Informativa privacy clienti e fornitori

PRIVACY POLICY STATEMENT UNDER ARTICLES 13-14 OF THE GDPR (REGULATION (EU) 2016/679)

 

DATA CONTROLLER

IVELA srl con socio unico

Address: Via B. Buozzi, 15, 20050 Liscate (MI), ITALY

Telephone n. +39 02 9500121

Fax n. +39 02 95001205

E-mail privacy: infoprivacy@ivela.it

PEC certified email: pecivela@legalmail.it

VAT no. and tax code: IT 10889890157

Share capital: €3,000,000 fully-paid

Milan Chamber of Commerce

www.ivela.it

www.ialux.it
 

PRINCIPLES

One of our fundamental objectives is the protection of personal data.

The data are processed in a lawful, proper and transparent manner, must be adequate, relevant and limited to what is necessary, accurate and, if necessary, updated, collected for specific, explicit and legitimate purposes pursuant to articles 5 and 6 of the EU Data Protection Regulation 2016/679 and based on the provision of consent where needed.

The data are processed in such a way as to ensure their adequate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage (integrity and confidentiality) through appropriate technical and organizational measures.

We notify users in the event of substantial changes to this Privacy Policy and the related data processing, providing the option to authorize us or otherwise to process the data for the purposes set out below.
 

SOURCES OF PERSONAL DATA

Collected from the Data Subject:

 Offices of the Data Controller;

 Offices of the Data Subject;

 Web pages and/or social profiles of the Data Controller;

 Trade shows and/or other events that the data Controller participates in.

NOT collected from the Data Subject:

 Private Databases (Credit Information Systems, etc.);

 Public Databases (Telephone Directories, Lists of Members of Orders or Registers, Chambers of Commerce, Other Lists, etc.);

 Internet / Search Engines/ Social Networks;

 Specialist Trade Journals.
 

CATEGORIES OF DATA SUBJECTS

 Customers, potential customers, users: legal persons and other operators in the sector, including workers and similar of Customer Companies and potential Customers.

 Suppliers, potential suppliers: legal persons and other operators in the sector, including workers and similar of Supplier Companies and potential suppliers.
 

CATEGORIES OF PERSONAL DATA PROCESSED

COMMON

Identification, accounting, tax and trading data, contact data: of Legal Entities, herein including data relating to the employees and equivalent, company representatives, shareholders, etc, data of customer Companies and potential customers / Supplier Companies and potential suppliers.

DATA PROVIDED BY THE USER IN THE CONTACT FORM ON THE WEBSITE www.ivela.it; www.ialux.it (and sub-domains)

Identifying and contact information and any other information provided by the Data Subject (name and surname, address, country, occupation, e-mail address, reason for the request-message).
 

PURPOSES OF THE PROCESSING

1. EXECUTION OF PRE-CONTRACTUAL MEASURES

DESCRIPTION OF THE PURPOSES

Purposes connected to the establishment of negotiations and the execution of pre-contractual measures, such as:

 information, consulting, feasibility, quotations, assistance, monitoring of quotation status, measurement of satisfaction limited to the management of the request and precontractual negotiations, etc.;

 sending of catalogues, white papers, registration for events, etc;

 to enable the access to the reserved area of the website www.ivela.it and to use its features (e.g. to place orders);

 including the necessary processing of other Parties used for promotion, placement and conclusion of the contract. These Parties contribute to the proper and complete management of requests (commercial sales network).

LEGAL BASIS FOR PROCESSING

 Execution of pre-contractual measures;

DURATION OF THE PROCESSING AND STORAGE PERIOD

 for the period strictly necessary for the proper and complete management of the request/negotiation.

 subsequently for a period of 12 months, except for further processing and storage upon the specific request of the Data Subject, the halting of processing and deletion.

2. EXECUTION OF CONTRACTUAL MEASURES.

DESCRIPTION OF THE PURPOSES

Purposes connected to the establishment, fulfilment, execution and termination of the contract which involves:

 conclusion of the contract and relative execution of obligations deriving from the contract, its performance and/or its termination;

 administration, accounting, contract management, orders, shipment, services, invoicing, complaints, and anything else necessary;

 including the necessary processing of other Parties used for promotion, placement and conclusion of the contract. These Parties contribute to the proper and complete management of requests (commercial sales network).

