Legal Basis:
The processing of data is carried out in compliance with the following legal principles (Art. 6, Para. 1, letters b, c, f):
- Fulfillment of contractual obligations;
- Legal obligations to which the data controller is subject;
- Legitimate overriding interest of the controller or third parties to whom the data is communicated.
Purpose of Data Processing:
The processing is aimed at:
- The correct and complete execution of the professional assignment received;
- Compliance with current administrative, accounting, and tax obligations;
- Sending service communications (mailing/phone calls).
Nature of Data Provision:
The data collected will be used by F.G.M. for the complete and correct execution of the contract; for this processing, it is not necessary to obtain the consent of the data subject.
Any refusal to provide such data will result in F.G.M. being unable to provide the service, insofar as the data is necessary for it.
Data Recipients:
The personal data subject to processing may be communicated, if necessary or functional to the management of the contractual relationship and to the pursuit of the legitimate interest of the controller, to the following parties:
- Authorities, public administrations, and supervisory and control bodies for their institutional purposes;
- Banks, credit institutions, and/or financial institutions for the payment of compensation;
- Private entities and professional firms dealing with matters related to the employment relationship (e.g., accountant);
- Licensed professionals for the study and/or resolution of potential legal and contractual issues;
- They may eventually be disclosed to third parties for the defense of rights, as well as in compliance with legal or regulatory obligations and at the request of the competent authorities.
Data Retention Period:
The data will be retained for the entire duration of the contract. Upon the expiration of this period, the company will archive all data for a period of ten years, as required by current legislation, after which the data will be permanently deleted from all archives. Data deletion, following the ten-year archiving period, will take place in the January following the expiration year.
Data Processing Methods:
Processing is carried out through operations, performed with or without the aid of electronic tools, and involves the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data.
Processing is performed by the data controller and authorized and specifically trained personnel for data processing management. F.G.M. declares that it does not transfer data to third countries and does not use automated decision-making processes for individuals, including profiling.
RIGHTS OF DATA SUBJECTS
In compliance with the obligations set forth by EU Regulation 679/2016 (Articles 15 to 22), Forging Group Monale Srl reminds individuals of their rights:
- To request confirmation as to whether or not their personal data is being processed;
- To obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom personal data has been or will be disclosed, and, where possible, the retention period;
- To obtain rectification and erasure of data;
- To obtain the restriction of processing;
- To obtain data portability, meaning to receive the data from a data controller in a structured, commonly used, and machine-readable format, and to transmit them to another data controller without hindrance;
- To object to the processing at any time, including in the case of processing for direct marketing purposes;
- To object to an automated decision-making process relating to individuals, including profiling;
- To withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
- To lodge a complaint with a supervisory authority.
Monale d’Asti, July 26, 2019
F.G.M. SRL