Pursuant to art. 13 of the EU 2016/679 Regulation (GDPR), the personal data processing will be based on principles of lawfulness, correctness and transparency, limitation of purposes and retention, data minimization, accuracy, integrity and accountability, to protect confidentiality and rights of the interested party.
The Data Controller is NPI ITALIA S.r.l., C.F. and VAT 10804760154, with registered office in Milan (MI) in Via Visconti di Modrone Uberto n. 7, operating offices in Monza (MB) in Via Velleia n. 19 and in Soncino (CR) in via 25 June 1900 - in the person of its legal representative
PURPOSE OF LEGAL BASIS AND CATEGORIES OF PERSONAL DATA
The processing aims to file customers and suppliers in order to regulate the pre-contractual management (offers and estimates), sales/purchase contract of products and services, internal needs of an operational, management, accounting, tax, statutory nature and all fulfillments connected.
The treatment will be carried out by specially authorized personnel, electronically and on paper.
The provision of data is mandatory for the fulfillment of obligations arising from contractual relationships.
Refusal to provide the data could result in the failure of the execution of the contract, partially or even totally and of the continuation of the relationship.
DATA SHARING AND TRANSFER TO THIRD COUNTRIES
The persons in charge whom the personal data (personal, accounting and fiscal data) may be communicated are our employees in the administrative and commercial area of our company, external subjects who may perform tax and accounting obligations, management of the information systems on behalf of our company, as well as carriers, credit institutes for the management of payments and collections deriving from the execution of contracts, subjects whom the right to access the data is granted by provisions of law or regulations, other subjects provided by law.
The company, as Data Controller, informs the interested parties that the personal data may be transferred abroad to non-EU countries, in particular to Switzerland, a country considered safe by the European Guarantors, within and within the limits set by the art. 44 and following of the 2016/679 EU regulation.
RETENTION OF PERSONAL DATA
The collected data will be duly stored for a maximum period that can be quantified in 10 years or for a variable term, according to the balancing criteria of legitimate business interests (related to tax audits, any special commercial correspondence, such as special litigation, disputes, arrears, legal aspects, periodic purchase, statistical, productive, quality purposes).
RIGHTS OF THE INTERESTED PARTIES
Pursuant to art. 13, par.2, lett. b), c), d) of the EU Reg. 2016/679, it is possible to contact the Data Controller to assert the following rights regarding the processing of personal data:
- right of access (Article 15);
- right of rectification (art.16);
- right of cancellation (art.17);
- right of limitation (Article 18);
- right to data portability (Article 20)
- right to object (art.21)
- right to lodge a complaint with a supervisory authority (Article 77);
- right to withdraw the consent, in the cases provided for by art. 6, par.1, lett. a) or by art. 9, par.2, lett. a)
To exercise these rights or for more information on the processing of your personal data, please contact the DPO (Data Protection Officer) by registered letter with return receipt to Borgomanero (NO) Viale Achille Marazza n . 30, CAP 28021 C/O PROGRAM LAB S.R.L.
Further information can be requested to DPO-NPIITALIASRL@PROGRAM.IT.