Giordan Srl, with registered office in Via Lago di Iseo, 1 36015 Schio (VI), VAT no. 02447890241 (hereinafter, "Giordan"), as data controller, informs you, pursuant to art. 13 Legislative Decree no. 196 of 30.6.2003 (hereinafter, "Privacy Code")
and art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the following ways and for the following purposes:
1. Purpose of the processing
Giordan processes the personal, identifying data (e.g., first name, last name, company name, address, telephone, e-mail, bank and payment references - hereinafter, "personal data" or also "data") that you provide when concluding contracts for
Giordan's services.
2. Purpose of processing
Your personal data are processed without your express consent (art. 24 lett. a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following Service Purposes
- to conclude contracts for Giordan's services;
- to fulfil pre-contractual, contractual and fiscal obligations arising from existing relations with you;
- to fulfil obligations provided for by law, regulation, EU legislation or an order of the Authority (such as anti-money laundering);
- to exercise your rights, such as the right of defence in court.
3. Method of processing
The processing of your personal data is carried out by means of the operations indicated in art. 4 Privacy Code and art. 4 n. 2) GDPR and precisely: collection, recording, organisation, storage, consultation, processing, modification, selection,
extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data shall be subject to both paper and electronic and/or automated processing. Giordan will process your personal data
for the time necessary to fulfil the above-mentioned purposes and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes.
4. Access to data
Your data may be made accessible for the purposes stated in Article 2:
- to employees and collaborators of Giordan, in their capacity as persons in charge and/or internal data processors and/or system administrators;
- to third party companies or other entities (for example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that perform outsourcing activities on behalf of Jordan, in their
capacity as external data processors.
5. Communication of data
Without the need for your express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), Giordan may communicate your data for the purposes referred to in art. 2 to supervisory bodies (such as IVASS), judicial authorities,
insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is required by law for the fulfillment of the above-mentioned purposes. These subjects will process the data in their capacity
as autonomous data controllers. Your data will not be disseminated.
6. Security
The data are kept and controlled by adopting appropriate preventive security measures aimed at minimising the risks of loss and destruction, unauthorised access, unauthorised processing and processing that is not in accordance with the purposes
for which the data are processed.
7. Transfer of data
The handling and storage of personal data will take place within the territory of the European Union.