Information about the General Data Protection Regulation (EU) 2016/679 (GDPR), pursuant to art. 13
Pursuant to Article no. 13 of the General Data Protection Regulation (GDPR) no. 679 of 2016 we inform you as follows:
Data controller
The Data Controller is Cesana Srl, registered office in Via Solferino n.18 – 20121 Milan (MI), operational headquarters: Via Baccanello 22 —24030 Terno d’Isola (BG), Tel. 0354940689 e-mail admin@cesana.it
Personal data processing purposes
Personal data are processed within the normal activity of the Cesana Srl company for administrative and accounting purposes:
Fulfillment of tax-accounting obligations
Customer management (customer administration, contract administration, orders, shipments and invoices, reliability and solvency check)
Supplier management (administration of suppliers administration of contracts, orders, arrivals, invoices, selection in relation to the needs of the company)
Legal and economic treatment of personnel
Recipients or categories of recipients to whom the personal data may be disclosed
External companies or persons who carry out activities strictly connected and instrumental to the management of the commercial relationship such as: credit institutions, consultants and freelancers, individuals and associates.
Personal data retention period
Personal data will be kept for a maximum of 10 years and/or until the conclusion of the contractual relationship.
Rights of Data Subjects
The interested subject has the right to obtain from the Data Controller confirmation as to whether or not personal data is being processed and in this case the subject has the right to:
obtain access to personal data, request the correction or deletion of personal data or the limitation of the processing of personal data concerning him or to oppose their processing;
receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him and has the right to transmit such data to another data controller (data portability);
be informed of the existence of an automated decision-making process, including pre-filing;
if expressed, withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
propose a complaint to the supervisory authority.
Mandatory or optional nature of data provision and consequences of any refusal
Without the data processing and communication of a mandatory nature for the purposes described, it will not be possible to provide the interested party with the services and/or products requested, in whole or in part.