Privacy policy

Pursuant to Article 13 of EU Regulation 2016/679, ERNES SRL informs you that the personal data collected, with reference to the contractual relationships established, will be processed in compliance with the aforementioned regulations; in relation to the aforementioned processing, ERNES SRL provides the following information:

TYPES OF PERSONAL DATA COLLECTED
The personal data collected, with your free and explicit consent, are exclusively related to:

• identifying data (e.g., first name, last name, address, phone, fax, email, etc.)
• tax data (if required by law – e.g., tax code, VAT number, etc.)

DATA CONTROLLER AND DATA PROCESSOR OF PERSONAL DATA
Titolare del trattamento dei dati personali è ERNES SRL con sede a Bellusco, in Via Adda 64. Il ruolo di Responsabile del trattamento dei dati è stato conferito all’amministrazione di ERNES SRL, cui l’interessato può rivolgersi in ogni momento, al numero: 039 6883019 o all’indirizzo e-mail: info@ernes.it per l’esercizio dei diritti riportati nella presente informativa.

PURPOSE AND METHODS OF DATA PROCESSING
The purposes of personal data processing are as follows:

• fulfillment of legal obligations related to the contractual relationship;
• organizational management of the contractual relationship.

Personal data will be processed in paper, computerized, and telematic form, and entered into the relevant databases, which can be accessed exclusively by the data controller and its authorized personnel. Regarding data processed electronically, it is emphasized that all appropriate security measures have been adopted to protect the rights, freedoms, and legitimate interests of the data subject, as per Article 22, paragraph 3 of EU Regulation 2016/679.

POSSIBLE RECIPIENTS OF THE DATA
In relation to the purposes outlined in points 1, 2, and 3 of the previous paragraph, the data may be communicated to the following individuals or categories of individuals:

• Accounting firms and/or recognized labor consultants, related to business assistance when the communication is required by law, or is in the interest of the individual (natural or legal person);
• Other recognized firms or professionals related to business assistance when the communication is required by law, regularly appointed for such processing in full compliance with the applicable minimum measures, or when the communication is in the interest of the individual (natural or legal person);
• Entities such as INPS, INAIL.

The data controller further informs that it does not transfer personal data of customers to a third country outside the EU or to a non-EU international organization.

DATA RETENTION PERIOD
At the end of the service provision or supply, personal data will be retained exclusively for historical or statistical purposes, in accordance with the law, regulations, community legislation, and the codes of ethics and good conduct signed pursuant to Article 40 of EU Regulation 2016/679, for a period as per current legislation (usually 10 years), or, if not subject to any law, for a period not exceeding five years. After this period, personal data will be retained in an anonymous form or will be destroyed.

DIRITTI DEGLI INTERESSATI
In relation to the aforementioned processing, the data subject has the right to request access to their personal data and the correction or deletion of the same, or the limitation of processing concerning them, or to object to their processing, in addition to the right to data portability.

RIGHT TO WITHDRAW CONSENT
If the processing is based on consent, the data controller informs the data subject that they have the right to withdraw it at any time without affecting the lawfulness of the processing based on the consent provided before the withdrawal.

RIGHT TO FILE A COMPLAINT
The data controller informs the data subject that they have the right to file a complaint with a supervisory authority.

MANDATORY OR OPTIONAL NATURE OF DATA PROVISION
The provision of data and its processing are mandatory in relation to the management of contractual aspects, related to tax compliance; consequently, any refusal to provide the data for these purposes may result in the inability of the data controller to proceed with the professional relationships and legal obligations.
The provision of data and its processing is considered optional in other cases, with no consequences.

POSSIBLE EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS
The data controller informs the data subject that there is no automated decision-making process on this site, specifically, there is no profiling system.