management of the relationship that will take place with you, it is the Data Controller of the personal data that you will provide.
In accordance with the current regulations in force, the processing of such personal data that the Company will carry out will be based on the principles of lawfulness, correctness, transparency and the further principles set out in Article 5 EU Reg. 679/2016.
The undersigned company therefore provides you with the following information:

A) Processing of personal data

‘Processing’ means, according to num. 2 of Art 4 EU Reg 679/2016, any operation carried out, with or without the help of automated processes, and applied to personal data such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.

Personal data will be processed – in such a way as to guarantee its security and confidentiality and in full compliance with the provisions of EU Reg. 679/2016 – with the support, in addition to paper-based materials, of computer or telematic materials as well as through automated tools designed to store, manage or transmit the data. When the data are collected through the use of computer and/or telematic tools (PC, Notebook, Tablet, mobile phone, SIM card, internet key, e-mail, internet access) they may also be known by the companies supplying computer hardware and/or software systems, duly designated as Data Processors of your personal data.
You will only be asked for personal data that is essential for the full implementation of the service you have requested, such as name and personal details, tax code, address, other personal identification elements such as telephone number and e-mail.

B) Purpose of processing.

The processing of the personal data of the Customers-Interested shall be carried out by the Controller in order to execute the service requested as well as to allow to perform all the various administrative, commercial, accounting and tax activities arising from the regulations in force and connected to the service requested by the Customer-Interested.

C) Persons authorised to process data (Appointees)

Your personal data may be disclosed to all the persons specifically identified as ‘Data Processors’ by the Controller and the Data Processors appointed by him.

The Data Processors, identified according to the scope and profile assigned to each, shall act only upon authorisation by the Data Controller and Data Processors appointed by him and, in accordance with the provisions of Article 29 EU Reg. 679/2016, shall process your data only after being instructed to do so by the Data Controller and the Data Processors appointed by him, acting under the direct authority of the latter.

D) Persons to whom the data are disclosed – Recipients

In order to carry out certain activities relating to the processing of your personal data, the undersigned Company, in its capacity as Data Controller, may disclose your data to parties who carry out activities that are strictly connected, useful or necessary to the performance of the service and/or operations that you may have requested and necessary, therefore, for the proper performance of the contractual commitments undertaken towards you by the Company such as, by way of example but not limited to:

  • transport and forwarding companies;
  • subjects that provide specific processing or consultancy services for business, legal or tax/tax administration and management, working on behalf of our Company;
  • parties that provide processing and/or maintenance services for information systems;
  • company providing the computer security system;
  • credit institutions;
  • debt collection institutions;
  • other entities, public or private, for the fulfilment of legal obligations.

An up-to-date list of such persons may be requested from the Company as Data Controller.
It will be able to indicate which of the aforementioned entities are acting as “Data Processors”, carrying out processing on behalf of the Controller. The Data Processors chosen by our Company have undertaken to put in place appropriate technical and organisational measures so that the processing meets the requirements of EU Reg 679/2016 and guarantees the protection of your personal data.
The persons in charge have also committed themselves, by means of a specific and signed letter of appointment, to fulfil all the specific obligations set out in Art. 28 EU Reg 679/2016 and to act, pursuant to Art. 29 of the same Regulation, under the authority of the Data Controller and subject to his instructions, as well as to notify the Data Controller (pursuant to the second paragraph of Art. 33 EU Reg 679/2016) of any breaches of your personal data.

 E) Transfer of data abroad

Your personal data will not be transferred abroad.

F) Rights that may be exercised by the data subject; complaint to the Supervisory Authority and judicial review

You can always exercise your rights under Articles 15 ss of EU Regulation 679/2016 (access to personal data, rectification or deletion of data, restriction of processing, objection to processing, data portability) vis-à-vis the data controller.
It is also always possible to lodge a complaint with the competent supervisory authority (pursuant to Art. 77 EU Reg 679/2016) or a judicial appeal (pursuant to Art. 79 EU Reg 679/2016) if the Data Subject considers that his/her rights have been violated as a result of processing.

G) Data retention period

Your personal data will be retained for as long as is necessary for the performance of the service you have requested, as well as for the pursuit of the further purposes set out under B.

H) Obligation to provide personal data and legal bases

The undersigned Company informs you that the provision of your personal data constitutes a contractual obligation, since such provision is a necessary requirement for the conclusion of the contract and, therefore, for the provision of the service you have requested; any refusal to provide your personal data would therefore make it impossible for the Company to perform the service you have requested.

The legal bases legitimising the processing of your data by this company are given:

  • by the need to execute a contract to which you, as the data subject, are party
    (lett. B art. 6 Reg EU 679/2016);
  • by the need to fulfil legal obligations to which the company is subject
    (legal basis under C(1), Art. 6 EU Reg. 679/2016);
  • by the legitimate interest of the Company in the proper performance of its relationship with you (legal basis under subpart F, paragraph 1, Art. 6 EU Reg. 679/2016)

I) Data Protection Officer

The undersigned company has not appointed its own DPO, pursuant to Art. 37 ss EU Reg. 679/2016, because it is not obliged to do so.