Privacy Policy

Data Controller: Contech Srl

Registered office: Via Bussoleno, 11 - 00166 Rome (RM)

VAT/Tax Code: 14151401008

Legal Representative: Andrea Contrasto

The processing of personal data provided is aimed solely at:

a) execution of the contract;

b) fulfillment of obligations provided by laws connected to the contractual relationship;

c) contract management, such as relationships with agents, representatives, clients and/or contractors;

d) any external professional collaborations for the fulfillment of legal obligations;

e) protection of contractual rights;

f) internal statistical analysis;

g) other purposes:

• targeted commercial proposals, offers of hardware, software, services, electrical and electronic material;

• organization and performance of technical activities relating to the products sold, maintained or assisted by Contech Srl;

• software and hardware technical assistance at one of our offices or at your office or the offices of your customers, both for activities regulated by a contract between your company and Contech Srl, and for services provided on the basis of a simple written or verbal request received by your structure;

• training and drafting of documentation relating to software and applications developed by Contech Srl;

• hardware and software installation, configuration, administration, maintenance, support and diagnostics.

Personal data will be processed in paper, computerized and telematic form and entered into the relevant databases which can be accessed by those in charge of data processing.

The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary to achieve the purposes mentioned above.

All data processing operations are carried out in such a way as to guarantee the integrity, confidentiality and availability of personal data.

The data provided will be retained for the entire duration of the contractual relationship and subsequently, after its termination, for a period of time not exceeding 10 years.

In relation to the purposes indicated in point 2, the data may be communicated to the following subjects:

• banking institutions for the management of collections and payments;

• financial administrations or public institutions in compliance with regulatory obligations;

• companies and law firms for the protection of contractual rights and professional firms for tax and accounting matters;

• agents, representatives;

• client and/or contractor of the procurement/subcontracting contract.

We inform you that as an interested party you also have the right to lodge a complaint with the Supervisory Authority, regarding the rights listed below, which you can assert by making a specific request to the Data Controller and/or the Data Processor, as indicated in the paragraph “ Identification details of the Data Controller ”.

Art. 15 - Right of access

The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and information regarding the processing.

Art. 16 - Right of rectification

The interested party shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the interested party shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Art. 17 - Right to erasure (right to be forgotten)

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.

Art. 18 - Right to limit processing

The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:

• the data subject contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;

• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

• although the data controller no longer needs them for the purposes of the processing, the personal data are required by the data subject for the establishment, exercise or defence of legal claims;

• the data subject has objected to processing pursuant to Article 21, paragraph 1, pending verification whether the legitimate grounds of the controller override those of the data subject.

Art. 20 - Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

Art. 21 - Right to object

The data subject shall have the right to object at any time, for reasons relating to his or her particular situation, to processing of personal data concerning him or her which is based on Article 6, paragraph 1, letters e) or f), including profiling based on those provisions.

Art. 22 - Right not to be subjected to automated decision-making, including profiling

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.