<\/p>\n
<\/p>\n
In compliance to EU Regulation 2016\/679, art. 13 (GDPR), we wish to describe how we handle personal data, which is always processed in compliance with the applicable regulations.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
The Data Controller is Sandalj Trading Company S.p.A., having its registered office in Trieste, Via Gioacchino Rossini 14, ph. +390406767911, fax +39040360636, email: privacy@sandalj.com, pec: sandalj@legalmail.it. The Data Controller can be contacted directly for any questions relating to this privacy policy.
\nA Data Protection Officer has not been appointed.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
The data processed by Sandalj Trading Company S.p.A is exclusively that of individuals it has commercial relationships with, existing or potential. Examples of the type of data processed, are as follows: company name, name, surname, date of birth, address, VAT number, IBAN, commercial references, email addresses, telephone numbers, products ordered, and such. Special categories of personal data, as referred to in Article 9 of the European Regulation EU Privacy 2016\/679, are not processed. The treatment of the data that is processed is limited to what is strictly necessary for the purposes described in this privacy policy to ensure that Sandalj Trading Company S.p.A can fulfill commercial services required and contractual agreements.<\/p>\n
<\/p>\n
<\/p>\n
Data is processed on paper, computer and telephone, and with support of external software houses, and is protected by adequate security measures that guarantee confidentiality and integrity. There are organizational protection measures in place such as firewall, antivirus and other, to protect against loss, theft, and unauthorized disclosure or modification.
\nThe data is retained for the time required to achieve the purposes of processing, and in compliance with applicable regulations. When the storage period expires, the data is deleted; it may also be deleted, with specific request, in which case Sandalj Trading Company S.p.A will be unable to give further course to contracts and any commercial relationship.<\/p>\n
<\/p>\n
<\/p>\n
Customer and supplier data, such as identification and administrative company details, is required for execution and management of both purchase and sale contracts of goods and services. Data is processed for sending updated price lists, as well as managing financial and credit protection.
\nWith prior consent (subject to withdrawal at any time), the data is processed for the promotion of Sandalj Trading Company S.p.A products and services, through advertising material, marketing communications, market research and sales activities on line, by paper mail, SMS, e-mail, telephone, social networks and other means of communication.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
\u2022 subjects for which there is an obligation pursuant to law;
\n\u2022 subjects delegated by Sandalj Trading Company S.p.A. to provide assistance with accounting, administrative, legal and financial matters, in accordance with the applicable legislation;
\n\u2022 subjects delegated to carry out any activity related to the goods or services purchased (ie. freight forwarders, port operators, conveyors, couriers, laboratories, technical offices, etc.);
\n\u2022 banks, credit and financial institutions that operate within the financial management of the company;
\n\u2022 subjects delegated by Sandalj Trading Company S.p.A, each for their own role (ie. employees, IT staff, etc.) in charge of commercial, technical, administrative, financial and accounting services.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
Data will not be sold or communicated to third parties. The servers that store this data are currently located within the European Union. The Data Processor, if necessary, has the right to move servers outside the EU, ensuring that the move will occur within the legal framework of applicable EU regulation.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
The data collected is retained until revocation of consent, except when the data is subject to other processes. Contractual data is retained for the length of time prescribed by applicable regulations. The personal data required for the execution of contracts are retained for the duration period of the aforementioned contracts and for the duration prescribed by applicable fiscal regulations.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
GDPR provides the possibility for the data subject to ask the Data Controller to:
\n\u2022 access personal data;
\n\u2022 correct and update data;
\n\u2022 cancel personal data (ie. oblivion) meeting conditions specified in art.17, paragraph 1 of GDPR and exceptions specified in paragraph 3 of the same article;
\n\u2022 limit its processing as per art.18, paragraph 1 of GDPR;
\n\u2022 exercise the right to data portability, if the legal basis is a contract or consent through an automatic format;
\n\u2022 oppose the processing of personal data in case of specific situations;
\n\u2022 withdraw consent at any time, when the legal basis is consent of processing special categories of personal data such as date of birth, birthplace, place of residence, and data that can disclose information on race, political opinions or religious beliefs, health status, etc.;
\n\u2022 lodge a complaint to a supervisory authority (Authority for the protection of personal data – www.garanteprivacy.it).<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n