Supplier notice – Processing of personal data

Suppliers selection and management purposes

Polti S.p.A sole shareholder, via Ferloni, 83 - 22070, Bulgarograsso, Como, tax code and VAT number 01457440137 (hereinafter referred to as Polti), the parent company of:

• POLTI ESPAÑA S.A. - Paseo del Ferrocarril 381- 08850 Gavà - ES
• POLTI FRANCE S.A.S. - 11/13 Rue des Aulnes - 69760 Limonest - FR
• POLTI UK LTD. - The Junction - Merchants Quay - M50 3SG Manchester - GB
• POLTI DEUTSCHLAND G.M.B.H. - Hafeninsel 11,  - 63067 Offenbach am Main - DE
• POLTI USA INC. - 5301 Beethoven Street, Suite 170 - Los Angeles, CA 90066 - US
• POLTIPLAST S.R.L. - Via Monte Rosa n. 13 - 22070 Bulgarograsso (CO) - IT

in the performance of its own activities in its capacity as data controller, collects and processes personal data provided by the data subjects. In order to guarantee the protection and exercise of the rights provided for by law with regard to the protection of personal data, the data subject is informed of the following:

Purposes of the data processing

Data provided by data subjects will be processed exclusively for the purposes inherent to supplier selection and qualification activities and the management of the supply contract.

In addition to the staff responsible for managing your contract, the data may be processed by the following entities:

1. Postage and logistics companies;
2. IT service provider companies;
3. Public bodies;
4. Credit institutions;
5. Financial brokerage firms;
6. Consultancy firms;
7. Law firms;
8. Other suppliers.

In the context of the activities which form the object of the contract, and pursuant to Article 49, paragraph B of EU Regulation 2016/679, Polti may send the personal data of the data subjects to countries not belonging to the European Community for purposes inherent to the activities provided for by the supply contract.

Data subject’s rights and methods of exercise

In line with the provisions of Article 13, paragraph 2 of EU Regulation 2016/679, data subjects must be informed of the methods by which they may exercise their rights.

Data subjects are informed that pursuant to Article 12, paragraph 3 of EU Regulation 2016/679:

1. in the case that a request is made by the data subject to exercise the rights provided below, Polti has a period of one month in which to respond;
2. in the case of multiple requests, this period may be extended by two months.

Storage period of the data

Data subjects are informed that personal data will be kept on Polti’s systems for as long as necessary to fulfil the specified purposes. Any data that could be generated by virtue of additional contractual relationships (e.g. tax documentation) will be kept in accordance with the legal provisions.

Rights of the data subjects

Pursuant to Articles 15-22 of EU Regulation 2016/679, Polti undertakes to ensure that data subjects are able to fully exercise their rights, provided that this does not harm a legitimate right or the rights of other data subjects. Data subjects wishing to exercise such rights may do so by writing to the following address: privacy@polti.com

Data subjects are informed that pursuant to Article 13, paragraph 2, point D) of EU Regulation 2016/679, in the case of serious breaches or failure to comply by Polti with one of the rights set forth in this notice, data subjects may file a formal complaint with the relevant national Data Protection Authority.