PRIVACY POLICY - CUSTOMERS

Information on the processing of personal data

(according to articles 13 and 14 of the European Regulation 679/2016)

Interested parties: customers.

NEGRI SRL acting as Data Controller for the processing of personal data, pursuant to and for the purposes of the EU Regulation 679/2016 of the European Parliament and the Council of 27th April 2016 "on the protection of individuals with regard to the processing of personal data and the free circulation of such data and repealing the Directive 95/46/CE" (general regulation on data protection), hereinafter abbreviated as "Regulation" or "GDPR", informs the interested subjects about the processing of personal data supplied by them or acquired during professional activities.

Personal data will be processed in accordance with the legislative provisions of the current legislation and the provided privacy obligations.

Purposes of processing

The data will be processed for purposes related to the implementation of the following compliances, related to legislative or contractual obligations and for further purposes:

  • Mandatory obligations by law in the fiscal and accounting field;
  • Management of customers and suppliers;
  • Quality management;
  • Scheduling of activities;
  • Invoice history of customers and suppliers;
  • After-sales assistance;
  • Management of controversies;
  • Debt collection activities;
  • Detection of the customer satisfaction degree.

The processing of the data functional for the fulfillment of such obligations is necessary for the correct management of the relationship and their conferment is mandatory to implement the purposes indicated above.

Any non-communication, or incorrect communication of one of the mandatory information may cause the Controller not to ensure the adequacy of the processing itself.

Processing methods

The personal data will be processed the following ways:

  • Automated processing with IT tools and digital archives;
  • Manual processing of documents and paper archives.

Any processing is carried out in compliance with the methods set out in article 32 of the Regulation through the adoption of the adequate security measures to protect data from the risks of loss, destruction, alteration, diffusion or other unauthorized actions.

Your data will be processed only by personnel expressly authorized by the Controller and in particular by the following categories of appointed subjects:

  • Employees and collaborators authorized by the Data Controller.

Communication to third parties

The data will be communicated exclusively to the persons in charge for the completion of the services necessary for a proper management of the relationship and for the protection of the interested subject’s rights:

  • Consultancy companies in accounting, administrative and tax matters;
  • Consultants and freelancers, also in associated form;
  • Debt collection companies;
  • Banks and credit institutions;
  • Authorities and other public and/or private subjects for which data communication is mandatory or necessary in compliance with legal obligations or in any case functional to the administration of the relationship;
  • Transport and forwarding companies.

Diffusion

Your personal data will not be diffused in any way.

Conservation period of personal data

Your data will be stored in our archives or by authorized Processors only for the time necessary for the processing purposes, as subordinate to the conservation period required by legislative, regulatory and legal obligations applicable to the data being processed.

The Data Controller is NEGRI SRL, Via Motella 33, 46010 Campitello di Marcaria (MN), in the person of its legal representative. You have the right to obtain from the Data Controller the cancellation, communication, updating, rectification, integration of your personal data. In general you can exercise all the rights provided by the articles from 15 to 22 of the Regulation listed here below.


European Regulation 679/2016


Article 15 - Right of access by the data subject

1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data concerned;

c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

f) the right to lodge a complaint with a supervisory authority;

g) where the personal data are not collected from the data subject, any available information as to their source;

h) the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

2. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.

3. The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.

4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.


For information of the interested subject, the other articles of the Regulation concerning the exercise of his rights are listed below - NEGRI SRL is required to apply them in the processing of personal data.

  • Article 16 - Right to rectification;
  • Article 17 - Right to erasure («right to be forgotten»);
  • Article 18 - Right to restriction of processing;
  • Article 19 - Notification obligation regarding rectification or erasure of personal data or restriction of processing;
  • Article 20 - Right to data portability;
  • Article 21 - Right to object;
  • Article 22 - Automated individual decision-making, including profiling.