LEGAL BASIS FOR PROCESSING

 Execution of contractual measures;

DURATION OF THE PROCESSING AND STORAGE PERIOD

 Duration for the period strictly necessary for the proper and complete management of the establishment, execution and termination of the contractual relationship or assignment.

After the termination of the contract, longer retention dictated by legal provisions.

3. LEGAL OBLIGATIONS.

DESCRIPTION OF THE PURPOSES

Fulfilment of precise obligations envisaged by regulations and applicable European and national laws.

LEGAL BASIS FOR PROCESSING

 Compliance with legal obligations.5

DURATION OF THE PROCESSING AND STORAGE PERIOD

Duration and Storage dictated by legal provisions.

4. DEFENSIVE RIGHTS.

DESCRIPTION OF THE PURPOSES

Assessment, exercise or defense of the rights of the Data Controller, both in and out of court

LEGAL BASIS FOR PROCESSING

 Legitimate Interest of the Data Controller.

DURATION OF THE PROCESSING AND STORAGE PERIOD

Duration of the in- or out-of-court dispute until the claims are time-barred.

5. SO CALLED SOFT SPAM

DESCRIPTION OF THE PURPOSES

Communications by e-mail for the purpose of the direct sale of products or services similar to the object of a previous contract with the Customer.

LEGAL BASIS FOR PROCESSING

 Legitimate Interest of the Data Controller (LIA) for legal persons and pursuant to art. 130, paragraph 4 of the Italian Privacy Code for natural persons;

 in the absence of initial refusal and without prejudice to the right to object at any time.

DURATION OF THE PROCESSING AND STORAGE PERIOD

12 months from the last contract between the Parties;

 at expiry, halting of processing and / or deletion and only statistics in aggregate mode.

6. NEWSLETTER

DESCRIPTION OF THE PURPOSES

Sending of the Newsletter via e-mail.

Please note that statistical tracking systems may be used for the Newsletter email (which are currently sent through the MailUp® platform), to show whether the message has been opened and the links (hypertext connections in the e-mail) clicked, in particular identifying their quantity and data according to the technical specifications based on said platform’s Privacy Disclosure (https://mailup.com/privacy-statement/).

LEGAL BASIS FOR PROCESSING

 Consent (optional and may be withdrawn at any time using the link included in all the e-mails).

DURATION OF THE PROCESSING AND STORAGE PERIOD

as long as the Data Subject subscribes to the Newsletter /up to 24 months from the expression of the Consent or until its revocation.

 at expiry, halting of processing and / or deletion.
 

METHOD OF CONTACT

Traditional:

 Telephone;

 Standard mail.

Automated:

 Fax;

 Text message;

 Chat or messaging systems (WhatsApp and other comparable instant messaging solutions);

E-mail.
 

RECIPIENTS OF THE DATA

The data may be disclosed and processed by external parties acting as data controllers such as, by way of example:

Italy:

  1. Authorities and supervisory and control authorities;
  2. Police and judicial authorities;
  3. Parties who are transferees of a company, of a business unit, of legal relationships that can be identified as a whole or of individual legal relationships (e.g. the transfer of receivables, contracts);
  4. Public and private databases, including Fraud Prevention, Identity Theft, etc.;
  5. Tax records;
  6. Partis that offer professional consulting services, including in associated form;
  7. Public and private databases for the verification of solvency;
  8. Insurance companies;
  9. Banking institutions;
  10. l. Financial institutions;
  11. m. Adjusters and liquidators;
  12. n. Law firms;
  13. o. other professional insurance intermediaries.

The data may also be processed on IVELA’s behalf by external parties designated as data processors, to which appropriate operating instructions are given. These parties are essentially included in the following categories:

Italy:

  1. Parties that carry out control, review and certification activities, including in the interest of customers;
  2. Agents or other commercial entities authorized to distribute our products and services based on their territorial coverage corresponding to the same area as the customer or potential customer
  3.