Supplier information

Pursuant to art. 13 of the European Regulation n. 2016/679 (GDPR) we inform you that, in compliance with current legislation, every operation concerning the personal data collected will be based on the principles of correctness, lawfulness and transparency.
The processing of your personal data will be carried out using paper and electronic methods, and will be carried out on behalf of the Data Controller ALCAS SpA, in the person of its legal representative pro tempore, responsible towards you for the legitimate and correct use of your personal data and who you can contact for any information or request at the following contact details:

ALCAS SpA
Registered office: Via Livorno, 21/23 – 50142 Florence (FI), IT
Offices and Warehouse: Via dell'Industria, 13/15 – 50056 Montelupo Fiorentino (FI), IT
Telephone numbers: 055 732591 & 0571 59561
 E-mail addresses: info@alcas.it & privacy@alcas.it

PURPOSE OF THE PROCESSING, DATA PROCESSED AND LEGAL BASIS
The following personal data of yours are collected and processed for the purposes indicated below together with the legal basis of reference:

  • Purpose : Supplier management;
  • Data processed : Tax code and other personal identification numbers; Name, address or other personally identifiable information; Contact details (telephone number, email, etc.);
  • Legal basis : the fulfillment of contractual and pre-contractual obligations with the interested party for the stipulation and execution of supply contracts (art.6, paragraph 1, letter b GDPR) / The fulfillment of legal obligations in tax matters and tax (art. 6, paragraph 1, letter c GDPR);

NATURE OF THE PROVISION AND CONSEQUENCE OF REFUSAL
The provision of data for purposes relating to the fulfillment of pre-contractual and contractual obligations and legal obligations in fiscal and tax matters is mandatory. In their absence, we will not be able to proceed with the establishment and execution of the contractual relationship.

COMMUNICATION OF PERSONAL DATA
 For the purposes mentioned above, your data will be accessible to employees and collaborators of the Data Controller, in their capacity as representatives and/or system administrators.

Furthermore, the data will be communicated to other third parties and/or external parties who carry out activities on behalf of the Data Controller, in their capacity as external data controllers. By way of example: consultants and freelancers in single or associated form (for example, accountant), banks and credit institutions, companies and businesses operating in the field of accounting, tax services and logistics.

The updated list of external managers can be constantly checked by contacting the Data Controller by email at the addresses indicated above.

We also inform you that, without the need for express consent (ex art. 6, par. 1, letter b) and c) GDPR), the Data Controller can communicate your data to: Supervisory Bodies (such as IVASS), Judicial Authorities, Insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes. These subjects will process the data in their capacity as independent data controllers.
Your information will not be disseminated.

DATA TRANSFER
 Your data will not be transferred to third countries not belonging to the European Union.

EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING
The Data Controller does not adopt any automated decision-making process, including profiling, referred to in the art. 22, paragraphs 1 and 4 of the GDPR.

STORAGE
 In compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR, your data will be kept for the time necessary to fulfill the aforementioned purposes (fulfillment of administrative, accounting and tax purposes relating to the contractual relationship existing between the Data Controller and the supplier; fulfillment of the related legal obligations).

In particular:

  • for the entire duration of the contract;
  • for 10 years after the termination of the contract (art. 2220 cc which provides for the obligation to conserve accounting records, invoices and commercial correspondence);
    in the case of legal disputes: for the entire duration of the same, until the deadlines for appeals have been exhausted.

RIGHTS OF THE INTERESTED PARTY
In your capacity as an interested party, you have the rights provided for by the articles. from 15 to 22 of the GDPR. In particular, the right to:

  • ask for confirmation of the existence or otherwise of your personal data;
  • obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
  • object to processing at any time and also in the case of processing for direct marketing purposes;
  • oppose an automated decision-making process relating to natural persons, including profiling;
  • ask the data controller for access to personal data and the rectification or cancellation of the same or the limitation of the processing that concerns you or to oppose their processing, in addition to the right to data portability, i.e. to receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without impediments;
  • revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

You can exercise your rights by sending a request via email to the above email addresses of the Owner.

Furthermore, you have the right to lodge a complaint with the competent Supervisory Authority: Guarantor for the protection of personal data ( www.garanteprivacy.it ).

CHANGES AND UPDATES
This information may be subject to changes and additions, also as a consequence of the updating of the applicable legislation relating to the protection of natural persons with regard to the processing of personal data as well as the free circulation of such data.