Policy in accordance with Regulation 13 (EU) 2016/679 of the European Parliament and of the Council
1 – Personal data protection controller and responsible
The data controller and responsible is Choose Wood s.r.l., VAT N° 09793980963, situated in Via D’Adda 4/4, 20019 Settimo Milanese (MI). The Owner may be reached through the e-mail firstname.lastname@example.org , or via electronic certified mail: email@example.com. The Owner has not appointed a Responsible for the personal data protection (RPD) nor a data protection officer (DPO).
2 – Legal basis for the processing
The Owner treats your personal data lawfully, wherever data processing:
- Is necessary for the execution of your contract, or of pre-contractual measures, adopted upon your request;
- Is necessary for compliance with a legal obligation that threatens the Owner;
- Is based on the declared consent for specific activities (i.e. sending newsletter, marketing activities).
3 – Data processing purposes
The aim of data processing is the correct implementation of the contractual relation. Your data will be processed with the following purposes too:
a) Contract execution;
b) For compliance with the legal obligations related to the contractual relationship;
c) Contract management, that means, for example, to deals with agents, representatives, contractors and/or subcontractors;
d) For compliance with legal obligations deriving from eventual external co-operations;
e) Contractual rights protection;
f) Marketing activities through the mailing of promotional literature and advertising related to products, or services, similar to the ones object of the existing commercial relation. For these activities, we will ask you a prior, separated agreement at the bottom of this policy.
Anyway, the personal data you give us are necessary for the proper conduct of the contractual relationship.
4 – Consequences due to the failure to provide personal data
Failure to inform Choose Wood of all the personal data necessary to the execution of the contract that you (or your company) are raising with us will result in the impossibility to realize the contractual relationship. The impossibility to realize the contractual relationship will arise as well if you (or your company) fail to inform Choose Wood of all the data made fundamental to comply with legal duties, such as tax and accounting records.
5 – Methods of data processing and storage
Data processing will be managed by specially authorised subjects (including third parties who supply specific data handling, administrative and instrumental services which are necessary to the fulfilment of the purposes of the processing itself) in an automated or paper form, in accordance with Article 32 of GDPR with regard to safety measures. In compliance with Article 29 of GDPR and with Article 5 of GDPR with regards to the respect of the principles: of lawfulness, of purpose limitation and of data minimization, we inform you that we will retain your personal data with your prior, separated agreement at the bottom of this policy and only for as long as necessary to fulfil the purposes we collected it for. Later, Choose Wood will retain your personal data the time necessary to satisfy any law and tax storage obligations. All data processing operations are realized in order to grant their integrity, their confidentiality and their availability.
6 – Sharing your data
We may share your personal data with the parties set out below:
- Third parties supplying IT, accounting, fiscal, administrative, legal or ancillary services, related to the above mentioned activities;
- Authorities of any kind in compliance with law.
Apart the above-mentioned subjects, we may share your personal data with specific third parties, at least determined by general categories, only with your explicit, written consent.
7 – Profiling and sharing data
Your personal data are not subject to any sharing, or fully automated decisional processes, profiling processes included.
8 – Transfers
Choose Wood will transfer your personal data in UE States, or in third States outside UE for which the European Commission issued specific decisions of appropriateness, in order to realize the proper execution of the contract of which you (or your company) are party.
9 – Rights of the data subject
At any moment, in accordance with Articles 15 and 22 of GDPR, you may exercise your right to:
a. Request confirmation of your personal data existence;
b. Obtain information related to: the data processing aims, the personal data categories, the present or future recipients, or recipients categories, of your personal data and, if possible their storage period;
c. Obtain your data correction or deletion;
d. Obtain the restriction of processing your personal data;
e. Obtain the data portability, that is to receive your data from the processing owner in a structured, commonly used, machine-readable format and to transfer your personal data to you or to a third party without obstacles;
f. Withdraw your consent at any time, even in the event of direct marketing purposes;
g. Withdraw to a fully automated decisional process, profiling process included;
h. Request to the data processing owner the full access to your personal data, their amendment, or their deletion, or the restriction of your data processing, or to withdraw your consent;
i. Withdraw consent at any time; however this will not affect the lawfulness of any processing carried out before you withdraw your consent;
j. Lodge a complaint with a supervisory authority.