Information for Customers and Suppliers
MARCHE HOLIDAY S.P.A.
Corso Roma 75 – 61041 Acqualagna (PU)
VAT No. 02403260413
INFORMATION ON THE PROCESSING OF PERSONAL DATA
Information in compliance with art. 13 pursuant to (EU) Regulation 2016/679 of the European Parliament and of the Council, dated 27th April 2016, Legislative Decree No.101/18 dated 10th August 2018 concerning the protection of natural persons with regard to personal data processing (for the sake of brevity GDPR 2016/679)
1. Data controller and data processors - art. 13 par. 1 lett. [a] [b] GDPR 2016/679
The data controller is MARCHE HOLIDAY S.P.A., that can be contacted to exercise the rights recognized by the GDPR and to know the updated list of all data processors.
2. Purpose and legal basis of data processing - art. 13 par. 1 lett. [c] [d] GDPR 2016/679
The personal data provided may be processed only for the sole following purposes:
customer database management;
supplier database management;
performing the professional service which you require;
sending service communications;
sending communications and advertising promotions through newsletters, invitations, promotions, etc ...;
fulfilling legal obligations and complying with requests from the authority;
The legal basis of the aforementioned ways of processing is art. 6.1 [b] GDPR - the processing is necessary for the performance of a contract of which the party concerned is a party, or for the accomplishment of pre-contractual measures taken upon request from the same.
3. Types of data processed
Personal data (name, surname, physical address, nationality, province and municipality of residence, telephone, fax, tax number, e-mail address, etc.)
Payment data (IBAN and bank/postal data)
Navigation data (Log, IP address of origin)
Data relating to the state of health
4. Data notification and dissemination - art. 13 par. 1 lett. [e] [f] GDPR 2016/679
The data may be communicated only to the party concerned and to persons explicitly indicated by the party concerned, or to fulfill a legal obligation to which the data controller is subjected, or in the case, it is necessary for the performance of a task of public interest of which the data controller is invested. The data will not be further disclosed except to persons duly authorized by the data controller. The data will not be disclosed.
The data may be transferred to a third country or to an international organization only if the recipient guarantees a level of data protection appropriate to the European one.
In the case of data transfer in the United States, this will only happen with companies in compliance with the Privacy Shield.
5. Data processing methods and storage time - art. 13 par. 2 lett. [a] GDPR 2016/679
The processing of personal data consists of collecting, registering, organizing, storing the same data.
The processing of personal data is carried out for the purposes set out above, in accordance with the provisions of Article 5 of the European Regulation on personal data processing, as follows:
in paper form
on a data medium
in compliance with the rules of lawfulness, legitimacy, confidentiality and security required by current legislation.
The data will be stored for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed in accordance with the provisions of the legal obligations.
6. Rights of the party concerned - art. 13 par. 2 lett. [b] [c] [d] GDPR 2016/679
In the cases provided by law, the party concerned has the right to obtain access to personal data and to rectify them. For legitimate reasons, the party concerned has the right to obtain the cancellation of the same data or the limitation of the processing of data concerning him/her or to oppose their processing.
The party concerned has the right to lodge a complaint with the supervisory authority - Guarantor for the protection of personal data.
7. Nature of personal data provision and consequences of a refusal to respond - art. 13 par. 2 lett. [e] [f] GDPR 2016/679
The personal data of the party concerned may also be processed for profiling purposes (such as analysis of the data transmitted and the Services/Products chosen, to propose advertising messages and/or commercial proposals in line with the choices expressed by the users) only in case the party concerned has provided an explicit and informed consent. The legal basis of such processing is the consent given by the party concerned prior to processing, which can be revoked by the party concerned freely and at any time.