Privacy Policy

Tava s.r.l. - Information notice pursuant to Article 13 of EU Regulation 2016/679 "European Regulations on the protection of natural persons with regard to the processing of personal data"

We inform you that personal data concerning individuals (employees, administrators, collaborators) operating for your organization and that will be communicated to us in relation to the business relationships with our company will be processed by Tava Srl, Data Controller, with registered office in Via Giacomo Matteotti n. 7/a, 38065 Mori (TN), P. IVA 02256760220, for the purposes and with the means indicated below:

The personal data of your company, directors, officers, representatives, employees, and other persons operating for you (name, family name, contact details, bank details etc.), will be collected, registered, rearranged, stored and used for activities aimed at negotiating and executing the contractual relationship with you, or in progress, including the pre and post contractual activities for the formalization, management and control of the relationship with our clients and suppliers, the sending of technical, informative and updating material relating to the subject of your assignment, as well as to comply with legal tax and administrative obligations related to the contract or to services requested by you. Where permitted, data relating to your company may be processed for marketing, promotion and information purposes.

IData will be processed in a lawful, correct and transparent manner; they will be collected for specific, explicit and legitimate purposes and processed in a way that is not incompatible with these purposes; they will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, accurate and updated; they will be processed with the utmost confidentiality,mainly with electronic and IT tools and stored both on computer and paper supports, in compliance with the principles set by the Regulation, the instructions issued by the Supervisory Authority and to guarantee adequate security, including protection, with appropriate technical and organizational measures, against unauthorized or illicit processing or even accidental loss. Data will be stored in a form that allows the identification of the data subject for the time strictly necessary to achieve the purposes for which they were processed.

The legal basis of the processing is mainly under art. 6, lett. b) of the Regulation: " processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract". This treatment is also supported by the legal basis provided for by art. 6, lett. c) of the Regulation, pursuant to which Data Controller may process the data if " processing is necessary for compliance with a legal obligation to which the controller is subject", as in the case of personal data processed for administrative or accounting purposes. The Data Controller may process personal data of third parties’ employees also for the purposes of his own legitimate interests (art. 6, lett. f), in order to perform contracts entered into or to conduct preliminary steps prior to entering into a contract. The basis of the processing of data relating to your company may also be the consent (Article 6, letter a) of the Regulation) for the purposes of marketing, promotion, information./p>

None of the data transmitted by you falls under to the particular categories of personal data referred to in art. 9 of the Regulation (sensitive data) or in any case to data requiring the consent as legal basis for their processing. If we have received such data from you, we will delete them immediately, failing your explicit written consent.

Communication of data necessary for the execution of the contract is optional, but any refusal will prevent the conclusion of the contract, or its proper execution, and will also prevent compliance with legal, tax or administrative obligations related to the contract itself.

Data referred to in point 1. will not be disseminated and will not be disclosed to indeterminate subjects, in any possible way. On the other hand, they may be communicated to our employees and to the internal collaborators of the company, to our commercial agents, distributors, consultants, to other associated companies or subsidiaries, to external professionals and firms, as well as to persons authorized to access them by law, regulations, EU regulations and, to the extent strictly necessary, to persons who, always for purposes related to the execution of contractual relationships with you or for the establishment of new contractual relationships, may provide us with goods and / or perform services on our behalf. However, the data subject may always indicate the subjects or the categories of subjects to whom the data must not be communicated.

Our employees and internal collaborators have been appointed as "authorized person" according to their role. External subjects have been appointed as "data processor" according to the services they provide to us. Therefore, they have the right to know and process the data transmitted by you, within the limits of their powers and in accordance with the instructions given by the "Data Controller". Said subjects will process data in compliance with and within the limits of privacy legislation.

Your personal data may be transferred to countries of the European Union and to third countries, for the purposes indicated above, and where necessary for the execution of the assignment.

Your personal data will be processed for the time necessary for the purposes here indicated. Subsequently, they will be kept: for the time established by the current tax and corporate rules; for the time necessary to exercise a right in court. The Data Controller deems it necessary to keep the data for 10 years after the full execution of the contract. In any case, data will be processed with means that guarantee the security and confidentiality of the data.

Data subjects have the right to obtain from our company access to their personal data, rectification, erasure, restriction of processing, the right to object, to withdraw consent where the processing is based on consent (articles 15 and following of the Regulation), by sending a specific request to the Data Controller at the email address amministrazione@tava.it.

Data subjects considering that the processing of personal data referring to them is infringing the Regulation have the right to lodge a complaint with the Supervisory Authority, represented by the Garante, as provided for by art. 77 of the Regulation, or else to bring a judicial proceeding pursuant to art. 79 of the Regulation

AKNOWLEDGEMENT OF INFORMATION AND CONSENT

The client/supplier, after taking knowledge of the above information notice and aware that the personal data regarding himself/herself or its directors, officers, representatives, employees will be processed by Tava S.r.l., pursuant to what specified in such information notice and to the Regulation (EU) 2016/679, agrees to the processing and communication of said data for the purposes specified. The client/supplier also declares to have duly informed about the above processing its directors, officers, representatives, employees.