Pursuant to the current legislation on personal data processing, defined in accordance with the provisions contained in
EU Regulation 2016/679 of 27 April 2016 (hereinafter “GDPR”) and supplemented by Legislative Decree 10 August 2018, n. 101,
we inform you that the processing of the data provided or otherwise acquired will be carried out in full respect of fundamental freedoms, always adopting principles inspired by correctness, lawfulness, and transparency, and for purposes not exceeding the purposes of the collection, in order to guarantee the protection and confidentiality of the data itself.
01. Identity and contact details of the data controller and its representative:
The Data Controller is BALLER S.r.l., located at S.S. 114 km. 4.600 98125 Messina (ME) – VAT No. 00071310833
Tel. 090/633976 Email address: baller1828@pec.it website www.baller1828.com
02. Purpose of the processing for which the personal data is intended – Legal basis of the processing
The personal data acquired (e.g., surname and first name of the owner or legal representative of the client company), strictly aimed at fulfilling a legal or contractual obligation, is a necessary requirement for the conclusion of a contract and the provision of the product/service to the client and is processed by the Data Controller without the need for documented express consent, considering that, in the absence of such data, the Data Controller cannot proceed with the conclusion of the contract and guarantee the provision of the requested service.
Contractual Basis:
Your data is processed by the Data Controller, without the need for documented express consent, as necessary to satisfy the service performance requirements within the supply relationship you have activated or the execution of pre-contractual measures adopted at your specific request (e.g., formulation and heading of a quote).
Legal Basis:
Your data is also processed by the Data Controller, without the need for your documented express consent, when:
necessary to fulfill the legal obligation to which the controller is subject, such as in the case of fiscal obligations and/or communications to be ensured to control bodies.
03. Legitimate interests pursued by the data controller or by third parties
It is in the legitimate interest of the Data Controller to process your acquired personal data for the purposes referred to in paragraph 2 and further, not necessarily related to the purposes referred to in the aforementioned paragraph, also for Commercial and Direct Marketing purposes, activities for which the Data Controller is required to obtain Documented Express Consent, for which the data subject may exercise their Right of Objection immediately (without the need to justify the reason).
It is understood that even the Documented Express Consent may be revoked by the data subject at any time.
04. Possible recipients or categories of recipients of personal data
Third parties involved in the specific needs of fulfilling the supply contract (banks and credit institutions / correspondence delivery companies and couriers for the delivery of goods / professional tax consultancy firms / public entities for legal obligations / specific cloud service companies for electronic invoicing and tax data storage).
The personal data collected by BALLER S.r.l. is also processed by the internal personnel of the organization, duly instructed, who need to be aware of it in the performance of the necessary activities to pursue the above-stated purposes.
05. Period of retention of personal data or, if not possible, the criteria used to determine that period;
The data processed solely for the purpose of fulfilling the supply contract (see paragraph 2) will be processed until the conclusion of the contract, except for those that, by legal obligations, must remain available to control and supervisory bodies.
The data processed for commercial and/or direct marketing activities, for which the Controller has obtained Documented Explicit Consent (see paragraph 3), until any Opposition.
The Data Controller ensures the annual periodic verification of the integrity and updating of data and defines the deadline by which it will automatically proceed with the deletion of data within 3 years from the termination of relationships, informing the data subject of the deletion.
BALLER S.r.l. as Data Controller declares to:
NOT transfer customers’ personal data to a third country or an international organization unless this has been explicitly provided for in the supply contract signed by the data subject;
NOT activate automated decision-making processes, including profiling.
RIGHTS OF THE DATA SUBJECT
Exercise of the right
To ensure the exercise of the rights to the data subject, the Data Controller has specifically identified a dedicated email address and the contact references reported in this Notice.
Requests must be formally transmitted by the Data Subject to the contacts specified in point 1 with the subject “Type of Right Exercised” as per the list below (e.g., Right of Access).
- Right of Access
- Right to Rectification
- Right to Erasure
- Right to Restriction
- Right to Data Portability
- Right to lodge a complaint with a supervisory authority
More detailed information on the methods of exercising the data subject’s rights is available in the full text of the notice, available upon request at the aforementioned contact details and, in paper form, at the administrative offices of our establishment.