Info privacy

Information on the processing of personal data pursuant to Article 13 GDPR (regulation UE 2016/679)

 

In accordance with article 13 GDPR (regulation UE 2016/679) we hereby supply you all due informations concerning the purposes and methods for your personal data processing in our possession.

 

1) Data controller.

The data controller is Paladin S.p.A. located in Via Postumia n. 2, 33076 – Pravisdomini (PN) and office in Via Postumia n. 12, 30020 – Annone Veneto (VE).

Contact data: tel. 0422 768167 – fax: 0422 768590 – e-mail: privacy@paladin.it – pec: paladinspa@legalmail.it

 

2) Purposes of data processing.

Personal data shall be processed for following purposes:

a)to fulfillment of legal and contractual obligations in respect of data subjects;

b)to electronic invoicing or to send invoices by email;

c)to send communications campaigns and promotions and newsletter from Paladin S.p.A.

The personal data processing will be carried out by electronic, automated and/or manual instruments.

Legal basis for the processing referred to point a) is the execution of contract.

Legal basis for the processing referred to point b) is your consent.

Legal basis for the processing referred to point b) is your consent.

 

3) Nature of personal data conferral.

The personal data conferral:

• To purposes of point a) is mandatory for the execution of the contract and for all connected activities. A refusal from data subject to communicate personal data implies the impossibility from Paladin S.p.A. to follow up contractual relationships.
• To purposes of point b) is optional and may be manifested through the selection of appropriate box in the authorization form. No consent of data subject does not entail any consequences to Paladin S.p.A. for fulfilment of legal and contractual obligation of point a).
• To purposes of point c) is optional and may be manifested through the selection of appropriate box in form for the request of activation of the Paladin card or through the selection of appropriate box in contact paper or online forms. No consent of data subject does not entail any consequences to Paladin S.p.A. for fulfilment of legal and contractual obligation of point a).

 

4) Communication and data diffusion.

The personal data to be processed in the inside company by authorized subject to processing data under the data controller responsibility.

Your data may be shared with external Responsible for the treatment (processor) contractually involved with data controller.

Your data may be shared to:

• Accountant for accounting purposes;
• Factoring companies for credit management;
• Insurance;
• Commercial information;
• Banks for payments;
• Transport companies for send the goods;
• Credit recovery companies;
• Legal advisors;
• Data processing companies.

If data subject wants to know the names of subject that data may be shared he can write an e-mail to: privacy@paladin.it

 

5) Transfer personal data to third countries.

The data controller will not transfer personal data to third countries or to an international organization.

 

6) Data subject’s rights.

The rights of data subject are:

• Right of access to your personal data; right to personal data rectification or erasure or the restriction of processing;
• Right to object;
• Right to data portability (if the processing is carried out by automated means), pursuant to article 20

To purposes of points b) and c), as the processing is based on point (a) of Article 6(1), you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise your rights by contacting the data controller at the following e-mail: privacy@paladin.it.

 

7)

You have the right to lodge a complaint with a supervisory authority.

For further information, you can consult the privacy authority web site www.garanteprivacy.it.

 

8) Different purposes of data processing.

If the data controller means processed data for different purpose, before such further processed, the data controller will give to data subject the information on the different processing of personal data.

 

9)

The data controller does not use the automated decision-making and profiling.

 

10) The period for which the personal data will be stored.

To purposes:

• of point a) the personal data will be stored for a period of 10 years from the end of the contractual relationship;
• of point b) the personal data will be stored for a period of 10 years from the end of the contractual relationship;
• of point c) the personal data will be stored for a period of 24 months from data collection.

 

11) The safety of data processing.

The personal data will be carried out with methods and tools to ensure maximum security and confidentiality.