Policy Suppliers

Dear Suppliers,

this document contains information that we must provide to you, in compliance with the relative privacy law requirements (Regulation UE n. 2016/679 – GDPR) but most importantly because transparency and fairness towards our Suppliers is a fundamental part of our activity.

Please read this Privacy Policy carefully and be aware that this policy may be updated from time to time. We will notify you of any material changes to our Privacy Policy by posting any updated policies on this page. You will have a choice as to whether or not we may use your data in the new manner. In any case, we invite you to visit this area frequently to stay informed.

The Controller of the data is Alcas S.p.A., responsible of the lawful and fair processing of your personal data.

Contact details of the Controller:
Alcas S.p.A.
Head Office: Via Livorno 21/23 – 50142 Florence (FI), Italy
Administration Offices and Warehouse: Via dell’Industria 13/15 – 50056, Montelupo Fiorentino (FI), Italy
Telephone number: +39 0571 59561 & +39 055732591
E-mail: [email protected] & [email protected]

The types of personal data collected and processed, the purposes and the legal basis for the processing are the following:
– Purposes: Suppliers’ management
– Types of Personal data: VAT number and other numbers of personal identification; Name, address and other identification information; Contact details (telephone number, e-mail address, etc.)
– Legal basis
1.Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
2.Compliance with legal obligations to which the Controller is subject.

Providing personal data and the consequences of failure to provide such data: it is necessary to provide your data for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract and for compliance with legal obligations to which we are subject (i.e. Invoicing rules, taxation, ecc.) . The consequence of failing to provide your data for those purposes is that we will not be able to enter into a contract with you.

The recipients or categories of recipients of the personal data are: for the above mentioned purposes your data will be processed by our authorized personnel. Your data may be processed by our external Processors (for example: Consultants and independent contractors/freelancers -individuals or partnerships-, Banks and credit institutions, Companies operating in the field of logistics, ecc. )who are also responsible of the lawful and fair processing of your personal data and whom you may contact directly for any information or request. In order to obtain the complete list of our Processors you may contact the Controller at the above mentioned contact details.
Your data will not be disseminated.

Data transfers:
The Controller will not transfer data to a third country or international organization.

Automated decision making, including profiling:
Our Company does not implement any automated decision making, including profiling (art.22 (1) e (4) GDPR).

Data retention policy:
In compliance with the principles of lawfulness, purpose limitation and data minimization, according to art. 5 GDPR, your data will be retained for the period of time necessary in order to assure the fulfillment of the above mentioned purposes and in particular:
– for the entire term of the contracts;
– 10 years starting from the data of termination of the dealings of the Parties;
– In case of litigation: for the entire duration of the proceedings and until all legal remedies are available.

Rights of the data subject:
As data subjects, our Suppliers have the following rights, as provided by articles 15 to 22 GDPR:
You have the right to request from the controller access to and rectification or erasure (right to be forgotten) of personal data or restriction of processing concerning your data or to object to processing as well as the right to data portability.

If you have consented to the data processing for one or more purposes, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal .

You have the right to lodge a complaint with a supervisory authority of your Member State of habitual residence, place of work or place of the alleged infringement or with the Italian Supervisory Authority (Garante per la protezione dei dati personali, https://www.garanteprivacy.it/en/home_en)