Privacy Policy Art. 13 of Regulation (EU) 679/2016

BIANCHI & C. TRASPORTI SRL recognizes and respects the importance of protecting individuals’ privacy and ensure that everything in its power will be performed in order to protect personal data from any risk of infringement.
Down below there is the list of information that are required by regulation EU 679/2016 (General Data Protection Regulation) for the processing of personal data.

1) Identity and contact details of data controller (Art. 13, paragraph 1, letter A GDPR).

BIANCHI & C. TRASPORTI SRL – headquartered Via Adda 18/20, Casnate con Bernate (CO) – on behalf of its legal representative, in accordance to art. 4 and 24 of Regulation, operates for the processing of personal data who can be contacted by mail to the provided address or by e-mail at salesoffice@bianchigroup.com.


2) Categories of processed data (art 15 GDPR).

CATEGORIES OF DATA

EXAMPLES

Personal data

Name, surname, title, address, nationality, residence, telephone number, fax, fiscal code, VAT number, e-mail address

Accounting data

IBAN code and bank/postal details (except credit card number)

BIANCHI & C. TRASPORTI does not require the submission of  “special categories of personal data”, foreseen in Article 9, such as race or ethnic origin, political ideas, religious and philosophical convictions, genetic data, biometric data, health conditions, sexual orientation etc. If the processing of such data will be necessary for the service, data subject will be informed in advance in order to provide explicit consent.


3) The purposes of the processing for which the personal data are intended as well as the legal basis for the processing (Art. 13, paragraph 1 GDPR).

Personal data will be used only for the definition of employment contract or collaboration contract in conformity with Article 13 of Regulation and Privacy obligations. As regards to “the necessity for the performance of a contract” it is included any data processing operation, related to the managing, the administration and the compliance of the contractual relation.
The processing of data concerns the compliance of specific legal obligations that are involved in the management of the business relationship (accounting/financial) according to Article 6, paragraph 1, letter B. (In order for processing to be lawful, personal data should be processed on the basis of the consent of the data subject concerned or some other legitimate basis, […] including the necessity for compliance with the legal obligation to which the controller is subject or the necessity for the performance of a contract to which the data subject is party).

4) The period for which the personal data will be stored (Art. 13, paragraph 1 GDPR).

BIANCHI & C. TRASPORTI provides security measures to preserve the confidentiality, the integrity and the availability of personal data and it obliges third parties to provide the same measures.
Ordinary means (i.e. mail delivery, telephone calls), automatized means (i.e. automated telephone calls) and any related means (i.e. fax, e-mail, short messages, newsletters) can be used for the accomplishment of objectives.


5) Subjects authorized to carry out processing (Art. 13, paragraph 1 GDPR).

The treatment of personal data will be carried out only by individuals expressly and specifically designated by BIANCHI & C. TRASPORTI based in its Headquarters or in its branches in quality of responsible (Art. 28) or in quality of authorised staff, as individuals expressly designed to process personal data within the terms provided by Regulation and national law in accordance to GDPR regulation.  Data could also be shared to third parties when needed in accordance with the conditions established by the law. For this purpose data can be communicated to external businesses or professionals that BIANCHI & C. TRASPORTI may work with for the purposes listed in this informative document.
BIANCHI & C. TRASPORTI SRL ensures that personal data will not, under any circumstances, be disseminated to unknown individuals.
BIANCHI & C. TRASPORTI SRL forces third suppliers and managers, in charge of the processing, to respect the same privacy policy, and to limit the processing of data only connected to the request desired.
To allow the fulfilment of contractual and law obligations, personal data could also be communicated to post offices, shippers, couriers for sending documents; to banks for accounting reasons; to public authorities; to third parties for providing IT services, record-keeping, accounting and tax reasons.

Personal data will not be transferred to countries where Regulation GDPR does not apply (non-European countries). Except for specific services, in that case the person concerned will be informed in advance in order to provide explicit consent.
BIANCHI & C. TRASPORTI will not resell your personal data under no circumstances.


6) Period of retention of personal data (Art. 13, paragraph 2, letter A GDPR).

Generally, BIANCHI & C. TRASPORTI will keep personal data only for as long as strictly necessary, according to the reason for which it was collected, unless withdrawal.
If personal data that are not required or necessary will be provided, BIANCHI & C. TRASPORTI cannot be considered owner of these data and will proceed to delete them as soon as possible.
Regardless of the withdrawal, personal data will be stored in order to guarantee the compliance of contractual or legal obligations (art. 2220 c.c.).
At the end of data retention period, data will be cancelled, meaning that they will be anonymized.


7) Rights of the data subject (art. 15 – 21 GDPR).

Obtain confirmation as to the existence of personal data being processed by BIANCHI & C. TRASPORTI, and in that case request the access to personal data;

  • To request the rectification and cancellation of the data or the limitation of the processing;
  • To exercise the right to oppose to the processing of data;
  • According to article 20 of GDPR exercise the right to data portability.

To exercise these rights BIANCHI & C. TRASPORTI can be contacted at the address listed at point 1 of this document.

8) To whom address to file a complaint.

If the data subject believes that the processing infringe the GDPR, he/she has the right to file a complaint to the Supervisory Authority, in the Country where he/she lives, works or where the violation has taken place. The Italian supervisory authority is the Authority for the protection of personal data.


9) Legal and contractual obligation of communication.

The communication of personal data and the related processing are necessary for the start, the follow up and the correct managing of the working relationship; so this communication of personal data is mandatory. The denial to share required data could cause the impossibility to define and manage the contractual relation.

10) The existence of automated decision-making, including profiling.

According to Article 13, paragraph 2, letter F of GDPR, we inform that the personal data collected will not be subjected to any automated decision-making process, profiling included of Article 22, paragraph 1 of the Regulation.


11) Use of personal data for other purposes.

If BIANCHI & C. TRASPORTI wants to process personal data for different purposes compared to the purpose they were collect originally, before processing them, it will provide all relevant information, according to Article 13, paragraph 2 of Regulation.


12) Updates and changes.

Any updates of this document will be communicated promptly via appropriate means of communication and if BIANCHI & C. TRASPORTI will use data for other purposes than those indicated in this document it will inform the person concerned before processing and only after his/her consent if needed.