INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 REG. EU 679/2016

Dear Sir / Madam,

the Privacy Law requires us to provide you with information on the Processing of Data necessary for us to execute the Employment Contract stipulated with you, and for the activities connected to it.

For the Privacy Policy:

to us,

Bava S.r.l. – Via Riccardo Lombardi, 9, 10028 Trofarello (TO) – VAT number 02069790018

we are Data Controllers;

b) You are the interested party, and you have the rights and obligations that we illustrate below.

Treatment
The Data Controller, whose data are indicated in the Introduction, will process the Data according to the principles of lawfulness, correctness, transparency, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality.
Purposes, Categories of Data and Legal Bases of the Processing
The Data Controller carries out the processing with the purpose:
fulfill, even before the conclusion of any contractual relationship, if requested by you, the contract, or specific requests made by you (such as, for example, to contact you to deliver the services / products requested, or to communicate that the services / products required are ready / available);
perform obligations deriving from any contractual relationship;
fulfill administrative, financial, accounting and / or tax obligations;
fulfill any obligation required by law and / or an order of the Public Authority;
possibly, to assert or defend a right in court;
The Data Controller will process data from the following categories: name, surname, tax data, address, email address, telephone number (or other type of contact).
The legal bases of the processing are as follows, divided by categories of data:
Identification data: consent of the interested party and / or the need to perform the obligations referred to in points 2.1 a-e above;
Tax data: need to fulfill the obligations referred to in the previous points 2.1 c-e.
Processing methods
The Data will be:
collected electronically and / or on paper;
recorded in digital format on a computer and / or stored in paper archives in the exclusive availability of the Owner;
protected from the risks of destruction, modification, cancellation and unauthorized access by efficient physical, logical and organizational security measures;
further processed, also in paper form, to the extent and within the time strictly necessary to implement the purposes indicated above.
Communication to Recipients and Dissemination
The Data is eventually disclosed to third party Recipients (including PA or Judicial Authorities) only to the extent strictly necessary in relation to the aforementioned purposes, or in any case solely for legal obligations or by order of the Authority.
The categories of Recipients are as follows:
subjects necessary for the execution of related activities and consequent to the execution of the Contract;
Appointees and persons authorized by the Data Controller who are committed to confidentiality or have an adequate legal obligation of confidentiality (eg employees and collaborators of the Data Controller);
The Data Controller may also have to communicate data to comply with legal obligations or to comply with orders from public authorities, including the judicial authority.
The Data will not be disseminated.
Data Retention Period
The Data Controller keeps your Data for the minimum time necessary to achieve the Purposes referred to in point 2 and in any case no later than fifteen years.
Mandatory nature of the communication of data
Data communication is:
mandatory, as regards the execution of the contract or the fulfillment of legal obligations or orders of the Public Authority;
optional, as regards the other services you may have requested.
Consequences of refusal to communicate the data
7.1. In case of refusal to communicate any personal data necessary pursuant to the previous point 6.1 a), it will not be possible to fulfill the contract.

7.2. In case of refusal to communicate the personal data that may be necessary pursuant to the previous point 6.1 b), it may not be possible to fulfill the other services requested by you.

Rights of the interested party
The interested party has the right to:
access their data held by the Data Controller;
request the rectification and / or cancellation (“oblivion”);
ask for the Limitation or oppose the Processing;
request data portability;
propose a complaint to a Supervisory Authority.
The interested party also has the rights referred to in art. 7 of the Privacy Code not expressly mentioned above (that is to obtain confirmation of the existence of data concerning him and their communication in an intelligible form, an indication of their origin, the identification details of the data processors, the transformation into anonymous form of the Data or their blocking if processed in violation of the Privacy Law).
To assert the aforementioned rights, you can contact the data controller:

– by sending an E-Mail to the address: info@bavasrl.com

– or by phone at: +39 011 349 66 06