To exercise his rights assured by the aforementioned articles, the interested subject must contact:

Negri srl

    via Motella 33, 46010 Campitello di Marcaria (MN) Italia
    Telephone +39 0376 926162
    Fax +39 0376 925329
    Email info@negri-bio.com





PRIVACY POLICY - DEALERS AND LOCAL AGENTS

Information on the processing of personal data

(according to articles 13 and 14 of the European Regulation 679/2016)

Interested parties: dealers and local agents.

NEGRI SRL acting as Data Controller for the processing of your personal data, pursuant to and for the purposes of the European Regulation 679/2016 hereafter "GDPR", hereby informs you that the aforementioned legislation provides for the protection of the interested parties’ data and that this processing will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and your rights.

Personal data will be processed in accordance with the legislative provisions of the above-mentioned legislation and the privacy obligations set out therein.

Purposes of processing

In particular the data will be processed for purposes related to the implementation of the following compliances, related to legislative or contractual obligations and for further purposes:

  • Mandatory obligations by law in the fiscal and accounting field;
  • Management of customers and suppliers;
  • Quality management;
  • Scheduling of activities;
  • Invoice history of customers and suppliers;
  • After-sales assistance;
  • Management of controversies;
  • Debt collection activities;
  • Detection of the customer satisfaction degree.

The processing of the data functional for the fulfillment of such obligations is necessary for the correct management of the relationship and their conferment is mandatory to implement the purposes indicated above.

The Data Controller also announces that any non-communication, or incorrect communication of one of the mandatory information may cause the Controller not to ensure the adequacy of the processing itself.

Processing methods

Your personal data may be processed the following ways:

  • Processing by computers;
  • Manual processing by means of paper archives;
  • Processing entrusted to third parties.

Any processing is carried out in compliance with the methods set out in articles 6 and 32 of the GDPR and through the adoption of the appropriate safety measures.

Your data will be processed only by personnel expressly authorized by the Controller and by third parties expressly appointed as Data Processors, in particular:

  • Consultants and freelancers, also in associated form
  • Banks and credit institutions
  • Public and/or private subjects for which data communication is mandatory or necessary in compliance with legal obligations or in any case functional to the administration of the relationship
  • Freight forwarders, carriers, mail services, logistics companies.

Communication

Your data will be communicated exclusively to competent and duly authorized persons appointed for the completion of the services necessary for a proper management of the relationship and for the protection of the interested subject’s rights.

Diffusion

Subject to your explicit consent, your data may be diffused for:

  • Publication on the website www.negri-bio.com of your contact details as a dealer / local agent, i.e. name and surname, telephone, fax, email.

Conservation period

We point out that, in compliance with the principles of lawfulness, limitation of purposes and data minimization, according to article 5 of the GDPR, the conservation period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the mandatory time limits prescribed by law.

The Data Controller is NEGRI SRL, Via Motella 33, 46010 Campitello di Marcaria (MN), in the person of its legal representative. You have the right to obtain from the Data Controller the cancellation, communication, updating, rectification, integration of your personal data. In general you can exercise all the rights provided by the articles from 15 to 22 of the Regulation listed here below.


European Regulation 679/2016


Article 15 - Right of access by the data subject

1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data concerned;

c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

f) the right to lodge a complaint with a supervisory authority;

g) where the personal data are not collected from the data subject, any available information as to their source;

h) the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

2. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.

3. The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.

4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.


For information of the interested subject, the other articles of the Regulation concerning the exercise of his rights are listed below - NEGRI SRL is required to apply them in the processing of personal data.

  • Article 16 - Right to rectification;
  • Article 17 - Right to erasure («right to be forgotten»);
  • Article 18 - Right to restriction of processing;
  • Article 19 - Notification obligation regarding rectification or erasure of personal data or restriction of processing;
  • Article 20 - Right to data portability;
  • Article 21 - Right to object;
  • Article 22 - Automated individual decision-making, including profiling.


