Client information notice

(pursuant to Articles 13 and 14 of EU Regulation 2016/679 – GDPR)

 

a) DATA CONTROLLER

The Data Controller is BEANTECH S.r.l., VAT number 02175740303, with registered office in Udine, Via Ivrea 5 (hereinafter “Data Controller”).

To exercise the rights recognized by EU Regulation 2016/679 or for any clarifications regarding the processing of personal data, you can contact the Data Controller at the following contacts: Tel. 0432 889787 – Email: privacy@beantech.it

 

b) PRELIMINARIES

Pursuant to EU Regulation 2016/679:

• Personal data means any information relating to an identified or identifiable natural person;
• The Data Controller is the legal entity that determines the purposes and means of processing;
• The Data Controller is obligated to provide the data subjects with information regarding the processing of their personal data.

This notice is provided in compliance with the obligations set out in Articles 13 and 14 of the GDPR.

 

c) PURPOSES OF THE PROCESSING

The personal data provided may be processed by the Data Controller for the following purposes:

1. To fulfill obligations arising from contracts and/or pre-contractual measures requested by the data subject;
2. To provide customer assistance services and related activities;
3. To determine and manage payment systems;
4. To fulfill tax and accounting obligations;
5. To plan activities and assess customer satisfaction levels;
6. To manage any disputes, both judicial and extrajudicial;
7. To comply with legal or regulatory obligations.

 

d) LEGAL BASIS FOR PROCESSING

The processing of personal data is based on the following legal grounds:

• Execution of a contract or pre-contractual measures (Article 6, par. 1, letter b GDPR): purposes 1, 2, 3, 5;
• Fulfillment of legal obligations (Article 6, par. 1, letter c GDPR): purposes 4, 7;
• Legitimate interest of the Data Controller (Article 6, par. 1, letter f GDPR): purpose 6.

 

e) PROVISION OF DATA AND CONSEQUENCES OF REFUSAL

The provision of personal data requested is necessary for achieving the purposes stated above. Failure to provide the data will result in the inability of the Data Controller to perform the contractual relationship or fulfill the related legal obligations.

 

f) RECIPIENTS OF PERSONAL DATA

Personal data may be processed by persons authorized by the Data Controller and external parties acting on behalf of the Data Controller as Data Processors, in compliance with confidentiality and security obligations.

Data may also be disclosed, to the extent strictly necessary, to banks, consultants, law firms, public authorities, social security or tax entities, where such disclosure is required by law or necessary for the execution of the contract.

Personal data will not be subject to dissemination.

 

g) TRANSFER OF DATA TO THIRD COUNTRIES

Personal data will not be transferred outside the European Economic Area. Should this become necessary, the transfer will be carried out in compliance with the conditions outlined in Chapter V of the GDPR.

 

h) DATA RETENTION CRITERIA

Personal data will be retained for the time necessary to achieve the purposes for which they were collected and, subsequently, within the limits set by applicable tax, accounting, and civil law regulations, as well as for the potential protection of the Data Controller’s rights.

Data no longer necessary will be deleted or anonymized.

 

i) RIGHTS OF THE DATA SUBJECT

The data subject may exercise at any time the rights set forth in Articles 15–22 of the GDPR, including:

• Access to personal data;
• Correction or deletion;
• Restriction of processing;
• Objection to processing;
• Data portability;
• Filing a complaint with the Data Protection Authority.