General Data Protection Regulation

Subject:

informative report under article 13 of the Regulation (EU) 2016/679 (the “GDPR” – General Data Protection Regulation) relating to the protection of individuals with regard to the processing
of personal data collected from the data subject.

a. DATA CONTROLLER
The data controller is Avuelle s.r.l. with registered office in Calenzano (FI) – Road of Work, 15– VAT Number IT 05712900488, Phone no. +39 055/4204891,
e-mail: info@avuelle.it
b. DATA PROTECTION OFFICER
Not falling within the cases provided for by the GDPR’s art. 37 and according to the WP243 guideline
a Data Protection Officer has not been designated.
c. LEGAL BASIS, PURPOSE AND OBLIGATION OF THE PROCESSING
Your personal data are processed for the following purposes:
Legal obligations: invoicing, tax recording and other administrative purposes;

  • Contractual obligations: supplying of goods or services;

Fulfillment of requests from the data subject;
The provision of Data for Legal and contractual purposes is mandatory; The provision of data is necessary to enable us to process your requests. Consent expression is not required.
Consent expression is not required. The failure to communicate your personal data will impede the fulfillment
of any contractual obligations

d. LAWFULNESS OF THE PROCESSING
The data processing is lawful as:

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  • Processing is necessary for compliance with a legal obligation to which the controller is subject; Processing is necessary for the purposes of the legitimate interests pursued by the controller (fulfillment of a contract or in the pursuit of the Company’s purposes).


e. RECIPIENTS OF THE PERSONAL DATA
Your personal data could be shared with the internal employees as well as the following third-party entities:

  • Business, legal, labor consultant;
  • Specific subjects consultants: (Health and safety in the workplace, information technology, maintenance of hardware or software products);
  • soggetti che possono accedere ai Suoi dati in forza di disposizioni normative;
  • Parties which have to be informed according to a legally binding obligation;
  • Monitoring organisations, especially in case of inspections;
  • Logistics and transportation companies (in execution of contractual obligations);


Third-party companies or practitioners (in execution of contractual or legal obligations). The name of the subjects listed above is available at any time upon request by the data subject.

f. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS
The transfer of personal data outside the EU or to international organisations is not foreseen.

g. DATA RETENTION PERIOD
The period of personal data retention, where there are no legal obligations or cancellation requests,
is based on the existence of the purposes listed at point “c”
or on the need of regular performance of the company business.

h. RIGHTS OF THE DATA SUBJECT
The Data Subject has the right to request at any time of access, rectification, erasure, portability of Personal Data as well as
to object, revoke or restrict the data processing or propose a complaint to the Data Proctection Supervisor Authority.

i. AUTOMATED DECISION-MAKING PROCESSES
Personal data are not processed with automated decision-making processes.