Information on the processing of personal data of individuals, pursuant to art. 13 of the European Regulation 679/2016, concerning the protection of personal data.

 

Referring to the European Regulation 679/2016, applied starting from 25th May 2018, our company confirms its commitment to process the personal data of all the subjects with whom it comes into contact by virtue of the existing contract or to fulfil your requests, in compliance with the principles of correctness, lawfulness, transparency and protection of confidentiality.

With reference to such data, we inform you that:

  • The Data Controller is GBM Srl, with registered office in via Lago Maggiore 43 – 36077 Altavilla Vicentina (VI)

Any request for information regarding the protection of personal data can be addressed to the headquarters of the Data Controller or by e-mail to privacy@gbmcablaggi.it

 

  • Purpose of the processing
Purpose of the processing Legal basis of the processing
Supply of wiring, plug cables, pedals and related telecommunication services the processing is necessary for the implementation of a contract which the person concerned is part of or the execution of pre-contractual measures taken on request (Art. 6 c. 1, letter b))
Update on options and features of products and services the processing is necessary for the implementation of a contract which the person concerned is part of or the execution of pre-contractual measures taken on request (Art. 6 c. 1, letter b))
Billing the processing is necessary for the implementation of a contract of which the person concerned is part of and to fulfil a legal obligation (Art. 6 c. 1 lett b) and c))
Credit recovery the processing is necessary for the pursuit of the legitimate interest of the data controller which consists in the protection of the credit (Article 6 c. 1 letter f))
Fraud prevention, including IT the processing is necessary for the pursuit of the legitimate interest of the data controller which consists in the protection from fraudulent operations also carried out by third parties (Article 6 c. 1 letter f))
Direct marketing initiatives to customers who have ceased contractual relations with the company Legitimate interest of the Data Controller for the processing of personal data for direct marketing purposes, in compliance with the interests, rights and fundamental freedoms of the data subjects (ref. Recital 47, and Art. 6 c. 1 letter f))
Marketing initiatives for the acquisition of new customers Consent (Art. 6 c. 1 lett. a)

 

  • Processing methods

Data will be processed in written form and/or on magnetic, electronic or telematic support;

The provision of data is optional but failure to provide it may make it impossible to meet the contractual obligations and/or the requests of the interested parties.

  • Recipients of personal data

Without prejudice to the communications and dissemination carried out in execution of legal obligations, also for the purposes of credit protection and better management of our rights relating to the individual commercial relationship, exclusively for purposes related to contractual needs and / or to the satisfaction of your requests , data might be disclosed to:

–        our network of Italian and foreign agents (intra CEE)

–        credit institutions

–        credit recovery companies

–        credit insurance companies

–        commercial information companies

–        professionals and consultants

–        companies operating in the transport sector

–        sub-suppliers

 

  • Data storage

Data will be kept for the times indicated in the following table:

 

Concerned categories Storage times
Clients and Suppliers 10 years from the implementation of a contract or from the fulfilment of a pre-contractual request, or for other specific terms if required by the law
Data of customers who have ceased contractual relationships, for marketing purposes up to 7 years from the termination of contractual relationships
Candidate for recruitment 1 month from the end of the selection for recruitment

 

  • Rights of the person concerned

Referring to the data, natural persons may exercise the rights provided for in Chapter III, art. from 12 to 23 of the European Regulation 679/2016.

Here below the rights of articles 15 and 16 of the European Regulation 679/2016, remembering that the following rights may be exercised towards us:

 

1.The interested party has the right to obtain the confirmation from the Data Controller whether personal data are being processed, and in this case, get access to the data and receive the following information:

  1. a) purpose of the processing;
  2. b) the categories of the personal data in question;
  3. c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
  4. d) when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
  5. e) the existence of the right to ask the Data Controller to correct or delete personal data or limit their processing or to oppose the processing;
  6. f) the right to lodge a complaint with a supervisory authority;

 

2.The Data Controller provides, at the request of the interested party, a copy of the personal data processed. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.

 

  1. The interested party has the right to obtain from the Data Controller the correction of inaccurate personal data without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

 

  1. The interested party has the right to obtain from the Data Controller the deletion of personal data without undue delay if:
  2. a) the personal data are no longer necessary with respect to the purposes for which they were collected;
  3. b) the personal data have been unlawfully processed;
  4. c) the personal data must be deleted to fulfil a legal obligation under the law of the Union or of the Member State to which the data controller is subject;

 

Point 4 does not apply to the extent that the processing is necessary: for the assessment, exercise or defence of a right in court.

Download the document [PDF]