Privacy Policy for Suppliers

 

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13-14 OF EU REGULATION 2016/679

Interested Parties: contact persons at Supplier Companies.

BLB srl, as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679 (hereinafter “GDPR”), hereby informs you that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency, and the protection of your privacy and rights.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations set forth therein.

Purpose and legal basis of the processing: In particular, your data will be used for the following purposes related to the execution of measures related to contractual or pre-contractual obligations:

• legal obligations in the tax and accounting fields;
• accounting or treasury management;
• litigation management;
• obligations under applicable laws.

Your data will also be used for the following purposes related to the implementation of measures related to contractual or pre-contractual obligations:

• Supplier management;
• Management of relationships during purchasing operations;
• Quality management.

Your data will also be used for the following purposes necessary to pursue the legitimate interests of the data controller:

• Recordings are retained for a few hours or, at most, for twenty-four hours after collection, except for specific requirements for further retention due to holidays or office or business closures, as well as in the event of a specific investigative request from the judicial authority or the police.
• The video surveillance system is introduced as a complementary measure aimed at improving security inside or outside buildings or facilities where production, industrial, commercial, or service activities are carried out, or which are intended to facilitate the exercise, in civil or criminal proceedings, of the data controller’s or third parties’ right to defense based on images useful in the event of unlawful acts.

Processing methods. Your personal data may be processed in the following ways:

• outsourcing of processing operations;
• processing using electronic calculators;
• manual processing using paper archives.

All processing is carried out in compliance with the procedures set forth in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures required.

Your data will be processed only by personnel expressly authorized by the Data Controller and, in particular, by the following categories of authorized personnel:

• All natural persons responsible for processing, authorized to use the facilities and, where necessary for the purposes pursued, to view the records (Article 30 of the Code), have been designated in writing;
• Production Department;
• Production Manager;
• members, associates, and subscribers;
• Purchasing Office;
• Administration Office.

Disclosure: Your data may be disclosed to external parties for the proper management of the relationship, and in particular to the following categories of Recipients, including all duly appointed Data Processors:

• Banks and credit institutions;
• Consultants and freelancers, including associates;
• Public and/or private entities for which disclosure of data is mandatory or necessary to fulfill legal obligations or is otherwise functional to the administration of the relationship;
• Freight forwarders, carriers, private vehicle drivers, postal services, and logistics companies.

Dissemination: Your personal data will not be disclosed in any way.

Retention Period. We inform you that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 5 of the GDPR, the retention period for your personal data is:

• established for a period of time no longer than is necessary to complete the services provided;
• established for a period of time no longer than is necessary to achieve the purposes for which they were collected and processed and in compliance with the mandatory timeframes prescribed by law;
• established for a period of time no longer than is necessary to fulfill legal obligations and for litigation protection.

Data Controller: The Data Controller, pursuant to the Law, is BLB srl (Via Natta, 1, 36040 BRENDOLA (VI), VAT No. 00882660244, contactable at the following addresses: privacy@blbhydraulic.com, telephone +39 0444 401141) in the person of its legal representative pro tempore.

You have the right to obtain from the Data Controller the erasure (right to be forgotten), restriction, updating, rectification, portability, and objection to the processing of your personal data, as well as, in general, the right to exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of the GDPR.

You can also view the updated version of this privacy policy at any time by visiting the following website: https://blbhydraulic.com/privacy-policy-for-suppliers/?lang=en

EU REGULATION 2016/679: ARTICLES 15, 16, 17, 18, 19, 20, 21, 22 – RIGHTS OF THE INTERESTED PARTY

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exists, regardless of their being already recorded, communication of such data in an intelligible form, and the right to lodge a complaint with the Supervisory Authority.

2. The data subject has the right to obtain information on:

• the source of the personal data;
• the purposes and methods of processing;
• the logic applied in the event of processing carried out with the aid of electronic means;
• the identification details of the data controller, data processors, and the designated representative pursuant to Article 5, paragraph 2;
• the persons or categories of persons to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing.

3. The data subject has the right to obtain:

• updating, rectification, or, where interested therein, integration of the data;
• The deletion, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
• certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data was communicated or disseminated, except where such disclosure proves impossible or involves a manifestly disproportionate effort compared with the right being protected;
• data portability.

4. The data subject has the right to object, in whole or in part:

• on legitimate grounds, to the processing of personal data concerning him or her, even if pertinent to the purpose of the collection;
• to the processing of personal data concerning him or her for the purpose of sending advertising or direct selling materials or for conducting market research or commercial communications.