SUPPLIER_PRIVACY NOTICE

INFORMATION PURSUANT TO PERSONAL DATA PROTECTION REGULATIONS.

Dear Supplier,

this Information Notice is provided pursuant to and in accordance with Article 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”) on the protection of individuals with regard to the processing of personal data.

Purpose and legal basis of processing

Your personal data will be processed for the following purposes:

• perform obligations arising from a contract or respond, before and after the performance of the contract, to your specific requests;
• comply with legal obligations of an administrative, accounting, civil, tax, regulatory, EU and/or non-EU nature;
• manage any litigation;
• manage the supplier qualification and monitoring process, if any.

The processing, which is necessary for the pursuit of the aforementioned purposes, is based on the principles of fairness, lawfulness, transparency and protection of your privacy and rights.

Data retention period

Your personal data will be retained even after termination of the contract for the performance of all obligations connected with or arising from the contract for the period of time prescribed by the laws in force from time to time and in accordance with the statute of limitations of the rights arising from the contract.

Nature of data provision and consequences in the event of refusal

The provision of data is compulsory for all that is required by legal and contractual obligations, and therefore any refusal to provide such data in whole or in part may make it impossible for the Company to execute the contract or to properly perform all related obligations.

Recipient categories

Exclusively for the purposes specified above, all data collected and processed may be communicated to internal figures authorised to process them on the basis of their respective duties, as well as to the following categories of external parties:

• banking institutions;
• professionals or service companies working on behalf of our company;
• lawyers and legal advisors;
• Public and private entities, including as a result of inspections and audits.

These recipients, should they process data on behalf of our Company, will be designated as data processors, by means of a contract or other legal act.

Transfer of data to a third country and/or international organisation

For strictly organisational needs, some of your personal data may be transferred to countries outside the EU, as the Data Controller uses Cloud services provided by suppliers selected from among those who provide adequate guarantees, as provided for by Article 46 GDPR.

Rights of data subjects

You have the right (see articles 15 -22 of the GDPR) to ask our Company to access your personal data and to rectify them if they are inaccurate, to cancel them or limit their processing if the conditions are met, or to oppose their processing for legitimate interests pursued by our Company, as well as to obtain the portability of the data you have provided only if they are subject to automated processing based on your consent or on the contract.

You also have the right to revoke the consent given for the purposes of processing that require it, without prejudice to the lawfulness of the processing carried out up to the moment of revocation.

You also have the right to lodge a complaint with the relevant supervisory authority, “Garante per la protezione dei dati personali”.

Subjects of treatment

The data controller of your personal data is Peoplerise s.r.l. SB Via San Marco 9H – Padua, which can be contacted as such at the following email address: privacy@peoplerise.net.