INFORMATION PURSUANT TO ARTICLE 13 OF THE 2016/679 EU REGULATION

Pursuant to and in compliance with the provisions of article 13 of the EU Regulation no. 679/2016 (hereinafter the "Regulation"), Poliedra srl (CF 09740830154 - VAT number: 00976740969), with registered office in Giussano (MB)  in via Ponchielli, 5 (hereinafter "Company"), provides the following information on the processing of personal data (hereinafter "Data") of its customers, suppliers (of goods and services), consultants, potential customers, potential suppliers and potential consultants (hereinafter "Customers / Suppliers" "Customer / Supplier") carried out by the Company, as Data Controller.

Data controller and contact methods

Pursuant to Article 4 of the Regulations, the Company is the data controller of the Data relating to Customers / Suppliers. For communications or requests, the Company can be reached by e-mail at [email protected] .

Categories and types of data collected and processed

The Data processed by the Company may include common Data collected for the purpose of concluding the contract with the Customer / Supplier and / or in the context of the execution and / or stipulation of the same. Furthermore, the processing of personal data of third parties communicated by the Customer / Supplier to the Company may occur. With respect to this hypothesis, the Customer / Supplier acts as an independent data controller and assumes the consequent legal obligations and responsibilities, indemnifying the Company from any dispute, claim and / or request for compensation for damage from processing that should reach the Company. by interested third parties.

Purpose and legal basis of the processing and nature of the provision of data

In compliance with current legislation on the protection of personal data and without the need for specific consent from the interested party, the Data will be stored, collected and processed by the Company for the following purposes:

1) fulfillment of contractual obligations, execution and / or stipulation of the contract with the Customer / Supplier and / or management of any pre-contractual measures. The legal basis of the processing for this purpose is Article 6, paragraph 1, letter b) of the Regulation;

2) fulfillment of any regulatory obligations, tax and fiscal provisions deriving from the performance of the business activity and obligations related to administrative and accounting activities. The legal basis of the processing for this purpose is Article 6, paragraph 1, letter c) of the Regulation.

The provision of data for the aforementioned purposes is optional, but failure to provide the data and the refusal of the Customer / Supplier to provide them would make it impossible for the Company to execute and / or stipulate the contract with the Customer / Supplier and provide the services requested by the same.

Methods of data processing

In relation to the indicated purposes, the processing of data takes place using manual, IT and telematic tools with logic strictly related to the purposes themselves and, in any case, with methods that guarantee the security and confidentiality of the data, in addition to compliance with the specific obligations established by legislation. The Data will be processed by the Company only where this proves necessary to correctly execute the contract or provisions contained in agreements and / or collective agreements and / or laws. The Data will be processed in compliance with the principle of lawfulness, correctness, relevance and non-excess, in accordance with the provisions of the legislation on the protection of personal data. The treatment will be carried out by personnel formally appointed and adequately informed.

Scope of communication and dissemination of data, recipients and transfer of data

The Data will be processed by personnel in charge of processing due to the performance of their work duties. Furthermore, for the aforementioned purposes, the Data may be disclosed to third parties where this proves necessary for fiscal, administrative, contractual reasons or for needs protected by current regulations and in particular to banking institutions, to companies active in the insurance field, to suppliers. services strictly necessary for carrying out the business activity, or for company consultants.

Finally, the Data may be shared with authorities, bodies and / or subjects to whom the Data must be communicated by virtue of legal provisions or orders of authority. These authorities, bodies and / or subjects will operate as independent data controllers. The data will not be disclosed.

Data Retention

The Data will be stored on paper and / or computer media only for the time necessary for the purposes for which they were collected, respecting the principles of conservation limitation and minimization referred to in Article 5, paragraph 1, letters c) and e) of the Regulation. The Data will be stored to fulfill regulatory obligations and pursue the aforementioned purposes, in compliance with the principles of indispensability, non-excess and pertinence. The Company may keep data after the termination of the contractual relationship to fulfill regulatory and / or post-contractual obligations.

Rights of the interested party

In relation to the aforementioned treatments, each interested party can exercise the rights referred to in articles 15 to 22 of the Regulation. In particular, the interested party has the right to ask the Company to access their data, to correct or delete them, to object to the processing or to request the limitation of processing in the cases provided for by article 18 of the Regulation. and to obtain their Data in a structured format, commonly used and readable by an automatic device, in the cases provided for by Article 20 of the Regulation. The interested party can also revoke the consents given pursuant to Article 7 of the Regulation at any time, as well as lodge a complaint with the Guarantor Authority for the protection of personal data pursuant to Article 77 of the Regulation, if he considers that the processing of his Data is contrary to the legislation in force. In cases of opposition to the processing of the Data pursuant to Article 21 of the Regulation, the Company reserves the right to evaluate the request, which will not be accepted if there are compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the 'Interested.