Supplier data protection notice: Art. 13 Eu Reg 679/2016

Dear Supplier, we hereby inform you, pursuant to EU Regulation 679/2016 concerning the general data protection and the free movement of such data, that the data you provide, or will be acquired within the framework of our activities and qualified as "personal data" (Article 4 of EU Regulation 679/2016), they may be processed by TECNA Srl a socio unico (TECNA Srl) in accordance with what is defined in the following notice.

Dear Supplier,

we hereby inform you, pursuant to EU Regulation 679/2016 concerning the general data protection and the free movement of such data, that the data you provide, or will be acquired within the framework of our activities and qualified as "personal data" (Article 4 of EU Regulation 679/2016), they may be processed by TECNA Srl a socio unico (TECNA Srl) in accordance with what is defined in this notice. We do not hold or process any category of particular data (Article 9) or "personal data relating to criminal convictions and offenses" (Article 10). This Regulation provides first of all that whoever processes personal data is required to inform the interested party on which data are processed and on certain elements qualifying the treatment: it must be done with correctness, lawfulness and transparency, protecting personal privacy and inalienable rights. In accordance with this rule we provide the following information:


DATA CONTROLLER

The Data Controller is TECNA Srl (hereinafter referred to as the TECNA or holder) which has its legal and operational headquarters in Area Science Park - Località Padriciano, 99 - Trieste, email: dataprotection_tecna@eurofins.com.


PURPOSE OF DATA PROCESSING

“Processing” (Art. 4) means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. The data supplied by you, or acquired within the scope of our activity, may be processed by TECNA for the following purposes:

a) Preliminary activities to the conclusion of the contract
b) Activities related to the execution of the contract itself, such as processing, operational and management needs – within the limits established by laws or regulations - necessary for the operational and administrative activity of our Company
c) Requirements of a fiscal nature, payment of the service / product provided and application of laws and regulations in general

The provision of data referred to in lett. a), b) and c) is necessary to execute the contract between the parties.


MODALITIES OF DATA PROCESSING, COMMUNICATION AND STORAGE

About methods for collecting and processing data, we would like to inform you that the data in our possession will be placed in a specific file kept under constant control through an internal operating procedure, pursuant to EU Regulation 679/2016 (with particular reference to Articles 24, 32 and 35). The data will not be disseminated and will be treated with lawfulness, correctness and transparency and protection of privacy and rights only by personnel directly authorized by the Data Controller. In this sense your data may be communicated to:

a) Subjects who can access the data in accordance with the provisions of the Law, the Regulations or the Community Regulations, within the limits established by these Regulations
b) Subjects who need access to your data for subsidiary purposes to the relationship between you and us, within the limits strictly necessary  to carry out the auxiliary tasks (for example the Credit Institutes)
c) Our consultants, within the limits necessary to carry out their duties on behalf of our Company, upon our appointment letter (Article 28) that imposes the duty of confidentiality and security
d) Other data processors appointed pursuant to Art. 28 of EU Regulation 679/2016 (list available at the Data Controller) other companies belonging to the TECNA partner network (list available at the Data Controller) for the same purposes as indicated above
e) Employees, assigned to administrative, accounting and commercial functions


Your data could be communicated on Italian and European territory. Moreover, your data could be communicated, for the sole purposes of accounting, tax, organizational and logistics, even in non-European territory. In this case the data will be managed applying the provisions of Articles 44, 46 and 49 Comma 1 Lett. A) and c) of EU Regulation 679/2016, including standard contractual clauses, and the directives of the Data Controller under his direct control. No data profiling activities are performed. The data will be stored for a period not exceeding that necessary for the purposes for which they were collected or subsequently processed, also based on the applicable provisions of law, or for at least 10 years.


DATA SUBJECT RIGHTS

Pursuant to art. 15, 16, 17, 18, 19, 20, 21 and 22 of UE 679/2016, you have the right, at any time, to request to TECNA access to, rectification, erasure, restriction of the processing concerning your Personal Data or to object to relevant processing activity and to receive in a structured, commonly used and machine-readable format the Personal Data concerning you. Requests to exercise your rights must be sent to the Data Controller using contacts described above. In any case, pursuant to the Applicable Law, you have the right to lodge a complaint with the relevant supervisory authority (the Italian Guarantor) if you believe that the processing of your Personal Data is against the Applicable Law.

Thank you.