DATA PROCESSING
PRIVACY POLICY
Information provided in accordance with Art.13 of EU Reg.2016/679 (hereafter GDPR)
Foreword
For the undersigned company, personal data represent an asset of great value and an asset to be protected, adopting procedures and behaviors to ensure its safeguard. Transparency towards the interested parties is therefore a primary objective, pursued through effective communication tools aimed at making available to the interlocutors the basic information on the processing of their data. This notice is therefore aimed at providing interested parties with all the elements required by current privacy regulations, as well as appropriate guarantees of reliability to stakeholders.
General information
Data subjects are informed (ex Art.4, c.1 of GDPR) of the following general profiles, which apply to all areas of processing:
- all data are processed in accordance with current privacy regulations (Reg.EU 2016/679 and D.Lgs.196/2003, as amended and supplemented by D.Lgs.101/2018);
- all data are processed lawfully, fairly and transparently towards the data subject, in accordance with the general principles stipulated in Art.5 of the GDPR;
- specific security measures are observed to prevent data loss, illicit, or incorrect use and unauthorized access (GDPR, Art.32).
Data controller
The Data Controller is the undersigned Company (in the person of the pro-tempore legal representative) who can be contacted for any privacy-related inquiries or to exercise the rights listed below, at the following addresses:
DATA PROTECTION OFFICER
Name: Galli Data Service Srl
Email: dpo@gallidataservice.com
Rights of data subjects
- Right to request the presence of and access to personal data concerning him/her (Art.15 “Right of access”)
- Right to obtain rectification/integration of inaccurate or incomplete data (Art.16 “Right of rectification”)
- Right to obtain, if there are justified reasons, the deletion of data (Art.17 “Right to Deletion”)
- Right to obtain restriction of processing (Art.18 “Right to restriction”)
- Right to receive in a structured format the data concerning him/her (Art.20 “Right to portability)
- Right to object to processing and automated decision-making, including profiling (Art.21, 22)
- Right to revoke a previously given consent;
- Right to file a complaint with the Data Protection Authority if no response is received.
The following specific information is given below, referring to:
- data processing related to the operation of this website
- Data processing of customers / suppliers of the Owner
DATA PROCESSING RELATED TO RELATIONSHIPS WITH CUSTOMERS AND SUPPLIERS (current and potential)
Subject of treatment
The company processes personal identification data of customers/suppliers (e.g., first name, last name, company name, personal/fiscal data, address, telephone, e-mail, bank and payment references) and their operational contacts (first name last name and contact data) acquired and used in the context of providing the services provided.
Purpose and legal basis for processing
Data are processed for:
- Conclude contractual/professional relationships and provide related services;
- Fulfill pre-contractual, contractual and tax obligations arising from existing relationships, as well as manage the necessary communications related to them;
- Fulfill obligations under the law, a regulation, EU legislation or an order of the Authority;
- exercising a legitimate interest as well as a right of the Owner (for example: the right of defense in court, the protection of credit positions; ordinary internal operational, management and accounting needs).
Failure to provide the above data will make it impossible to establish the relationship with the Owner. The aforementioned purposes represent, in accordance with Art.6, paragraphs b,c,f, suitable legal bases for the lawfulness of the processing. If it is intended to carry out processing for different purposes (e.g. marketing communications, production of photo/video content, etc.) will be requested an appropriate consent from the interested parties.
Method of processing and retention time
The processing of personal data is carried out by means of the operations indicated in Art. 4 No. 2) GDPR and namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Personal data are subject to both paper and electronic processing. The Data Controller will process personal data for as long as necessary to fulfill the purposes for which it was collected and related legal obligations (usually coinciding with the relationship with the data subject, subject to prolongation in reference to the obligations of retention of administrative documents and business correspondence).
Scope of treatment
Data are processed by duly authorized and instructed internal subjects in accordance with Art.29 of the GDPR. It is also possible to request the scope of communication of personal data, obtaining precise indications on any external subjects operating as autonomous data processors or controllers (e.g.: consultants, technicians, banking institutions, transporters, etc.). The data may be subject to communication to any companies controlled/connected in various ways. The data are not subject to extra-EU dissemination or transfer (they may be subject to extra-EU transfer only in compliance with the conditions set out in Chapter V of the GDPR, aimed at ensuring that the level of protection of data subjects is not compromised “Art.45 Transfer on the basis of an adequacy decision, Art.46 Transfer subject to adequate safeguards, Art.47 Binding enterprise rules, Art.49 Specific exceptions” ). Data are not subject to automated processes that produce significant consequences for the data subject.
https://speedlogturkey.eu/
The site includes a link to the company Speedlog Turkey; it is a partner company of Speedlogistik Srl and acts as an autonomous data controller; therefore, please see its own disclosures, published and available on the linked site.
POLICY UPDATE
It should be noted that this disclosure may be subject to periodic revision, including in relation to relevant legislation and case law. In case of significant changes will be given, for a reasonable time, appropriate evidence in the home-page of the site. However, the interested party is invited to periodically consult this policy.