Privacy

Pursuant to Art. 13 of the GDPR (Regulation (EU) 2016/679), and in line with the principles of fairness, lawfulness, transparency and confidentiality, the following information is provided so that the data subject is aware of the characteristics and methods of data processing and of the confidentiality obligations to which the Controller is bound:

A – Identity and contact details. The data “Controller” is: Deltamax Automazione S.r.l., registered office at Via Kufstein, 5 – 38121 Trento (TN), Italy, tel. +39 0461 042301, email info@deltamax.eu

B – Data collected, purposes of processing and legal basis. The Controller processes the personal data you provide voluntarily, both common data (such as your identification and contact details, etc.) and special categories of data. Identification and contact details will also be used to fulfil your requests and answer your questions. If the Controller uses the email address you provided in the context of the sale of a product or service for the direct marketing of its own products or services, it may do so without requesting your consent, provided that these are services similar to those sold. You may object to such use at the outset, on the occasion of subsequent communications, or by contacting the Controller, in accordance with the data subject’s rights under Articles 15 and 16-21 of the GDPR, which are listed in full in the relevant section of this notice.

1. DATA SUBJECTS: Customers

TYPE OF DATA: COMMON DATA: identification data, contact details, tax code / VAT number, bank details. Data contained in the documents relating to the requested service

PURPOSE OF PROCESSING: Preparation of quotations or information at the data subject’s request; Fulfilment of contractual obligations; Fulfilment of tax and accounting obligations; Debt collection / Dispute management

LEGAL BASIS OF PROCESSING: Pre-contractual measures; Performance of a contract; Compliance with a legal obligation; Legitimate interest of the Controller (Art. 6(1)(b))

2. DATA SUBJECTS: Prospective customers

TYPE OF DATA: COMMON DATA: identification data, contact details, tax code / VAT number

PURPOSE OF PROCESSING: Preparation of quotations or information at the data subject’s request

LEGAL BASIS OF PROCESSING: Pre-contractual measures; Performance of a contract; Legitimate interest of the Controller (Art. 6(1)(b))

3. DATA SUBJECTS: Suppliers

TYPE OF DATA: COMMON DATA: identification data, contact details, tax code / VAT number, bank details

PURPOSE OF PROCESSING: Requests for information, quotations, drafting of contracts and management of business relationships; Fulfilment of contractual obligations; Fulfilment of tax and accounting obligations; Dispute management

LEGAL BASIS OF PROCESSING: Pre-contractual measures; Performance of a contract; Compliance with a legal obligation; Legitimate interest of the Controller (Art. 6(1)(b))

4. DATA SUBJECTS: Job applicants

TYPE OF DATA: COMMON DATA: identification data, contact details, photograph, qualifications, work experience. SPECIAL CATEGORIES OF DATA: possible membership of protected categories

PURPOSE OF PROCESSING: Search, selection and assessment of staff for possible recruitment

LEGAL BASIS OF PROCESSING: Consent of the data subject (Art. 6(1)(a))

C – Recipients or categories of recipients of personal data. Data are processed by the Controller and by any persons authorised to process data under the Controller’s responsibility, according to the purposes above and the resulting obligations, including legal and regulatory ones. Data may be disclosed to any natural and/or legal persons, public and/or private, that are essential for the purposes listed in section B, such as: freelance professionals, accounting firms, insurance companies, banks for the management of collections and payments, couriers or transport companies, companies and law firms for the protection of contractual rights and/or debt collection, legal, administrative and tax consultancy firms, judicial offices, data processing and IT service companies (e.g. web hosting, data entry, management and maintenance of IT infrastructure and services, etc.). These parties will process your personal data as data Processors, on the basis of specific contractual guarantees under which they undertake to comply with the Controller’s instructions on data protection. The complete and up-to-date list of Processors is kept at the Controller’s premises and may be obtained by sending a written request to the contact details given in the “Identity and contact details” section of this notice.

D – Transfer of data to third countries and profiling. The Controller will not transfer data to a third country or to an international organisation, except where there is an adequacy decision by the Commission, and does not use automated processes for profiling.

E – How and for how long your data are kept. Your data are processed using both electronic and manual means and tools made available to persons acting under the authority of the Controller, who are authorised and trained for this purpose. The paper and, above all, electronic archives in which your data are stored are protected by effective security measures appropriate to counter the risks of breach identified by the Controller. The Controller regularly and constantly checks the measures adopted, especially for electronic and telematic tools, to guarantee the confidentiality of the personal data processed, archived and stored through them, particularly if they belong to special categories. Personal data are kept for the time necessary to carry out the activities related to the purposes for which they are collected and processed:

• Data under B no. 2 – for activities that have not given rise to contractual obligations: 48 months
• Data under B no. 1 and 3 – for as long as the Controller is subject to retention obligations for tax or other purposes required by law or regulation, and for the Controller’s defence needs: 10 years
• Data under B no. 4 – for the search and selection of qualified staff: 12 months

F – Rights over your data. Under Articles 15-22 of the GDPR, with regard to the personal data provided, you have the right at any time to request access to your personal data, their rectification, erasure or restriction, to object to processing, to withdraw the consent given and to exercise the right to data portability, where applicable. The right to object to the processing of your personal data may be exercised at any time, with the consequence that your personal data will no longer be processed for the specific purposes, without affecting the lawfulness of processing based on consent before its withdrawal. To exercise your rights and withdraw your consent, you can send a communication to the Controller’s address. Please note that you have the right to lodge a complaint with the supervisory authority of the Member State in which you habitually reside (in Italy, the Garante per la protezione dei dati personali – www.garanteprivacy.it).

G – Legal basis and legitimate interest. The Controller processes your personal data lawfully where processing is necessary for the performance of a contract to which you are a party, or to comply with a legal obligation to which the Controller is subject. Failure to provide the data will make it impossible to provide the requested service. Where the legal basis is freely given consent, refusal to provide the data does not prevent the performance of the contract.

H – Different purpose of processing. If the Controller intends to further process your personal data for a purpose other than that for which they were collected, it must, before such further processing, provide you with information on that other purpose and any other relevant information.