To exercise his rights assured by the aforementioned articles, the interested subject must contact:

Negri srl

    via Motella 33, 46010 Campitello di Marcaria (MN) Italia
    Telephone +39 0376 926162
    Fax +39 0376 925329
    Email info@negri-bio.com





PRIVACY POLICY - SUPPLIERS

Information on the processing of personal data

(according to articles 13 and 14 of the European Regulation 679/2016)

Interested parties: suppliers.

NEGRI SRL acting as Data Controller for the processing of your personal data, pursuant to and for the purposes of the European Regulation 679/2016 hereafter "GDPR", hereby informs you that the aforementioned legislation provides for the protection of the interested parties’ data and that this processing will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and your rights.

Personal data will be processed in accordance with the legislative provisions of the above-mentioned legislation and the privacy obligations set out therein.

Purposes of processing

In particular the data will be processed for the following purposes related to the implementation of compliances related to legislative or contractual obligations:

  • Mandatory obligations by law in the fiscal and accounting field;
  • Management of suppliers;
  • Management of controversies;
  • Management of legislation on Health and Safety at Work (Leg. Dec. 81/08);
  • Quality management;
  • Scheduling of activities;
  • Order history of supplies.

The processing of the data functional for the fulfillment of such obligations is necessary for the correct management of the relationship and their conferment is mandatory to implement the purposes indicated above.

The Data Controller also announces that any non-communication, or incorrect communication of one of the mandatory information may cause the Controller not to ensure the adequacy of the processing itself.

Processing methods

Your personal data may be processed the following ways:

  • Processing by computers;
  • Manual processing by means of paper archives;
  • Processing entrusted to third parties.

Any processing is carried out in compliance with the methods set out in articles 6 and 32 of the GDPR and through the adoption of the appropriate safety measures.

Your data will be processed only by personnel expressly authorized by the Controller and by third parties expressly appointed as Data Processors, in particular:

  • Consultants and freelancers, also in associated form
  • Banks and credit institutions
  • Public and/or private subjects for which data communication is mandatory or necessary in compliance with legal obligations or in any case functional to the administration of the relationship
  • Freight forwarders, carriers, mail services, logistics companies.

Communication

Your data will be communicated exclusively to competent and duly authorized persons appointed for the completion of the services necessary for a proper management of the relationship and for the protection of the interested subject’s rights.

Diffusion

Your personal data will not be diffused in any way.

Conservation period

We point out that, in compliance with the principles of lawfulness, limitation of purposes and data minimization, according to article 5 of the GDPR, the conservation period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the mandatory time limits prescribed by law.

The Data Controller is NEGRI SRL, Via Motella 33, 46010 Campitello di Marcaria (MN), in the person of its legal representative. You have the right to obtain from the Data Controller the cancellation, communication, updating, rectification, integration of your personal data. In general you can exercise all the rights provided by the articles from 15 to 22 of the Regulation listed here below.


European Regulation 679/2016


Article 15 - Right of access by the data subject

1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data concerned;

c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

f) the right to lodge a complaint with a supervisory authority;

g) where the personal data are not collected from the data subject, any available information as to their source;

h) the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

2. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.

3. The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.

4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.


For information of the interested subject, the other articles of the Regulation concerning the exercise of his rights are listed below - NEGRI SRL is required to apply them in the processing of personal data.


  • Article 16 - Right to rectification;
  • Article 17 - Right to erasure («right to be forgotten»);
  • Article 18 - Right to restriction of processing;
  • Article 19 - Notification obligation regarding rectification or erasure of personal data or restriction of processing;
  • Article 20 - Right to data portability;
  • Article 21 - Right to object;
  • Article 22 - Automated individual decision-making, including profiling.

To exercise his rights assured by the aforementioned articles, the interested subject must contact:

Negri srl

    via Motella 33, 46010 Campitello di Marcaria (MN) Italia
    Telephone +39 0376 926162
    Fax +39 0376 925329
    Email info@negri-bio.com