Introduction and general terms

The subject of the protection offered by every privacy REGULATION is the "processing of personal data". Before going into this information it is necessary to define what it means to "treat personal data" and to do so it seems to us that the best thing is to refer immediately to the EU Regulation 2016/679 (GDPR) which, in Art. 4 n.2) defines it as the activity of collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data that refer to persons identified or identifiable physical data.

As a natural person to whom the processed data refer (we could say "owner" of the personal data of reference), the EU Regulation 2016/679 defines it with the "interested" and reserves a series of rights and prerogatives in your favor.

The first of these rights is undoubtedly to be informed, in a clear and transparent manner, about the purposes and the ways in which they will be managed (to say it with the correct legal "treated") the personal data that, for various reasons, will provide the company directly or through this website.

This obligation of information is complied with by submitting to the interested parties' documents such as this which is being read, supplemented case by case, by other more specific information.

Purpose of the processing personal data

The company SVAD DONDI SPA carries out various treatments of personal data, referable to: Suppliers; Customers; Employees; Natural persons; External legal entities with which there are relations of supply of goods and/or services, and/or inter-company collaboration.

These treatments are carried out exclusively for the purpose of fulfilling the obligations connected with the establishment and maintenance of the aforementioned relationships for the various purposes envisaged by the regulations in force for the operation of the company and based on the following general principles:

1. Necessity - all the treatments and technologies used are organized in such a way as to minimize the use of personal and identification data and, whenever possible, anonymous data is used or methods that allow identification of the interested party only in case of necessity;
2. Purpose - the data and the relative treatments are acquired and carried out exclusively for the organizational-administrative purposes of the company;
3. Lawfulness - all the treatments carried out are carried out in accordance with laws and regulations;
4. Fairness and loyalty - the principle of fairness and loyalty concerns the guarantee of both data loyalty and the integrity of the methods of collection, storage and transmission;
5. Security and protection.

Without claiming to be exhaustive (the details will be contained in the specific information that will be provided from time to time), the processing performed by the company pursuant to art. 6 letter e) of the EU Regulation are: use of telematic and e-mail services for all purposes. Data dissemination will take place within the limits of essential information (principle of essentiality).

Obligatory or optional of providing personal data

The provision of the requested data is mandatory, as it is necessary for the realization of the organizational purposes, administrative procedures referred below. Any refusal to process such data could make it impossible to fulfill the contractual obligations.

The mandatory personal data to be provided, strictly necessary for the exercise of the following functions:

• adherence to specific and additional services, such as our newsletter and other similar information services on our business;
• fulfillment of orders and related activities;
• management of your requests: technical, commercial, on the progress of your orders and requests for information in a broad sense;
• making contact with the representatives of our services;
• evaluation request for your inclusion in our staff, by sending CVs.

The mandatory personal data are the following: name, surname and email address. In the cases provided, possible place and date of birth, residence, tax code.

Procedure for data acquisition and processing

The personal data of the owner/legal representative are acquired directly by the interested party. To guarantee the rights of the data subject, the processing of data is carried out according to the methods and precautions envisaged by current legislation, respecting the conditions of legitimacy of each request for data, following principles of correctness, transparency, protection of its dignity and of his privacy. The treatment can be carried out in paper form, or through computer and electronic tools, and the relative data will be kept in the archives present at the present company. In this case the data will be processed and stored according to the digital preservation technical rules indicated by the AGID. The paper data, on the other hand, according to the provisions of the conservation and waste plans indicated by the general direction of the archives at the Ministry of Cultural Heritage. The processing involves as main phases: collection, recording, organization, storage, processing, communication, dissemination and deletion of data when they cease to be necessary.

Can my data be communicated?

The subjects to whom the personal data may be communicated within the company are: the administrative manager, the data processor, the persons in charge of the administrative treatment, the human resources manager. Personal data, other than sensitive and judicial data, may be communicated to other private entities exclusively in the cases provided for by laws and regulations (in particular: software houses, INAIL, INPS).

Which is the period of storage of personal data?

The data will be stored at the company for as long as the service will be active and then, in the event of termination of the contract, the file will be retained for the mandatory retention period required by current legislation.

The data storage times (without any difference between paper and digital) are established by the relevant legislation.

• Data referable to documents subject to unlimited storage or for 50 years: bargaining, contract registers, work contracts, salary registers and other checks, consultancy liquidation.
• Data referable to documents subject to archiving for 6 years (with the obligation, however, to keep 1 copy per sample): requests for certificates and authorizations with respect to the use of the premises, leave applications and permits, requests for advance post-employment benefits, certifications for medical examinations.
• Data referable to documents subject to archiving for 1 year: (with the obligation, however, to keep 1 vintage per sample every 10 years), requests for access and copies of documents.
• All accounting-administrative documentation is subject to a 10 year conservation obligation.