INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA
Acc. to Art 13 and 14 EU Regulation
No. 679/2016 (GDPR - General Data Protection Regulation)

Dear Customer / Supplier, pursuant to EU Regulation 679/2016 (hereinafter "GDPR") relating to the protection of individuals with regard to the processing of personal data, we provide you with the following information regarding the processing of your personal data.

We remind you that the provision of your data, also related to their updating, is a mandatory requirement, necessary for the execution of contractual obligations; the failure to communicate these data prevents our company from continuing the existing contract.

Identity and contact details of the DATA CONTROLLER

The Data Controller is MAYCOS S.r.l., with registered offices at VIA SOLFERINO No. 26; CASTIGLIONE DELLE STIVIERE (MN), CAP 46043 VAT number 01388960203 Tel: 39-03760376672113 which may also be contacted by writing to the following e-mail address This email address is being protected from spambots. You need JavaScript enabled to view it.

Purposes of the processing for which the personal data are intended as well as the legal basis for the processing

The data provided by you will be processed for the following purposes and their processing is necessary for the handling of all operations which concern contractual or pre-contractual relations between you and the Data Controller, as well as legal obligations of the Data controller:

• compliance with obligations pursuant to agreements between you and the Data Controller;
• compliance with administrative and accounting requirements (handling/processing of orders, correspondence, invoicing, etc.) connected with the above contracts; 
• compliance with requirements imposed by laws and regulations and in general by the applicable legislation, including EU laws, in force from time to time;
• pursuit of legitimate interests of the Data Controller.

Legal Basis for the processing:

• If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.
• If the data controller is subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR.
• If the processing of personal data is necessary for the purposes of the legitimate interests pursued by our company the processing is based on Article 6(1) lit. f GDPR.

The Data controller may process, exclusively for the purposed reported above, personal data such as: name, surname, location data, an online identifier, telephone number, company name and role covered, company address.

Provision of data and consequences of withholding consent to data processing

Provision of the data is compulsory for the purposes set out above. Any refusal to provide the requested data or their inaccuracy may result in the failure or partial execution of the tasks entrusted to the Data Controller and/or inability to continue the relationship established with the Data controller.

CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Your personal data may be communicated to the following categories of recipients:

• Other suppliers or service providers to ensure fulfilment of contractual relations or obligations.
• Public administration or Public authorities to fulfil legal obligations.
• Employees of the Data Controller authorized and trained to carry out the processing.
• Banks.
• Other processors engaged by the data controller and authorised to carry out specific data processing (for example financial consultants, software application suppliers).

Transfers of personal data to third countries or international organisations

Please be advised that pursuant to article 13, paragraph 1, letter f of the Regulation, personal data collected may be transferred to a third country or to an international organization inside the European Union for the above-mentioned purposes.

DuratION OF PROCESSING

Save where a longer storage period is required to comply with the applicable regulations, including accounting rules, the Data Controller will store your data for the period strictly necessary to ensure that the services purchased are provided properly.

After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.

RIGHTS of THE data subject

Pursuant to Article 13, paragraph 2 , letter(b and Article 13, paragraph 2, letter d of the Regulation, please be advised that:

• You are entitled to request the data controller to access your personal data and update, supplement, correct or erase all the data provided, request anonymization of the same or blocking of those data processed in violation of the law, object to their processing for legitimate reasons and require restriction of their processing;
• You have all the rights referred to in Articles 16-21 of the Regulation (right to rectification, right to erasure – the so-called “right to be forgotten” - right to restriction of processing, right to data portability, right to object).

You have the rights to lodge a complaint with the competent Data Protection Supervisor for the protection of personal data, following the procedures and indications published on the authority’s official website www.garanteprivacy.it).

Methods of processing

The processing of your data will be carried out by using telematic, paper-based and IT tools; this processing will be based on the principles of accuracy, lawfulness and transparency and protection of your rights and your privacy. The data will be processed so as to minimize the risks of destruction, loss, unauthorized access or any use that does not comply with the purpose for which the information was collected.