GDPR B2B

INFORMATION NOTICE RELATING TO THE PROCESSING OF PERSONAL DATA -
CUSTOMERS B2B

1. Data Controller

Cotonella S.p.A., in its capacity as Data Controller, informs you that the EU Regulation n. 2016/679 (so-called GDPR) and the Legislative Decree. 196/2003 and subsequent amendments govern the protection of personal data. Cotonella S.p.A., bases data processing on principles of correctness, lawfulness, transparency, and necessity, as required by the aforementioned legislation.

For this purpose, pursuant to the art. 13 of the GDPR, we provide the following information:

2. Object of the processing

The processing that we intend to carry out relates your personal data (for example, personal details, number phone, e-mail address, bank information) as defined by the GDPR, of which we are or which we shall know by reason of our legal relationship.

3. Purposes and legal basis of the processing

The processing of Your data has the following purposes:

a) carrying administrative and management activity for the fulfillment of the relevant tax, accounting and any other obligation provided by the current legislation;
b) fulfillment of pre-contractual and contractual obligations set forth by any relevant agreement;
c) to process your request to contact a sales person in order to be provided with a list of services offered by Cotonella;
d) marketing activities, for the presentation of the product, sending digital or similar indicating the plus of a new product/launch, including through the use of computerized and automated tools such as newsletters or mailing lists.

Pursuant to art. 6 par. 1 letter b) and c) of the GDPR, the legal basis for the processing carried out for the purposes referred to the lett. a) b) and c) is the execution of the contract or pre-contractual measures and the fulfilment of legal obligations. The provision of data is mandatory; failure to provide the data will make it impossible for us to fulfil and respect the commitments undertaken and deriving from the relationships established.

For the purpose referred to the lett. d) the legal basis for the processing is the consent of the data subject, will be provided through the form attached to this information notice. We remind you that, in the case of consent, you have the right to withdraw your consent, at any time, without any prejudice to the lawfulness of the processing, based on the consent given before the revocation. Should you be in our list of clients, we reserve the right to send you commercial notice for the delivery of services similar to the one already offered, provided however your right to disagree. (Pursuant to art. 130 paragraph 4 of the Legislative Decree n. 196/2003 and subsequent amendments).

4. Method of the processing

The processing of data may consist in their collection, registration, organization, structuring, conservation, adaptation, modification, extraction, consultation, use, communication, comparison or interconnection, limitation, cancellation and destruction, according to the provisions of art. 4 n. 2) of the GDPR. It can be carried out both with the use of paper support and with the aid of electronic, IT and telematic tools, in a manner and with suitable tools to guarantee the security and confidentiality of the data. In particular, all technical and organizational measures appropriate to data protection will be adopted in order to meet the legal requirements and to protect the rights of the data subjects.

5. Disclosure and communication of data

Your data, object of the processing, will not be disclosed; however, for the purposes referred to in point 3 may be communicated to third parties, amongst other commercial partners, consultants, banks, credit institution and insurance, financial, factoring, leasing, services, management, debt collection, audit companies, public Entities, audit and supervisory body, is authorized in order to comply with the obligations provided by the relevant laws, regulation, European provisions and for aspects related to the management and fulfilment of the obligations related to the contractual relationships in place.  

Your data will be processed by the following subjects:

• Employees/Collaborators of the company, acting as authorized persons to the processing of the data by virtue of the job tasks assigned to them and properly trained.
• External data processors pursuant to art. 28 of the GDPR.

The list of external data processors is available at the registered office of the Company.

For the purposes of this notice, your data can be disclosed abroad, within and outside the European Union, in compliance with the rights and the warranties provided by the current regulations, subject to the existence of provision within the relevant country of an adequate level of data protection, pursuant to the GDPR.

6. Rights of the data subject

Without prejudice to the specific and mandatory legal obligations and if the legal requirements are met, at any time you can ask:

a) the right to access personal data (Article 15 of the GDPR);
b) their correction in case of inaccuracy (Article 16 GDPR);
c) the deletion of data (Article 17 of the GDPR);
d) limitation to processing (Article 18 of the GDPR);
e) the right to object processing (Article 21 of the GDPR);
f) the right to data portability, i.e. to receive the personal data provided in a structured format, commonly used and readable by an automatic device, and to obtain their transfer to another Data Controller without impediments (Article 20 of the GDPR).

Furthermore, the interested party may lodge a complaint with the competent Supervisory Authority pursuant to art. 77 of the GDPR.

For what is not expressly provided by the provisions referred to herein, please refer in full to the current legislation on Privacy and specifically to art. 15, 16, 17, 18, 20 and 21 of the GDPR.

For further information on this information or on any privacy issue, or if you wish to exercise your rights or withdraw consent, you can contact privacy@cotonella.com