INFORMATION notice for Customers and Suppliers

Pursuant to article nr. 13 of EU Regulation 679/2016

POLMIX SRL (Hereinafter the “Data Controller”), as Data Controller acquires and subsequently manages some data qualified as “personal data” of his Customers and Suppliers (hereinafter “Interested Party”, pursuant to Art. 13 of EU Regulation 679/2016 (hereinafter “Privacy Code”).

1. Purpose of the data processing.

The personal data of the Interested Party are processed by the Data Controller for the following purposes:

1. fulfilment of contract obligations and management of the contract (hereinafter “Contract”);

2. fulfilment of administrative and accounting obligations strictly related to the Contract;

3. fulfilment of specific obligations provided for by law, by a regulation or by EU legislation (for example, those provided against of money laundering);

4. updating of the interested party on promotional and marketing initiatives, also by sending advertising and / or promotional material (for example, newsletters), through automated tools and / or traditional methods of contact.

The processing of personal data takes place, under the authority of the Data Controller, by subjects specifically appointed, authorized and trained in processing pursuant to art. 29 of the Privacy Code, using manual, IT or telematic tools, with logic strictly related to the purposes and in any case in order to guarantee the confidentiality and security of personal data. The processing of personal data may also take place, on behalf of the Data Controller, by data processors specifically designated pursuant to art. 28 of the Privacy Code.

Personal data will be stored for a specific period based on criteria related to the nature and duration of the Contract and on the needs to protect the interests of the Interested Party.

2. Legal basis of the processing, nature of the conferment and consequences of a possible refusal, consent of the Interested Party.

2.1) Purposes referred to paragraph 1, points 1, 2. and 3.

The provision of personal data is mandatory and is a necessary requirement for the execution of the Contract; in fact, the failure to provide data determines the impossibility of receiving the service object of the Contract itself and, therefore, the legal basis of the relative treatment is the correct execution and management of the Contract.

2.2) Purposes referred to paragraph 1, point 4

The provision is optional and failure to provide the relative consent only determines the impossibility of receiving updates on promotional and marketing initiatives, also by sending advertising material and / or promotional (for example, newsletters).

3. Subjects or categories of subjects to whom personal data may be communicated and the scope of communication.

IIn relation to the purposes of the processing indicated above, and within the limits strictly pertinent to the same, the personal data of the Interested Party will be or may be communicated to the following categories of subjects:

(i) to the tax authorities and other public authorities, where required by law or at their request;

(ii) credit institutions for payment orders or other financial activities instrumental to the execution of the Contract;

(iii) to the external structures and / or companies used by the Data Controller, in charge of carrying out related activities, instrumental or consequent to the execution of the Contract;

(iv) to external consultants (for example, for the management of tax obligations), if not designated in writing as Data controller;

(v) to external parties that carry out control activities, such as independent auditors, board of auditors, supervisory body;

(vi) to factoring companies and / or specialized companies or law firms for debt collection and / or for the protection of their interests / rights.

he aforementioned subjects, to whom the personal data of the Interested Party will be or may be communicated (as they are not designated in writing as data controllers), will process the personal data as Data Controllers in accordance with the Privacy Code, in full autonomy, being unrelated to the original processing performed by the Data Controller.

The updated list of the Data Controllers can be provided upon request by the Interested Party.

The data of the Interested Party will not be distributed.

If this is necessary for the performance of the Contract, the personal data of the Interested Party may be transferred to countries belonging to the EU and / or to countries outside the EU, in full compliance with the provisions of the Privacy Code, the provisions and decisions of the Privacy Guarantor on the subject, as well as by the European Community legislation. In particular, the Data Controller undertakes to comply with the provisions set forth, respectively, by Decisions 2001/497 / CE, 2004/915 / CE and 2010/87 / EU (according the case in question), which require the signing of "Standard contractual clauses" between legal entities involved in the processing of non-EU data.

4. Rights of the Interested Party.

rticles 15 and subsequent of the privacy regulations give the Interested Party the right to obtain:

  • confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form;
  • the indication of the origin of the personal data, of the purposes and methods of the processing, of the logic applied in case of treatment carried out with the aid of electronic instruments, of the identification details of the Data Controller;
  • updating, rectification, integration, cancellation, transformation into anonymous form or blocking of data processed in violation of the law (including those for which conservation is not necessary in relation to the purposes for which the data are collected or subsequently processed). The attestation that these operations have been brought to the attention of those to whom the data have been communicated or distributed (also as regards their content), except in the case where such fulfillment proves impossible or involves a manifestly disproportionate use of means with respect to the protected right.

The Interested Party also has the right:

  • to revoke at any time the consent given for the processing of personal data, where envisaged (without prejudice to the lawfulness of the processing based on the consent given before the revocation);
  • to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even though pertinent to the purpose of the collection;
  • to object, in whole or in part to the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication;
  • to make a complaint to the Guarantor for the protection of personal data in the cases provided for by the Privacy Code;
  • to the portability of personal data within the limits of art. 20 of the Privacy Code.

To know the detailed and constantly updated list of the subjects to whom the personal data of the Interested Party may be communicated and to exercise the rights referred to in the articles 15 and subsequent of the Privacy Code, the same may contact the Data Controller:

Viale Duca D’Aosta, 3 
Tel: +39 0331350922 
E.mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

Busto Arsizio, 25/07/2019

This site does not use profiling cookies, but uses technical cookies and third party cookies. To find out more about the cookies we use and how to delete them, see our Cookies policy. Continuing to browse our website you agree to use our cookies. Directive 2002/58/EC