PRIVACY POLICY - CUSTOMER INFORMATION

Pursuant to art 13 of Regulation 679/2016 on the protection of personal data and art. 13 of the Legislative Decree 196/2003 "Code on the protection of personal data" we are providing some information regarding the processing of your personal data in the context of your relationship/ service with Raffin 1976 srl based in Via San Michele, 9/B - 33084 Cordenons (PN) VAT number: 00183760933.

1.Data Controller

Raffin 1976 srl

Via San Michele, 9/B - 33084 Cordenons (PN)

2.Purpose of the processing

a) Mandatory purposes, for which the processing does not require your express consent, but rather a failure to provide or an incorrect contribution entail the impossibility of the holder to guarantee the adequacy of the treatment itself to the contractual agreements for which it is performed

to fulfil obligations arising from the contract or to carry out required pre-contractual measures
Organise, deliver and manage the operational aspects of the service required
Manage the tax, accounting and administrative requirements related to the contract and service
Manage the storage and retention of data, information, communications including electronic and documents related to the service provided and the legal relationship
Legal bases for processing for the purposes 1 to 4 are art 6 paragraph 1 letter b) of the GDPR (fulfilment of the contract) and art. 6 paragraph 1 letter c) (processing necessary to fulfill a legal obligation to which the holder is subject) and art. 6 paragraph 1 letter f) (management of the legitimate interest of the holder also according to Recital 47 of the GDPR and article 130 paragraph 4 D.Lgs 196/03).

 

b) Other optional purposes, for which an explicit and separate consent is provided (only for customers)

Receive promotional communications on products and services of the owner similar to those contractually required
 

Use photographic material relating to the work we carry out for our customers for promotional activities. These images may be used to produce brochures, collected in an album (also digital) for future customers to view and any other type of disclosure for promotional purposes of the business activities, including use on the company website or social profiles.
The legal bases of the processing for the purposes listed above are art.6 paragraph 1, letter a) (consent of the interested party)

 

3.Communication of data

Your data may be communicated to:

Information technology companies
Purpose: management, maintenance, updating of the systems and software used by the owner; digital archiving and preservation services for electronic documents.

Providers of networks, electronic communications services and computer and telematic data storage and management services
Purpose: hosting, housing, cloud, SAAS and other remote computer services essential for the provision of the activities of the owner, storage services and preservation in accordance with electronic documents.

Consultants and professionals
Purpose: legal advice, professional advice, debt collection, marketing studies also with the aim of obtaining bonuses and benefits including tax.

​

 

4.Method and duration of treatment

Registry, accounting records, tax documents, accounting, communications, contract will be kept as established by law.

The data will be stored on paper and/ or computer media for only the time necessary to execute the contract respecting the principles of limitation of storage and minimization referred to in art 5 paragraph 1 letter c) and e) of the GDPR, Without prejudice to the storage of data, information, files and logs necessary to prove the exact fulfilment of obligations consistent with the law.

​

The data will be stored on paper and/ or computer media for only the time necessary to execute the contract respecting the principles of limitation of storage and minimization referred to in art 5 paragraph 1 letter c) and e) of the GDPR, Without prejudice to the storage of data, information, files and logs necessary to prove the exact fulfilment of obligations consistent with the law.

The data will be stored to comply with legal requirements and pursue the purposes indicated above, in compliance with the principles of indispensability, non-surplus and relevance.

5.Rights of the data subject

Right to withdraw consent (art. 13 para II lit. A and art. 9 para II lit. A)
Description: You have the right to revoke your consent at any time for all those processing operations whose legitimacy is based on your consent, as indicated in the purposes described above.

In particular, the withdrawal of consent applies to processing carried out for the purpose of sending advertising material or direct sales or for the completion of market research or commercial communication of a promotional nature even if carried out pursuant to art. 130 paragraph 4 of Decree-Law 196/03.

The withdrawal of consent does not affect the lawfulness of the previous processing.

Right of access to data (Art. 15)
Description: You can request:

The purposes of processing
The categories of personal data concerned
The recipients or categories of recipients to whom personal data has been or will be disclosed, in particular if recipients from third countries or international organizations
Where possible, the expected retention period for personal data or, if not possible, the criteria used to determine that period

The existence of the right of the data subject to request from the controller the rectification or deletion of personal data or the restriction of the processing of personal data concerning him or to oppose their processing
The right to complain to a supervisory authority
Where data is not collected from the person concerned, all available information on its origin
The existence of an automated decision-making process, including profiling as referred to in art. 22, paragraphs 1 and 4 and, at least in such cases, significant information on the logic used as well as the significance and expected consequences of such processing for the data subject. You have the right to request a copy of the personal data being processed.
Right of rectification (art. 16)
Description: You have the right to request the correction of inaccurate personal data concerning you and to obtain the integration of incomplete personal data

 

Right to be forgotten (art. 17)
Description: You have the right to obtain from the controller the deletion of your personal data if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, if you revoke your consent, if there is no overriding legitimate reason to proceed with profiling, if the data has been processed unlawfully, if there is a legal obligation to delete them; if the data are related to web services for minors without consent. Deletion may be effected unless the right to freedom of expression and information prevails, which are retained for the fulfilment of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of public authority, for reasons of public interest in the field of health, for the purpose of archiving in the public interest, scientific or historical research or for statistical purposes or for the establishment, exercise or defence of a right in legal proceedings.

 

Right to restriction of processing (art. 18)
Description: You have the right to obtain from the controller the restriction of processing when you have contested the accuracy of personal data (for the period necessary for the controller to verify the accuracy of such personal data) if the processing is unlawful, but you oppose the deletion of personal data and instead request that their use be limited or if they are necessary for the establishment, exercise or defence of a right in court, while the holder is no longer needed;

​

Right to portability (art. 20)
Description: You have the right to receive in a structured, commonly used and machine-readable format the personal data that you provide us with and have the right to transmit it to another if the processing is based on consent, on the contract and whether processing is carried out by automated means, unless processing is necessary for the performance of a task in the public interest or related to the exercise of public authority and such transmission does not infringe the right of third parties;

​

Right to contact the Data Protection Authority
Description: the data subject may submit a complaint to the Authority for the protection of personal data pursuant to art. 77 of the Regulation if you consider that the processing of your data is contrary to the legislation in force.

We also inform you that the personal data concerning you are collected directly from the person concerned.

​

6.How rights are exercised

You can exercise your rights at any time by sending:

An a.r. registered letter addressed to: Raffin 1976 srl - Via San Michele, 9/B 33084 Cordenons (PN).
An e-mail to PEC raffin.1976@legalmail.it

​​