Information pursuant to art. 13 of European Regulation 679/2016 and consent

Pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data of which PAUL MERCIER, in the person of the Legal Representative Pro tempore, with registered office in

 

– VAT number FR

 

will enter into the availability of the personal data provided by you, in the execution of a contract to which you are a party or in carrying out pre-contractual activities at your request, we inform you of the following:

1. Data controller and data protection officer

The data controller is Paul Mercier (hereinafter also referred to as the “DATA CONTROLLER” in the person of the Legal Representative Pro tempore, with registered office in

– VAT number FR

 

The Data Controller may be contacted for any communication regarding privacy at the following email address: info@paulmercier.net

2. Purpose of data processing and legal basis of processing

The Data Controller processes the personal data of natural persons, legal persons, sole proprietorships and/or freelancers (“Data Subjects”) for the following purposes:

  1. need to execute a contract to which the interested party is a party or to perform pre-contractual activities at his/her request. This need represents the legal basis that legitimises the consequent processing. The provision of the data necessary for these purposes represents, depending on the case, a contractual obligation or a requirement necessary for the conclusion of the contract; in their absence, the owner would be unable to establish the relationship or to execute it;
  2. need to fulfill legal obligations (e.g. obligations under anti-money laundering legislation, provisions issued by Supervisory Authorities, the Judiciary, etc.). This need represents the legal basis that legitimises the consequent processing. The provision of data necessary for these purposes represents a legal obligation; in their absence the owner would be unable to establish relationships and could have the obligation to make reports;
  3. need to carry out production, transformation and sale activities of diamond wire for cutting stone materials, need to carry out technical-managerial management and coordination activities in the commercial and industrial sector and consultancy activities in the said sectors. This need represents the legal basis that legitimises the consequent processing. The provision of the data necessary for these purposes represents, depending on the case, a contractual obligation or a requirement necessary for the conclusion of the contract. In the absence of these, the owner would be unable to establish the relationship or to execute it;
  4. need to carry out promotional, marketing and sales activities of “dedicated” products and services of the owner or third-party companies by sending dedicated commercial communications, including by sending newsletters, text messages, emails and phone calls; The legal basis that legitimises the consequent processing is the consent of the interested party who is free to give or not and who can, in any case, revoke at any time. The provision of the data necessary for these purposes is not mandatory and the refusal to provide them does not determine any negative consequence, except the impossibility of receiving dedicated commercial communications.

Personal data may be processed using both paper and electronic archives (including portable devices) and processed in ways strictly necessary to meet the purposes indicated above.

3. Consequences of failure to communicate personal data

With regard to personal data relating to the execution of points a, b, c above to which you are a party, or relating to the fulfillment of a regulatory obligation (for example, obligations related to the maintenance of accounting and tax records), failure to communicate personal data prevents the completion of the contractual relationship itself and/or in any case the possibility of carrying out and carrying out the commercial and contractual collaboration activities in progress as well as fulfilling the contractual obligations deriving from points a, b, c themselves. With regard to personal data relating to the commercial and promotional activities referred to in point d), the provision of the data necessary for these purposes is not mandatory and refusal to provide them does not determine any negative consequences, except the impossibility of receiving dedicated commercial communications.

4. Data retention

Your personal data, subject to processing for the purposes indicated above, will be retained for the duration of the contract and, subsequently, for the time in which the Data Controller is subject to retention obligations for tax purposes or for other purposes, provided for by law or regulation.

5. Communication of data

Your personal data may be communicated to:

  1. consultants and accountants or lawyers who provide services functional to the purposes indicated above;
  2. banking and insurance institutions that provide services functional to the purposes indicated above;
  3. entities that process data in compliance with specific legal obligations;
  4. Judicial or administrative authorities, for the fulfillment of legal obligations;

6. Profiling and Dissemination of Data

Your personal data are not subject to disclosure or any fully automated decision-making process, including profiling.

7. Rights of the interested party

The rights granted to you by the GDPR include:

    • ask the Data Controller for access to your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete data; the deletion of personal data concerning you (if one of the conditions indicated in art. 17, paragraph 1 of the GDPR occurs and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (if one of the hypotheses indicated in art. 18, paragraph 1 of the GDPR occurs);
    • request and obtain from the Data Controller – in cases where the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to portability of personal data);
    • object at any time to the processing of your personal data in the event of particular situations concerning you;
    • revoke your consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example, date and place of birth or place of residence), or particular categories of data (for example, data revealing your racial origin, your political opinions, your religious beliefs, your state of health or your sexual life). The processing based on consent and carried out prior to its revocation, however, retains its lawfulness;
    • lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).