• reasons of public interest: implementation of anti-contagion security protocols pursuant to art. art. 1, no. 7, lett. d) of the Prime Ministerial Decree of 11 March 2020, in particular Shared Protocol 14 March 2020, Protocol 24 April 2020 and subsequent additions and amendments
• legal obligation: art. 32 Constitution; art. 2087 of the Italian Civil Code; Legislative Decree 81/2008 (in particular Article 20)

The purposes of the processing are:

• prevention of COVID-19 infection
• protection of the health of people in the company
• collaboration with public authorities and, in particular, health authorities

The data will be processed and stored until the end of the state of emergency, as defined by the competent authorities and will be deleted if they are no longer needed. Failure to provide the data will prohibit access to company premises. You can consult the data of the owner, your rights, in the complete information below.

Personal data processed

“Data” means information relating to natural persons, processed by the Company for the stipulation and execution of the contractual relationship with its suppliers-customers, such as those of the legal representative of the supplier-customer who signs the contract in the name and for account of the latter, as well as the employees / consultants of the supplier-customer, involved in the activities referred to in the contract. In the latter case, the source from which the data comes is the supplier-customer.

Authorized subjects for processing

The Data may be processed by the employees of the company, by the collaborators, by the company functions responsible for the pursuit of the aforementioned purposes, who have been expressly authorized for processing by the Data Controller and who have received adequate operating instructions.

Provision of data

The provision of data is mandatory for the conclusion of the contract and / or for its execution, or for the provision of the services requested by the interested party. The refusal to provide the Data may therefore prevent the establishment of the contractual relationship and / or fulfill the consequent obligations.

Data recipients

The Data may be disclosed to external parties operating as data controllers, by way of simplification, authorities and supervisory and control bodies and in general subjects, public or private, entitled to request the Data such as Revenue Agency and / or Security Guard Finance, or to Banking Institutions for obtaining credit lines. The Data may be processed, on behalf of the owner, by external subjects designated as data processors, who carry out specific activities on behalf of the owner, by way of example, accounting, tax and insurance obligations, mailing, management of collections and payments, etc…

Transfer to extra EU countries

Where necessary, Personal Data may be transferred abroad to non-European countries whose level of protection and data has been deemed adequate by the European Commission pursuant to art. 45 of the GDPR or after signing the standard contractual clauses (Standard Contractual Clauses) adopted / approved by the European Commission pursuant to art. 6, 2, lett. c) and d) with the reference supplier or after the adoption of the other guarantees referred to in art. 46 and 47 of the DPR. A copy of these guarantees can be obtained by sending a request by email to privacy@combiarialdo.cloud

Rights of the interested party

By contacting the Office by e-mail at privacy@combiarialdo.cloud, the interested party can ask the Company for access to the Data concerning him, the correction of inaccurate Data, the integration of incomplete Data, the deletion of Data, the imitation of the treatment in the cases provided for by art. 18 GDPR, as well as to oppose the processing carried out for the legitimate interest of the owner. Furthermore, in the event that the processing is based on consent or on the contract and is carried out with automated tools, the interested party has the right to receive the Data in a structured format, commonly used and readable by automatic device, as well as, if technically feasible, to transmit them to another holder without impediments. The interested party has the right to revoke the consent given at any time for marketing purposes and to oppose the processing of the data processed for the same purposes. The possibility remains for the interested party who prefers to be contacted for the aforementioned purpose exclusively through traditional methods to express their opposition only to the receipt of communications through automated methods.

Complaint to the supervisory authority

The interested party has the right to lodge a complaint with the competent supervisory authority in the Member State in which he habitually resides or works or in the State in which the alleged violation has occurred. The Supervisory Authority designated in Italy is the Guarantor for the Protection of Personal Data, based in Rome, Piazza Venezia n. 11. The methods for making a complaint and protecting one’s rights are indicated on the website of the Guarantor. www.garanteprivacy.it