According to art. 13 EU Regulation n. 2016/679 (hereinafter, “GDPR”), and considering the personal data that the Company shall become available for the fulfilment of the requested performance, we inform you of the following:

The data controller is AZ SPA (hereinafter also referred to as “Company”), with registered office in THIENE VICENZA ITALY, VIA DELL’ELETTRONICA N. 20. The data controller can also be contacted by PEC email at the following address: Questo indirizzo email è protetto dagli spambots. È necessario abilitare JavaScript per vederlo.. The Company hasn’t appointed a DPO – Data protection officer.

The primary purpose of the processing of personal data is the correct and complete fulfilment of the requested performance. Your data shall be processed also for other purposes, in order to:
 fulfil the obligations according to tax and accounting purposes;
 respect the obligations of the Company pursuant to current law.
The personal data shall be processed by means of both paper and electronic files (including portable devices) and processed only with methods that shall be strictly necessary to reach the purposes indicated above.

Your personal data shall be lawfully processed, where:
 it is necessary for the fulfilment of the requested performance, for an agreement in which you are a part or for the execution of pre-contractual actions adopted on request;
 it is necessary to fulfil a legal obligation of the Company itself;
 it is based on a expressly provided consent for the performance of certain activities (for example, sending newsletter, etc.)

With regard to personal data relating to the requested performance in which you are a part or relating to the fulfillment of a regulatory requirement (for example, the obligations related to the keeping of accounting and tax entries), the refuse to communicate the personal data shall prevent the improvement of the contractual relationship as well as the execution of the requested performance.

Your personal data, processed for the above purposes, shall be stored for the duration of the requested performance and, subsequently, for the strictly necessary time in which the Company shall store the data for accounting and tax purposes or for other purposes provided for by the law or by regulations

Your personal data shall be disclosed to:
1. consultants and professionals who provide functional services
for the purposes indicated above;
2.banking and insurance institutes that provide functionalservices for the purposes indicated above;
3.people who process data in execution of specific legalobligations;
4.judicial or administrative authorities, for the fulfillment of legalobligations.

Your personal data shall not be diffused neither processed by any fully automated decision process, including profiling. If the Company decides to proceed in this direction, it will promptly request your express consent.

Among the rights recognized by GDPR are those:
ask the Company for access to your personal data and toinformation relating to them; for the rectification of the wrong data or the integration of the incomplete ones; for the erasure of your personal data (when there is a condition specified in art. 17, par. 1, GDPR and in compliance with the exceptions described in art. 17, par. 3); for the restriction of the processing (when there is one of the cases describes in art. 18, par. 1, GDPR);
request and obtain from the Company – when the legalbase of the processing would be an agreement or a consent, and the processing would be made by automated processes – your personal data in a format that can be structured and readable by automatic devices, even in order to communicate such data to another data controller (so-called “right of portability of personal data”);
oppose at any time the processing of your personal datawhen there are particular situations concerning them;
withdraw the consent at any time, only when the processingis based on your consent for one or more specific purposes concerning common personal data (for example, date and place of birth, address, etc.), or particular categories of data ( for example, data concerning your racial origin, your political opinions, your religious beliefs, your health status or your sexual life). The processing based on consent and carried out before its revocation preserves, however, its lawfulness;
file a complaint to the Supervisory Authority for theprotection of personal data – www.garanteprivacy.it

Rev. PRIVACY-AZ-R00-20181212 AZ spa