Orazzini Refitting

Privacy policy

Information pursuant to Article 13 of Legislative Decree No. 196 of June 30, 2003, and the GDPR EU Regulation 2016/679

Dear Customer/Supplier,

We would like to inform you that Legislative Decree No. 196/2003 "Personal Data Protection Code" and the subsequent EU Regulation 2016/679 provide for the protection of individuals and other subjects with respect to the processing of personal data.

Orazzini Refitting S.r.l., located at Via Guerrazzi 7, 56025 Pontedera (PI) (hereinafter referred to as the "Controller"), in its capacity as data controller, informs you, pursuant to Article 13 of Legislative Decree No. 196 of June 30, 2003 (hereinafter referred to as the "Privacy Code") and Article 13 of EU Regulation No. 2016/679 (hereinafter referred to as the "GDPR"), that your data will be processed in the following ways and for the following purposes:

1. Processing of Personal Data

The Controller processes personal data, including identification data (e.g., name, surname, company name, address, telephone, email, bank and payment details) – hereinafter referred to as "personal data" or "data" – provided by you during the conclusion of contracts for the services of the Controller.

2. Purposes of the Processing

A. Your personal data is processed for the following service purposes (Article 6 GDPR):

  1. To conclude contracts for the services of the Controller;
  2. To fulfill pre-contractual, contractual, and tax obligations arising from existing relationships with you;
  3. To manage administration, accounting, orders, shipments, invoicing, and service provision;
  4. To comply with legal obligations, regulations, EU legislation, or orders from Authorities (such as anti-money laundering regulations);
  5. To exercise the rights of the Controller, such as the right of defense in legal proceedings.

B. Only with your specific and distinct consent (Article 7 GDPR), for the following marketing purposes:

  1. To send you newsletters, commercial communications, and/or promotional material via email, mail, SMS, or phone contacts, regarding products or services offered by the Controller, and to assess the satisfaction with the quality of the services; We inform you that, if you are already a customer, we may send you commercial communications related to services and products of the Controller similar to those you have already used, unless you object.

3. Processing Methods

The processing of your personal data is carried out through the operations specified in Article 4, No. 2) GDPR, including collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data will be processed both in paper and electronic and/or automated form.

The Controller will process personal data for the time necessary to fulfill the purposes mentioned above and in any case for a minimum period of 10 years from the termination of the contractual relationship, unless otherwise provided by applicable law.

4. Access to Data

Your data may be made accessible for the purposes outlined in point 2:

  • To employees and collaborators of the Controller, both in Italy and abroad, in their capacity as internal data processors and/or system administrators;
  • To third parties or other entities (e.g., credit institutions, professional firms, consultants, insurance companies for insurance services, etc.) that perform outsourced activities on behalf of the Controller,
    in their capacity as external data processors.

5. Data Communication

The Controller may communicate your data for the purposes outlined in point 2, A.1-A.5.

Without prejudice to communications and disclosures made to comply with legal obligations, the data concerning you may be communicated in Italy and/or abroad to:

  • Professionals and consultants, consulting firms, factoring companies, credit institutions, debt
    collection agencies, credit insurance companies, commercial information companies, companies operating in the transport sector;
  • Public and private entities, also following inspections or audits, such as: the Tax Administration, Tax Police Authorities, Judicial Authorities, Foreign Exchange Office, Labor Inspectorate, Health Authorities, Social Security Agencies, Chamber of Commerce, etc.

6. Data transfer

Personal data is stored at our offices in Via Umbria 2 – 56035 Casciana Terme Lari (PI) and/or at the office in Via Guerrazzi 7, 56025 Pontedera (PI).

7. Nature of Data Provision and Consequences of Refusal

The provision of data for the purposes outlined in point 2, A.1-A.5 of this notice is mandatory. Without it, we will not be able to guarantee you the services offered.

The provision of data for the purposes outlined in point 2, B.1 is optional. You may choose not to provide any data or later withdraw consent for processing data already provided: in this case, you will not receive newsletters, commercial communications, or promotional material related to the services offered by the Controller. However, you will still have the right to the services outlined in point 2, A.1-A.5.

8. Rights of the Data Subject

Articles 15 to 22 of the European Regulation 2016/679

Under Articles 15 to 22 of the European Regulation 2016/679, you have the right to obtain from the Controller the correction, integration, or deletion (the so-called "right to be forgotten") of your personal data; the right to request the limitation of processing and the right to data portability, the right to object to the processing of personal data, including profiling, and finally, the right to lodge a complaint with the Data Protection Authority.

9. How to Exercise Your Rights

You can exercise your rights at any time by sending:

10. Data Controller

The Data Controller is Orazzini Refitting S.r.l. with its registered office at Via Guerrazzi 7, 56025 Pontedera (PI). An updated list of data processors and persons in charge of processing is available upon request from the Data Controller.

11. Data Protection Officer (DPO)

Our company has not appointed an external DPO. Data will be processed by the data controller and any persons in charge of processing.

---

Sincerely,
Orazzini Refitting Srl