Pursuant to art.13 of the European Regulation 2016/679
1. Data controller
The data controller is Ratti Luino S.r.l. based in Via Provinciale, 309 – 21030 Cassano Valcuvia (VA). Any requests and clarifications about processing of data should be sent to the following e-mail address:firstname.lastname@example.org.
2. Carried out treatments and purposes
The Owner wishes inform you that the company name of Your company as well as the personal and identifying data of the person who will interface with our Company, or in case of private customer the only personal data of the contact person who will interface with our Company will be collected and processed for the following aims:
- Taking charge of his request to receive a quote by our Company;
In case the quote will be accepted treatments purpose will include also:
- The execution of the contractual services detailed in the contract /signed order between the Parties;
- The execution of administrative/accounting obligations (including regulatory obligations).
The execution of the contractual performance, may determine the necessity to insert in the documentation referred to the abroad shipments, the name of the contact person of the customer company. The miss of this information doesn’t allow the benefit of the contractual service. The datas insert in this documentation will be not used for other purposes. For a better protection of the datas, that may be object of such transfers are foreseen in the contractual documentation between the parties specific standard contractual clauses related to data processing.
Carried out treatments through the help of papers or IT tools don’t provide the use of automated decision-making processes.
The Controller would inform you that, in compliance with the Protocol:
the personnel which is back to the Company offices will be subject to the following measures:
- Temperature check to be done before to enter into the Company offices and to be repeated if during the activity the worker shows symptoms of respiratory infection by Covid-19 (e.g cough, cold, conjunctivitis). The visitorswhich enter into the Company offices will be subject to the following measures:
- Temperature check to be done before enter into the company offices and to be repeated if during the activit the worker shows symptoms of respiratory infection by Covid-19 (e.g. cough, cold, conjunctivitis).
- Filling of the related Register.
Temperature Check: The check will be in real time and the temperature will be not registered. The company will only identify the person conerned, and record the fact that the temperature threshold (set at 37,5°) has been exceeded if this is necessary to document the reason why access to company premises is forbidden.
Attendance List: The company will provide to the predisposition of an attendance list indicating the personal data of the person concerned (name, surname, address, telephone, e-mail).
In accordance with the Protocol the finality of the point 2 treatments is the prevenction from Covid-19 infection.
2.1 Treatments modality:
The above treatments will be done by appropriately designated staff of the Controller who have received specific operating instructions.
Temperature check: As mentioned before the temperature check will be in real time and it will be not registered systematically. Only and exclusively if the treshold of 37,5°C is exceeded the person will be identified and his datas registered on papers.
Attendance list: The registration of the datas of the concerned person (name, surname, address, telephone, e-mail) will be through papers and the registration will last 14 days.
3. Legal base of the processing
The processing is carried out based on the legit interest as there is an appropriate and relevant relation between the data subject and the data owner determined during drafting and sending of the estimate from the customer’s will to receive such information from Ratti Luino Srl.
If the estimate is accepted, the legit interest is determined by the existence of the contract relationship. The treatment is carried out in implementation of the provisions of the regulations in force for the management of the epidemiological emergency Covid-19 and from the shared protocol for the regulation of measures to contain the spread of Covid-19 virus in the workplace.
4. Datas conferral
Datas conferral is optional, but necessary for the achievement of the purposes mentioned above and the non-availability of the same doesn’t allow the fulfillment of the obligations mentioned above and, in case of acception of the estimate, the accounting and administrative management of the ralationship. The activities described in this information are necessary to grant the access to the Company offices in respect to the point 2 finalities. In the event that a person refuses to undergo such a survey they will not allow to enter in the Company.
5. Communication of datas and diffusion field
As the customer accepts the formulated estimate, the datas may be communicated to the follows category subjects which the Owner use for activities useful to provide its services: Accounting firm for tax obligations; Banks for the payments; Insurance companies with which are ongoing polices related to the R.C. of the company; legal firm in case of dispute; Public administration for communications necessary for the law.
Datas may be transferred abroad, like is mentioned in the paragraph “2. Carried out treatments and purposes”.
Your datas will be not object of communication to third parties outside the specific regulatory provisions (e.g. in the event of a request by the Health Autorithy for the reconstruction of the chain of any “close contacts” of a worker who tested positive for Covid-19). It should also be noted that in the event a worker has a temperature high than 37,5°, the employer will communicate this circumstance, through the competent doctor this referred to D.L. n. 81/2008 and or through the HR departement to the territorially competent ATS. The datas will be not object of diffusion.
6. Conservation time
Datas will be conserved for the necessary time to perform the purposes mentioned above in the respect of law terms, for the periodcorresponding tofiscal, accounting and administrative needs,in order to document our activityand in order to answer your needsof datas backup except law obligations and the right of defens in court. The temperature check will be in real time and is not provide the storage. The datas collected if the temperature threshold is exceeded and those contained in the self-certification/registration forms will be kept until the end of the state of emergency. The datas related to the presences will be kept for 14 days. Successively to the decision of the Competent Authority to consider closed the Covid-19 emergency, the Controller will provide to the cancellation of the eventual registered information.
7. Rights of the Interested party
The whole right is recognized and guaranteed to: ask the Owner about the Treatment and the acces to the personal datas, the rectification, the cancellation of the same or the limitation of the treatment that concern you or to resist their treatment, besides the right of data portability. That right could be practiced by sending an e-mail at email@example.com.
Moreover, the Owner will stop the treatment in the moment in which came from him the communication of revocation of the previously expressed consent where this is the legal basis of the processing.
8. Claim to the control Authority
The interested party has the right to propose a claim to the Control Authority In case his asks of information to the Owner have not determined satisfactory answers.
The reference Authority is the Guarantor for the protection of personal datas, follows web site:
No personal data of the users is acquired by the website.
The use of session cookies (which aren’t memorized permanently on user’s computer and disappear with the closing of the browser) is solely to transmit session IDs (server-generated random numbers), needed to allow safe and efficient site navigation.
The session cookies used in this site don’t take other computer techniques which may be prejudicial to user’s navigation confidentiality, and don’t allow user’s identifiable personal data capture.
11. Validity of this information
The Controller reserves to modify and/or improve this information compared to further regulatory updates.