INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
CONSULTANTS AND CONTACT PERSONS OF THE SUPPLIER
Italtel S.p.A. with registered office at Viale L. Schiavonetti, 270/F, 00173 Rome, in its capacity of Data Controller (hereinafter referred to as “ITALTEL” or the “Data Controller”), pursuant to Art. 13 and 14 of the Regulation (EU) 2016/679 (“GDPR”) wishes to inform you of the following.
CATEGORIES OF PERSONAL DATA
Your personal data are made up of common data such as your name, your e-mail, your telephone numbers, your employment position within the Company that has a contractual relationship for the supply of products and/or services with ITALTEL and, if you are a Consultant, also your bank references, VAT number, tax and legal domicile.
PURPOSES OF THE PROCESSING
Your personal data may be processed for the following purposes:
- execution of the supply contract between ITALTEL and the Company of which you are the contact person or execution of the consultancy contract in force with you;
- execution of the related managerial, administrative and accounting obligations;
- quality management;
- execution of any maintenance obligations;
- fulfilment of legal obligations;
- corporate security to allow you access to the ITALTEL premises;
- information security;
- any defence needs.
PROCESSING METHODS
The processing will be performed using manual and/or automated means that are appropriate to ensure data security and confidentiality.
NATURE OF THE PROCESSING
The provision of data is optional but necessary for the execution of the consultancy contract in force with you or the supply contract with the Company of which you are the contact person.
SOURCE OF DATA AND LEGAL BASIS OF THE PROCESSING
Your data are collected from you but may also have been provided by your employer, for example, as you are the contact person for ITALTEL.
The legal basis of the processing concerns the legitimate interest of the Data Controller as well as the fulfilment of the contractual and legal obligations with you or the Company of which you are the contact person.
The legitimate interest also concerns by the purposes of security, defence (video surveillance in the case of accessing the premises of the Data Controller) or communication within the Italtel Group. You can always object to the processing carried out for the legitimate interests of the Data Controller.
The Data Controller, in the event of exercising the right to object by the data subject, refrains from further processing of personal data unless he/she demonstrates compelling legitimate reasons for the processing that overrides the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
TRANSFER OF PERSONAL DATA
Your data can be disclosed to:
- auditing company for legal tax and accounting obligations;
- certification bodies for ISO compliance;
- public entities for complying with legal obligations, or in case of inspection;
- third parties to ensure the exercise of the right of defence (law firms) or judicial authorities, in compliance with their orders;
- the bank indicated by you for the payment of your fees, in case of consultancy contract with you.
The concerned data may be disclosed to other parties only if necessary for purposes of prevention, detection or repression of crime, in compliance with the applicable regulations.
TRANSFER OF PERSONAL DATA OUTSIDE THE EU
Some of your data may also be disclosed to extra-EU countries for the same purpose of implementing the contractual relationship with ITALTEL, for example, to other companies belonging to Italtel Group.
The transfer will be done in relation to countries with an adequate level of protection recognised by a decision of the European Commission, or in the presence of the conditions provided for by Art. 46 of the GDPR of appropriate safeguards, including but not limited to, standard contractual clauses, binding corporate rules, adherence to codes of conduct or certification systems and, in any case, in compliance with Chapter V of GDPR.
All extra-EU countries in which there are companies of the Italtel Group where your data could be transferred are listed on the www.italtel.com website, while the updated list of countries having personal data protection legislation considered adequate by the European Commission is accessible from the official website of the Italian Data Protection Authority on this link https://www.gpdp.it/temi/trasferimento-di-dati-all-estero.
DATA RETENTION
Your data will be stored for the period strictly necessary for the fulfilment of legal obligations, contractual obligations, and, if required, for the exercise of the right of defence of the Data Controller.
In case you are the legal representative or an attorney of the supply company or other attorney or have already signed a consultancy contract or other accounting documentation relevant for the purposes of the contractual relationship or for purposes of fulfilment of legal obligations, your data may be stored up to ten years as well as, in the event of an arising defensive need, up to the persistence of the right of defence.
DATA SUBJECTS’ RIGHTS
At any time, you may exercise your rights towards the Data Controller referred to in Chapter III of the GDPR, such as, for example, the right of access, rectification, integration, erasure, restriction of processing, portability and the right to object in presence of legal conditions.
In order to assert your rights, you shall send a communication to the registered address of ITALTEL by specifying “Privacy” in the subject. Alternatively, such communication can be sent to the e-mail address privacy@italtel.com, or by contacting the Data Protection Officer (DPO) by sending an e-mail to dpo@italtel.com. In the same manner, you can request the list of Data Processors.
Finally, please remember that you may lodge a complaint to the Italian Data Protection Authority (www.garanteprivacy.it).
Rome, 14 April 2022
