Informativa per clienti/fornitori
Information for customers / suppliers
Dear Customer / Supplier (interested),
We wish to inform you that Regulation (EU) 2016/679 ("GDPR") provides for the new regulation for the protection of people and other subjects regarding the processing of personal data.
According to the legislation indicated, the processing will be based on the principles of lawfulness, correctness and transparency and the protection of your privacy and your rights, according to the principles contained in art. 5 of the GDPR.
Pursuant to art. 13 of the GDPR, we therefore provide you with the following information:
Identity and contact details of the Data Controlling companies and the Data Processor.
The Joint Data Controllers are Ikon s.r.l. (parent company), Juicy s.r.l., Trixel s.r.l. (jointly owned companies). These companies operate as Data Controllers, having jointly determined the purposes and means of the processing as protected by the existing intra-group agreements. The companies can be contacted at the registered office in Strada San Canciano, 6 - 34079 Staranzano (GO); by writing to the following email address: info@ikon.it; or by calling 0481.483737.
The Data Protection Officer pursuant to articles 37 and following GDPR of the company is identified in the figure of the company ONEMORE S.R.L. (referent Ilaria Galante) located in Via Carnia, n. 1, Rodeano Alto, Rive D'Arcano (UD), whose contact details are as follows: e-mail dpo@gruppopk.com; PEC: onemore@pec.pratikasrl.com.
Purpose of the processing.
The personal data collected will be processed and used for the following purposes:
Contractual purposes
conclude the contracts for the services of the Data Controller;
fulfill the pre-contractual, contractual and tax obligations deriving from relationships with you;
fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
exercise the rights of the owner, for example the right to defense in court;
The provision of data and the processing of the same, including the communication, for these purposes, necessary for the management of the contractual relationship or for the fulfillment of regulatory obligations, is mandatory and does not require your explicit consent, under penalty of impossibility for the writer to establish and manage the contractual relationship.
Commercial purposes
send you by e-mail, post and / or sms and / or telephone contacts newsletters, commercial communications and / or advertising material on products or services offered by the Owner and detection of the degree of satisfaction with the quality of services.
We would like to point out that being you already our customers, we will be able to send you commercial communications relating to the owner's services and products similar to those you have already used.
Processing of personal data for profiling purposes
It is possible that for marketing purposes and to improve services, the Company processes so-called "profiling" data to evaluate certain aspects or to analyze or predict aspects concerning the economic situation, preferences, interests, reliability, etc.
Fundamental elements of the Profiling Treatment will be:
1) the predetermination of the parameters for structuring the data considered individually;
2) comparison, cross-referencing, correlation of these data with each other and comparative analysis carried out on the basis of predefined parameters, also by means of automated processes (i.e. the cataloging of individual data in clusters);
3) obtaining a profile through the above activities and which allows identifying the Company and the additional analytical indications with respect to the individual data and allows the dynamic creation of profiles.
This processing is carried out on the basis of the legitimate interests of the Data Controller for the maintenance of existing contractual obligations.
Methods of data processing.
In relation to all the aforementioned purposes, the processing of data will take place in order to guarantee security and confidentiality, and may be carried out through manual, IT and telematic tools in order to register, organize, store, process, modify, select, extract, compare, use, interconnect, block and communicate the data.
Categories of subjects to whom the data can be transmitted.
For the pursuit of the prescribed purposes, your personal data will be processed by the duly authorized personnel of the IKON Group companies. The updated list of authorized personnel is kept at the registered office of the Data Controller; these subjects have been specifically appointed as Managers or Persons in charge of the Treatment.
There is also, for certain activities, the need to communicate your personal data to third parties belonging to the following categories: external consultants, accountants, lawyers, credit institutions, service and consultancy companies and to third parties, in charge of carrying out activities directly connected and instrumental to the provision of the services of or with which the Company has entered into commercial agreements functional to the dissemination and development of the services to be provided.
The subjects belonging to the categories listed above operate in complete autonomy as separate Data Controllers, or operate as Data Processors (external) appointed for this purpose by the companies of the IKON Group.
Transfer of data abroad.
Your personal data being processed may be transferred abroad, within and / or outside the European Union, always in compliance with the rights and guarantees provided for by current legislation.
Data retention times and other information.
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the Service Purposes relationship and for no more than 2 years from the collection of data for Marketing Purposes.
Rights of the interested party
The interested party may obtain confirmation from the Company of the existence or not of personal data in the Company's databases.
In your capacity as an interested party, you are the owner of the rights referred to in articles 15 and following of the GDPR and precisely: the right to obtain from the Data Controller confirms whether or not your personal data is being processed; may also request and obtain the correction or cancellation of the same or the limitation of the treatment that concerns him; the interested party may oppose the treatment; the interested party also has the right to data portability; to withdraw consent (except in cases where processing is necessary to fulfill a legal obligation to which the Data Controller is subject or for the execution of a task of public interest or connected to the exercise of public powers with which it is invested the data controller);
Finally, the interested party has the right to lodge a complaint with the supervisory authority (Privacy Guarantor).
How to exercise your rights
You can exercise your rights at any time by sending:
- a registered letter with return receipt to IKON S.R.L. in Strada San Canciano, 6 - 34079 Staranzano (GO) - Registered Office
- an e-mail to info@ikon.it