Privacy Notice for Customers and Suppliers pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR)

VALID PLASTIC SRL, represented by its pro tempore legal representative, pursuant to and for the purposes of Article 13 of EU Regulation 2016/679, hereby informs the data subjects about the purposes and methods of processing the personal data collected, their scope of communication and dissemination, as well as the nature of their provision.

Personal Data Processed and Purpose of Processing

The personal data subject to processing, specifically identification, administrative, accounting and tax, commercial, and potentially IT data, directly related to the supplier or, in the case of primarily identifying or IT data, to the data subjects (such as collaborators, employees, representatives, etc.) communicated for the execution and management of relations with the data controller, in compliance with applicable data protection legislation, are used:

• To fulfill purposes instrumental and functional to the execution of pre-contractual and/or contractual relationships, which include sourcing new partners, managing orders, procurement of goods or services (including professional and specialized services), and related activities such as filing, invoicing, processing, and record-keeping. In these cases, it is the responsibility of the supplier to make this privacy notice accessible to its collaborators, employees, representatives, etc.;

• To comply with legal obligations (e.g., accounting and tax obligations).

Nature of Data Provision

The provision of data is mandatory for obligations required and sanctioned by law. Any other provision is optional but necessary; refusal by the data subject makes it impossible for the Controller to establish or execute the relationship.

Legal Basis for Processing

The legal basis for processing the above-mentioned data for the purposes outlined is the execution of contractual or pre-contractual obligations and/or compliance with legal requirements.

Methods of Processing

Data processing is carried out using IT procedures, telematic means, or manually with paper records, by internal or external personnel specifically appointed and authorized, bound to confidentiality. Data are processed and stored using tools suitable to guarantee security, integrity, and confidentiality, implementing appropriate security measures as required by law.

Communication and Disclosure, Recipients

Collected data will not be publicly disclosed. Data may be communicated to third parties other than the Controller, internal representatives, external managers, or authorized data processors only to fulfill legal obligations or, if necessary for the purposes described and within their limits, to third-party entities such as legal and sector consultants, banks, insurance companies, debt collection and contractual consultants, freight forwarders, third-party suppliers and technical/IT support providers, and IT companies (Data Centers, Cloud Providers, providers of IT services such as cloud, backup, management and maintenance of devices and software, services and platforms delivering streaming content, video, and images online or offline, etc.) involved in ensuring security and confidentiality of data, even outside the European Economic Area. In any case, processing by third parties must be carried out lawfully and in compliance with current legislation.

Transfer of Data Outside the European Economic Area

For the purposes of the processing described above, data will not be transferred abroad or processed by third-party entities outside the European Economic Area.

Retention Period

Data will be processed and stored for the time necessary to fulfill administrative, accounting, and tax purposes related to the contractual relationship between the Controller and the supplier and to meet legal obligations. In any case, retention will not exceed statutory prescription periods relevant to the rights and obligations associated with processing, even after the termination of the contractual relationship, and for any disputes arising in the meantime if longer.

Rights of the Data Subject

The data subject may exercise the rights provided under Articles 15 to 22 of EU Regulation 2016/679 by contacting VALID PLASTIC SRL at:
Address: Via Colle Prato 5, Strangolagalli, Italy
Email: postmaster@pec.validplasticsrl.it

Specifically, under applicable law, the data subject has the right to:

a) Obtain:

• Information on the origin of personal data, the purposes and methods of processing, the legal basis, the logic applied in automated processing, and the significance and consequences of such processing;

• Identification details of the Data Controller and Data Processors;

• Information on the recipients or categories of recipients of the data;

• Information on the retention period of personal data or, if not possible, the criteria used to determine it;

• Access, update, correction, or integration of personal data;

• Deletion without undue delay or limitation of processing;

• Data portability in a commonly used, machine-readable format and the right to transfer to another Controller, where technically feasible;

• Certification that the above operations have been communicated to recipients, unless impossible or requiring disproportionate effort.

b) Withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal;
c) Lodge a complaint through legal channels or directly with the supervisory authority;
d) Object, in whole or in part, at any time to processing for commercial information, advertising, direct sales, market research, or commercial communication.

Data Controller

VALID PLASTIC SRL (VAT No. 01607350608), Via Colle Prato 5, Strangolagalli, Italy.
Authorized contacts are designated according to this regulation.
Email for inquiries: amministrazione@validplasticsrl.it
Email for exercising rights: postmaster@pec.validplasticsrl.it

Changes and Updates

This privacy notice may be amended or supplemented, also as a result of updates to applicable legislation on the protection of personal data and the free movement of such data.

Privacy