privacy

IMD GENERATORS SRL, registered office Viale Matteotti 28/A – 24050 – GRASSOBBIO (BG) VAT number 02191860135 (hereinafter, “Controller”), acting as data processor, informs You (hereinafter, “Data subject”) that – as per article 13 of the EU Regulation 679/2016 (hereinafter “GDPR”) – Your data will be processed for the purposes and with the modalities as follows.


PROCESSING SUBJECT-MATTER
The Controller processes the personal data (by way of example, non-exhaustive: name, surname, business name, address, telephone, fax, e-mail, identification documents, bank details) communicated by You in occasion of the conclusion of contracts for the Controller’s services and/or the conclusion of contracts with
the Controller.


PROCESSING PURPOSES
Your data shall be processed without your consent – according to article 6 of GDPR – for the followingpurposes:

  • concluding contracts for the Controller services
  • fulfilment of precontractual, contractual and fiscal obligations deriving from the business on going
    with You
  • fulfilment of legal obligations
  • exercising Controllers’ right, for instance the right of defense

 

PROCESSING MODALITIES
The processing of Your data shall be performed through the operations as reported in the article 4 of the GDPR, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval,
consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The aforementioned operation shall be performed on personal data or on sets of personal data, whether or not by automated means and made available to Third Parties within the European Union – duly contractualized by the Controller – which offer appropriate safeguards, mandatory for providing services necessary for the fulfilment of Your requests. Such Third Parties – whose list is available upon request – may belong to categories of subjects that support the Controller in the performing of its services.

 

DATA RECIPIENTS
Your data will be made available for the purposes above to:

  • shareholders, employees and partners of the Controller, in the capacity of Responsibles,Appointees, System Administrators
  • third companies and other subjects (by way of example, non-exhaustive: Banks and Financialinstitutes, Professional Firms, Suppliers, Consultants, group companies) that perform activities on behalf of the Controller
  • entities to whom the communication is mandatory for the fulfilment of legal obligations.

 

DATA TRANSFER
Your data will be stored on a server located in the registered office and the place of business of the Controller, within the European Union. In the case a transfer to an extra-EU server should be required, the Controller guarantee that the transfer will take place abiding by the current laws applicable.
Your data may be made available to our appointees; third companies; firms which perform professional services on our behalf.
Your data will be communicated by Us, to the subjects above in accordance with the principles of proportionality, necessity e lawfulness.

 

DATA STORAGE
The Controller shall process your data for the period requested for the fulfilment of the purposes above. In any case, Your personal data will be kept no longer than ten years after the end of the Agreement.

 

NATURE OF DATA PROVISION
Data provision for the aforementioned purposes without Your consent is mandatory: in their absence, the required services can not be guaranteed.

 

RIGHTS OF THE DATA SUBJECT
As subject of data processing, You have the rights as per artt. 15-21 of GDPR and, precisely, the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

 

RIGHTS EXERCISING MODALITIES
You can exercise Your rights by contacting us at the following address:
Controller IMD GENERATORS SRL
Address VIALE MATTEOTTI 28 A – 24050 – GRASSOBBIO – BG
Phone number 035526344
E-mail info@imdxray.com