OWNER: PMI Consulting S.r.l.
LEGAL HEAD OFFICE: via Roma 26 Arona
TEL 0322 47 934
E-MAIL: arona@dottcomm.it
PIVA 01522760030
Information on the processing of customers' personal data in accordance with Articles 13 and 14 of EU Regulation 2016/679
Data Controller
The Data Controller is PMI Consulting S.r.l. which holds and processes personal data protected by EU Regulation 2016/679 according to the principles of fairness, lawfulness and transparency and protection of your privacy and rights.
Data processed
With reference to customers individuals and economic operators, the data that will be processed are:
- Personal data: name and biographical data, CF, data relating to residence and tax domicile, contact data (e-mail, telephone) data relating to income and assets, data relating to the composition of the household and the presence of tax dependents
- Particular data: data relating to medical expenses incurred from which the health status of the person concerned or of tax dependent family members can be traced, data capable of revealing political opinions, religious or philosophical beliefs, or union membership (data relating to the destination of the 8×1000, 5X1000 and any donations to movements, associations etc...)
With reference to legal entity clients, the data that will be processed are:
- Personal data of company contact persons (first name, last name, e-mail address, telephone number, job title)
Purposes and legal bases
Your data will be processed for purposes related to contractual obligations, legal obligations and legitimate interests. Specifically, the purposes concern:
1. Conclusion and proper handling of the contract with the interested party
2. Fulfillment of obligations under the contract
3. Fulfillment of legal obligations
4. Legitimate interest in asserting or defending a right in court, as well as in administrative proceedings or arbitration and conciliation procedures, in cases provided for by laws, European Union legislation and regulations
5. Debt collection
The legal bases laid for the processing operations and related purposes are:
- Fulfillment of contractual obligations ex art 6 lett b) of the GDPR, with reference to the purpose under numbers 1, 2.
- Fulfillment of legal obligations ex art 6 lett c) of the GDPR, with reference to the purpose under number 3.
- Legitimate interest ex art 6 lett f) of the GDPR, with reference to the purposes under numbers 4 and 5.
he processing of such data is necessary for the proper management of the relationship, consequently, their provision is mandatory for the implementation of the above purposes. Any non-disclosure or incorrect disclosure of such data may be a cause of impossibility for the Holder to provide the service and ensure the appropriateness of the processing itself.
Method of processing
Your personal data will be processed through electronic means and will not be subject to automated decisions.
Your personal data will be processed in accordance with the modalities set forth in Articles 6 and 32 of the GDPR through the adoption of appropriate security measures.
Communication and dissemination
Your data will not be disseminated in any way, but are subject to exclusive communication to:
- Public bodies and offices to which they must be mandatorily communicated (e.g. Revenue Agency).
- Companies, consultants and freelancers, also in associated form of which the Data Controller uses for the proper provision of the service, duly appointed as data processors.
- Other parties (duly appointed external data processors) with regard to the management of the Holder's IT infrastructure and the provision of e-mail services.
In any case, the data will be processed only by personnel authorized by the Owner.
Retention
Your data will be kept for the time necessary to conclude the contract and for the time stipulated by tax and accounting regulations. Specifically:
- 10 years from the termination of the contractual relationship.
- 10 years in compliance with obligations to keep accounting records.
- Until the end of any litigation in court.
Exercise of rights
You can always exercise your rights under the GDPR in Articles 15 to 22, namely right of access, right to rectification, right to erasure, right to restriction, right to portability, and right to object.
To exercise your rights, you can send a request to arona@dottcomm.it by entering "GDPR exercise of rights" as the subject, following which you will be contacted as soon as possible (this is within 30 days in any case) in response to your request.
If you believe that the processing of your personal data is contrary to current legislation, you can always lodge a complaint with the Data Protection Authority under Article 77 GDPR.