INFORMATION ON THE PROCESSING OF PERSONAL DATA

(in accordance with Articles 13 and 14 of EU Regulation 2016/679)

In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter “GDPR”), KLF Tecnokimica S.r.l. provides the following information regarding the processing of personal data carried out in the context of commercial, contractual and professional relationships established or to be established with customers, suppliers and partners.

Data controller

The Data Controller is KLF Tecnokimica S.r.l., VAT No. 014522610502, with its registered office at Via Emilia Romagna 2/E, 56029 Santa Croce sull’Arno (PI) – Italy, represented by its current legal representative, Mr Marco Frediani.

The Data Controller can be contacted at the following addresses:
e-mail: info@klftecnokimica.it
phone: +39 0571 471090

The Company is not required to appoint a Data Protection Officer (DPO) pursuant to Article 37 of the GDPR, as the legal requirements for doing so are not met.

Purpose of processing

Personal data is processed for related and ancillary purposes:

• the management of pre-contractual negotiations;
• for the conclusion and performance of sales, supply or partnership agreements;
• to comply with the administrative, accounting and tax obligations laid down by current legislation;
• the management of payments, shipments and logistics operations;
• to protect the Data Subject’s rights in or out of court;
• to comply with obligations laid down by laws, regulations or EU legislation.

Where applicable, any informational or promotional communications relating to the Company’s services will be sent only with the data subject’s prior consent.

Legal basis for processing

The processing of personal data is based on:

• regarding the performance of a contract or pre-contractual measures taken at the request of
• for the fulfilment of legal obligations to which the Data Controller is subject (Article 6(1)(c) of the GDPR);
• on the data controller’s legitimate interest in managing its business and protecting its rights (Article 6(1)(f) of the GDPR);
• on the basis of the data subject’s consent, where required (Article 6(1)(a) of the GDPR).

Any consent given may be withdrawn at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal.

Categorie di dati trattati

The data processed may include personal and identification details, tax and fiscal data, bank and payment details, contact details, as well as economic and financial information obtained from public registers.

Where data is not collected directly from the data subject, it may be obtained from public sources such as the Companies Register, the Revenue Agency or other publicly accessible databases, within the limits of the purposes set out above.

Methods of processing

Personal data is processed using both paper-based and electronic means, in accordance with the principles of lawfulness, fairness, transparency, data minimisation and integrity as set out in the GDPR.
Appropriate technical and organisational measures are in place in accordance with Article 32 of the GDPR to ensure the security and confidentiality of the data.

The data are not disclosed or used in automated decision-making processes, including profiling.

Data disclosure

Personal data may be disclosed to external parties who carry out activities necessary for the purposes set out above, such as tax and legal advisers, banks and insurance companies, IT firms, as well as to public bodies and judicial or administrative authorities in the cases provided for by law.

These entities act, as appropriate, as data processors or independent data controllers.

Transfer of data to other countries

Personal data is not transferred to countries outside the European Union.
Should it become necessary to transfer data to third countries, such transfers will be carried out in accordance with Articles 44 et seq. of the GDPR and by implementing the safeguards provided for by current legislation.

Data retention

Personal data will be retained for the entire duration of the contractual relationship and, thereafter, for the period required by current civil and tax legislation, which is ordinarily ten years pursuant to Article 2220 of the Italian Civil Code, unless there are legal defence requirements or further legal obligations that necessitate a longer retention period.

Nature of the provision of data

The provision of personal data necessary for the performance of the contract or compliance with legal obligations is mandatory.
Any refusal to provide such data will make it impossible to establish or continue the contractual relationship.

Rights of the data subject

The data subject may, at any time, exercise the rights set out in Articles 15–22 of the GDPR, including the right of access, rectification, erasure, restriction of processing, objection and data portability, in the cases provided for by law.

Requests may be sent to the Data Controller at the following email address info@klftecnokimica.it

The data subject also has the right to lodge a complaint with the competent supervisory authority, namely the Data Protection Authority.