INFORMATION ON THE PROCESSING OF PERSONAL DATA
(customers and suppliers)

WHO WE ARE AND WHY WE PROCESS YOUR PERSONAL DATA
The information below outlines the processing of personal data that takes place in relations between customers, partners and suppliers of ITALPEPE in relation to services provided, in accordance with the General Data Processing Regulation 2016/679 (hereinafter GDPR or Regulation), applicable from 25 May 2018 in every member state of the European Union, and Italian law (legislative decree 196/2003, updated in legislative decree 101/2018).
In particular, subjects affected by data processing are natural persons who are employed or in another type of relation with legal persons such as companies, partners or suppliers, and operationally involved in commercial, contractual or pre-contractual communications.

Although relations are often between legal entities, the individuals concerned are natural persons who communicate and handle data; therefore, the personal data processed consists of contact details (phone numbers, email addresses etc). In other cases, the supplier may be a professional or a sole trader, in which case other data will be processed for administrative/accountancy purposes or to monitor products and services.
Italpepe 2 S.r.l., with registered offices at Via Ardeatina, 2479 – 0034 Rome (Rm), in the person of its president Alfonso Vitaletti (hereinafter also “ITALPEPE”) is the Controller of your personal data (hereinafter also “the Controller” or “we”).
For any matter relating to the processing of personal data, users may contact us at the email address info@italpepe.com.

PURPOSES AND LEGAL BASIS FOR DATA PROCESSING
Personal contact details are processed for purposes linked with and instrumental to the collection of contractual and pre-contractual information and for the fulfilment of a contract and/or collaboration, and also for purposes associated with the management of related obligations (eg accounting or fiscal) or for technical/organisational reasons.
The legitimate basis for such processing may include contractual necessities or pre-contractual measures, but also the necessary elaboration, control and checking for compliance with statutory requirements.

Other operations such as the checking of services/products, the management of electronic elaboration systems or communications relating to the contractual or pre-contractual relationship, may be based on the premise of the legitimate interest of the Data Controller.

METHODS OF COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA

Personal data processed consists of contact details, along with other identifying and financial information, in the case of contractual relationships with natural persons.
Processing of data relating to legal persons, entities and suppliers, and personal data relating to data subjects or to natural persons employed or contracted by the above, will be carried out in line with the principles of honesty, lawfulness and transparency, and to protect the right to confidentiality, and will be carried out using manual, paper and automated instruments for the time period strictly necessary to fulfil the purposes for which it was collected.

Specific security measures are in place to prevent data loss, unlawful or incorrect use and unauthorised access.

Personal data will be stored for the entire duration of the contract and while obligations and fulfilment associated with the latter remain.

Even after the contractual relationship has ended, ITALPEPE and any other authorised individuals may store your administrative/accountancy data, either to comply with legal and regulatory obligations or for the purpose of defence of self or third parties, or to fulfil specific legal obligations, until the expiry of the statutory storage period, applicable on a case-by-case basis.

Personal data is processed in accordance with current legislation and in compliance with the confidentiality obligations of authorised staff and external individuals who carry out processing as Data Supervisors on behalf of ITALPEPE. Personal data is not transferred abroad.

YOUR RIGHTS

Regulation (EU) 2016/679 (articles 15 to 23) guarantees specific rights to data subjects. In particular, regarding the processing of your personal data, you have the right to request the following from ITALPEPE: access to your data, rectification, erasure and portability; restriction on processing or objection to processing.
Specifically:

Right to access: you can ask ITALPEPE to confirm whether or not your personal data is being processed, and if so, obtain access to your data;
Right to rectification: you can ask ITALPEPE to rectify incorrect personal data relating to you;
Right to erasure/to ‘be forgotten’: you can, under certain circumstances, obtain from ITALPEPE the erasure of personal data relating to you;
Right to portability: under certain circumstances, you can receive from ITALPEPE your personal data in a structured, commonly used and machine-readable format. You also have the right to transmit the data to another controller without hindrance from ITALPEPE;
Right to restriction of processing: under certain circumstances, you can obtain a restriction on processing by ITALPEPE;
Right to object to processing: you can object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you; ITALPEPE will no longer process the data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You may also make a complaint to the relevant supervisory authority, which in Italy is the Data Protection Authority.