INFORMATION ON THE PROCESSING OF PERSONAL DATA

The Supplier acknowledges that the provisions of the privacy legislation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, hereinafter “GDPR” - concern the processing of personal data, i.e., data concerning natural persons only, which the Customer acquires and processes for the conclusion and performance of the Contract, and do not apply to data referred to companies, entities and associations. For the purposes of this Contract, the Customer may process personal data regarding (i) the Supplier, if this latter is an individual firm or an independent contractor, and/or, however (ii) representatives, members, employees or collaborators of the Supplier.

The Supplier declares that s/he is aware, pursuant to art. 13 of the GDPR, that the personal data communicated for the conclusion and performance of the Contract are collected and processed by the Customer, in its capacity as Data Controller, only for such purposes and for the related legal, administrative and accounting requirements, by suitable means and procedures (including by electronic means), through duly authorized internal staff and external collaborators appointed as data processors or authorized to perform single processing operations. The Supplier is aware that as regards the personal data processed for the conclusion and performance of this Contract, the natural person, to whom the data refer (“Data Subject”) has the rights of access, rectification, restriction, erasure, portability and objection (arts. 15-22 of the GDPR), and the right to lodge a complaint with the Data Protection Authority.

It is the responsibility of the Supplier to guarantee that all personal data concerning, without limitation, representatives, members, employees and collaborators of the Supplier, which are communicated to the Customer for the conclusion and performance of the Contract may be lawfully used; in particular, that the duty of information towards the data subjects has been properly complied with, and their consent has been obtained to the extent necessary for the processing of their personal data by the Customer for the stated purposes and under the terms set out above.

Back