Information on the processing of suppliers’ personal data

Pursuant to Article 13 of Regulation (EU) 679/2016 and Legislative Decree 30 June 2003 n.196 as amended with Legislative Decree 10 August 2018, n.101 (Privacy Code)

P4Future S.r.l. (hereinafter also just “P4Future”), as Data Controller, informs you in accordance with the applicable national legislation and the European Privacy Regulation no. 679/2016 (“GDPR”) on the purposes and methods of processing your data.

1 – Purpose of the processing

Your personal data will be processed for the following purposes:

  1. operational management of the supplier list, also for evaluation purposes;
  2. execution of obligations deriving from a contract of which you are a party or carrying out any pre-contractual negotiations;
  3. administrative, commercial and logistical management of the supply relationship;
  4. fulfillment of legal obligations of an administrative, accounting, civil and fiscal nature;
  5. protection of P4Future’s rights arising from the contract.

2 – Data categories

We collect and process personal data, postal address, telephone and email contact aside payment data.

3 – Legal basis and lawfulness of processing

The processing carried out for the purposes referred to in letters a), b) and c) of paragraph 1 is necessary for the execution of a contract of which you are a party or for the execution of pre-contractual measures adopted at your request (art. 6, par. 1, letter b of the GDPR).

The processing carried out for the purposes referred to in letter d) of paragraph 1 is based on legal obligations to which P4Future is subject (art. 6, par. 1, letter c of the GDPR).

Finally, for the purposes referred to in letter e) of paragraph 1, the processing is necessary for the pursuit of P4Future’s legitimate interest in protecting its rights arising from the contract (art. 6, par. 1, letter f of the GDPR) .

4 – Nature of the contribution

The provision of the indicated data is a necessary requirement for the fulfillment of contractual and/or legal obligations. Therefore, any failure to communicate makes it objectively impossible for P4Future to start the contractual relationship or to continue it in the event of a subsequent request for deletion of the data and to comply with legal and/or contractual obligations connected to the performance of the relationship.

5 – Recipients of personal data

The personal data provided and those relating to the execution of the contractual relationship may be communicated by P4Future to its employees, specifically authorized for processing by the Data Controller, or to collaborators or third parties, belonging to the following categories:

  • professional firms/companies/consultants providing accounting, fiscal and tax services as well as responsible for carrying out audit activities;
  • professionals and consultants for the purposes of protecting P4Future’s rights arising from the contract;
  • companies that carry out auditing and financial statement certification activities;
  • law firms;
  • Banks, credit institutions and financial intermediaries;
  • supervisory and control authorities and bodies and in general subjects, public or private, entitled to request them.

The latter will use the data as “Data Controllers”, specifically appointed and instructed by P4Future as Data Controller, or as autonomous “Data Controllers” authorized to access them pursuant to legal provisions and regulations.

Your data will not be transferred to countries outside the European Economic Area.

6 – Data retention period

Your personal data will be retained by P4Future for the time necessary to fulfill the purposes referred to in paragraph no. 1, as well as is required by civil, fiscal and regulatory rules and in any case for no more than 10 years from the termination of the contractual relationship.

7 – Rights of the interested party

Pursuant to the Regulation, in the manner and within the limits established by current legislation, you are granted the following rights:

  • right to obtain confirmation from the Data Controller as to whether or not personal data concerning you is being processed and, in this case, to obtain access to the personal data and information provided for by the art. 15 of the GDPR and in particular those relating to the purposes of the processing, the categories of personal data in question, the recipients or categories of recipients to whom the personal data have been or will be communicated, the retention period, etc.;
  • right to obtain, where inaccurate, the rectification of personal data concerning you, as well as the integration of the same where deemed incomplete always in relation to the purposes of the processing (art. 16);
  • right to delete data (“right to be forgotten”), where one of the cases referred to in the art. 17 of the GDPR;
  • right to limit processing, in the cases provided for by art. 18;
  • right of data portability pursuant to art. 20;
  • right to object to processing pursuant to art. 21;
  • right to lodge a complaint with the Supervisory Authority pursuant to art. 77 of the GDPR.

These rights may be exercised by request sent by registered letter with acknowledgment of receipt. to P4Future S.r.l., at the following address: Via XX Settembre, 19 – 62100 Macerata, or by e-mail to the following e-mail address: privacy@p4future.com

Download