Privacy Policy
Dear User,
Pursuant to Article 13 of Legislative Decree 196/03 and EU Regulation 679/2016 going into effect, in accordance with the regulations specified in Art. 13 of the aforementioned European Regulation, we wish to inform you of the following:
Purpose of the data processing:
Through your activities on the website, your personal data can be voluntarily communicated to us. In order for ECO CERTIFICAZIONI S.p.A. to carry out the activities you request, your personal data will be processed in a lawful and correct manner for administrative, accounting and commercial purposes.
Your data do not belong to the “sensitive” category, but may include “judicial” data in the event of a dispute.
We remind you that sensitive data refer to “any personal data that may reveal racial or ethnic origin; religious, philosophical or other beliefs; political opinions; membership to parties, trade unions, religious, philosophical, political or other labour associations or organizations; as well as personal data disclosing health, biometrics, or sexual orientatation or habits.” Judicial data refer to “personal data disclosing the elements referred to in Art. 3, paragraph 1, letters a) to o) and r) to u) of Presidential Decree 313/2002; such data concerns criminal records, offence-related administrative sanctions and the relevant current charges, or the status of being either a defendant or the subject of investigations pursuant to Articles 60 and 61 of the Italian Criminal Code.”
Data processing methods:
Compliant with the necessary security and confidentiality measures, your data will be processed through the following methods: directly from the data subject or by electronic means such as email. In these cases, data will be collected and recorded for specific, explicit and legitimate purposes and used in other processing operations compatible with these purposes. The processing will be carried out with and without the aid of electronic and automated tools; the storage of data will take place so as to allow the identification of the interested party for a period of time that shall not exceed what is indicated below.
Legal basis of the data processing:
The legal basis of processing your personal data derives from a contract signed between the parties or an awarded contract (counter-signed order).
Legitimate interests pursued by the Data Controller:
Pursuant to art. 6, the lawfulness of the processing is based on the data subject’s expressed consent.
Compulsory or optional nature of data provision and consequences of refusal:
The provision of your data is mandatory in order to deliver the requested products/services; if you should refuse, it will be impossible for us to offer you the the aforementioned products/services.
Communication of data to third parties:
Your data may be disclosed as a result of inspections or verifications (if required), to all the inspection bodies responsible for verifications and checks concerning compliance with legal requirements.
Your data may also be communicated to companies/professional firms that provide assistance and consultation in accounting, administrative, tax, legal, and financial matters.
Storage period:
Your personal data will be stored for 10 (ten) years from the termination of the supply relationship.
Existence of an automated decision-making process:
There is no automated decision-making process, thus data are not subject to profiling.
Intention of the Data Controller:
The Data Controller will not transfer your personal data to a third country or international organization.
Data Controller and Data Processor:
The data controller is ECO CERTIFICAZIONI S.p.A., with registered offices in Faenza (RA), in via Mengolina n. 33, in the person of Carlo Farina.
Contact details of the Data Controller, email: info@eco-cert.it
The person in charge of data processing and replying to the data subject should he/she decide to exercise his/her rights is Mr. Stefano Minguzzi.
The data subject may at any time exercise the rights reserved to him/her, sanctioned by art. 7, the full text of which is copied below.
Art. 7 of Legislative Decree 196/2003 and Art. 15 of EU Regulation 679/2016 – Right of access by the data subject –
The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him or her are being processed, and where that is the case, access to the personal data in intelligible form. The data subject has the right to obtain the following information: the origin of the personal data; the purposes and methods of their processing; the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved; the identity of the data controller, of the data processor and of the representative appointed under article 5, paragraph 2; the recipients or categories of recipient to whom the personal data have been or will be disclosed, or those who can access them as appointed representative, processor or agent in the given jurisdiction of the country. The data subject has the right to obtain: the updating, rectification or, when desired, integration of data; the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; certification that the aforementioned operations were made known, including their contents, to those to whom the data were communicated or disclosed, except where this is impossible or involves a commitment of resources clearly disproportionate to the protected right. The data subject has the right to object in whole or in part: to the processing of his/her personal data for legitimate reasons, even if the data are relevant to the collection purpose; to the processing of personal data for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
In particular, the data subject can ask the Data Controller for access to and rectification or erasure of personal data or restrictions on processing his/her data, or to object to the processing, as well as the right to data portability. The data subject has the right to withdraw his/her consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation and has the right to lodge a complaint with a supervisory authority.
Such rights can be exercised by writing to the e-mail address: info@eco-cert.it