Information on the Processing of Personal Data
Information document article 13 EU Reg. 2016/679- GDPR

This information is provided to individuals acting on behalf of suppliers/collaborators of the company BABY CHIBI S.r.l. with Registered Office in Via della Fiorandola, 70 E 52100 Arezzo (AR) pursuant to Art. 13 GDPR 679/16 – “European Data Protection Regulation. In your capacity as “Data Controller” and “Data Subject”, i.e. the entity to whom the data being processed refer and/or are handled by you in responsibility, we would like to make you aware of the essential elements of the processing operations carried out.

1. Purpose of processing and legal basis.
The collection and processing of personal data are carried out for the purpose of conducting:
– The fulfillment of all operations imposed by regulatory obligations (legal basis: Art. 6 par. 1(c) of Reg. UE 679/2016 – GDPR);
– operations strictly related and instrumental to the initiation of contractual relations, including the acquisition of information prior to the conclusion of the Contract (legal basis: Art. 6 par. 1 lett. b) and c) of EU Reg. 679/2016 – GDPR);
– the management of relations with the Supplier/Customer for activities of administration, accounting, invoicing, services, management of any litigation (legal basis: Art. 6 par. 1 lett. b) and c) of EU Reg. 679/2016 – GDPR); The provision of data is mandatory for the achievement of the purposes related to the obligations provided for by laws or other binding regulations and necessary for the proper establishment and continuation of the relationship with you established. Any refusal to provide the above data, although legitimate, could jeopardize the proper conduct of the relationship with our Company and, in particular, could result in the impossibility for BABY CHIBI S.r.l. both to make purchase orders to suppliers, as well as to take advantage of the provision of services requested and the related invoicing. the Processing of your data may be carried out, limited to the purposes listed above, without your consent.

2. Mode and timeframe of treatment.
BABY CHIBI S.r.l. processes the personal data of data subjects lawfully and fairly and in a manner that ensures their confidentiality and security. Processing and storage are carried out, by manual and automated means with organizational methods and logic strictly related to the stated purposes.
In particular, all technical, IT, organizational, logistical and procedural security measures, as required by EU Regulation 2016/679, will be taken so that the minimum level of data protection required by law is guaranteed. In addition, the applied methodologies ensure that access to the data is allowed only to those persons entrusted with the processing by our Company, or third parties otherwise appointed as data processors.
The data provided will be stored in our archives according to the following parameters:

– For administration and accounting activities: 10 years as stipulated by Law in the provisions of Article 2220 C.C., subject to any late payment of fees justifying the extension;

3. Place of processing.
The data are currently processed and stored at the operational headquarters of the writer, in Via della Fiorandola, 70 E 52100 Arezzo (AR). They are also processed, on behalf of the writer, by professionals and/or companies appointed to carry out technical, development, management and administrative-accounting activities.

4. Mandatory or optional nature of data provision.
Some data are indispensable for the establishment of the contractual relationship or its execution, while others can be defined as ancillary to these purposes. The provision of data to the writer is obligatory only for data for which there is a regulatory or contractual obligation.

5. Consequences of refusal to confer.
The processing that is the subject of this notice is lawful and permitted, even in the absence of consent, insofar as it is necessary for the execution of a contract to which the data subject is a party (the relationship of supplying/requesting products/services). In cases where the provision of data is required by a regulatory or contractual obligation, any refusal would put the Supplier/Customer in the condition of not being able to execute or continue the Contract as it would constitute unlawful processing. In cases where there is no legal obligation to provide data, refusal would not result in the above consequences but would still prevent the execution of ancillary operations.

6. Data communication.
Without prejudice to the communications and disclosures made in execution of legal obligations, the data related to your Legal Person may be disclosed in Italy and/or abroad to:
– Professionals and consultants, consulting firms;
– Public and private entities, including as a result of inspections or audits such as: Tax Administration, Tax Police Bodies, Judicial Authorities, Labor Inspectorate, ASL, Social Security Bodies, Chamber of Commerce, Municipalities, etc.);
– Persons who can access your data by virtue of legal provision.

However, the data will not be transferred outside the EU territory and in any way disseminated.
The full list of BABY CHIBI S.r.l.’s External Data Processors is available upon request.

7. Rights of the data subject.
In connection with the aforementioned processing, each Data Subject may exercise the rights set forth in Articles 15 to 22 of the Regulations.
– of access to personal data (art 15 of the GDPR);
– to obtain the rectification of the same or the restriction of processing concerning him/her (Articles 16, 17 and 18 of the GDPR);
– To object to the processing (Article 21 of the GDPR);
– to data portability (Article 20 of the GDPR);
– To withdraw consent;
– To file a complaint with the supervisory authority (Privacy Guarantor – www.garanteprivacy.it)

In cases of objection to the processing of Data in accordance with Article 21 of the Regulations, the Company reserves the right to evaluate the application, which will not be accepted if there are compelling legitimate grounds for processing that override the interests, rights and freedoms of the Data Subject

8. Data Controller and Data Processor.

he data controller, whom you may contact to assert the rights transcribed above, is BABY CHIBI S.r.l., with registered office in via della Fiorandola, 70 E 52100 Arezzo (AR) P.IVA 02257260519

9. Procedures for exercising rights
You may at any time exercise your rights by sending:
– a registered letter with return receipt to BABY CHIBI S.r.l. at via della Fiorandola, 70 E 52100 Arezzo (AR)
– an e-mail to info@babychibi.it