Information to customers
pursuant to art. 13 EU Regulation 2016/679

Reference legislation:

• EU regulation no. 679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of personal data (hereinafter “EU Regulation”)
• Legislative Decree n. 196 of 30 June 2003 (hereinafter the “Privacy Code”), as amended by Legislative Decree no. 101 of 10 August 2018

Esignworld s.r.l. (hereinafter also the “Company”), with registered office in Via della Previdenza Sociale 13, 42124 Reggio Emilia VAT number – tax code 02680100357 – Registered in the Reggio Emilia register of companies REA: RE – 303784 , ) and offices in via Giovanni Savelli, 28 – 35129 PADOVA (PD)

informs that personal data will be processed in compliance with national and community legislation on the processing of personal data.

The processing of personal data relating to legal persons does not fall within the scope of the personal data protection regulations set up by EU Regulation 2016/679. For the purposes of clarity and transparency towards its Customers, the Company makes this information also available to legal entities, describing the methods and purposes of all the processing that it carries out or has the right to carry out on the personal data of the interested parties as follows. defined.

The Company acts as “Data Controller”, meaning the natural or legal person, public authority, service or other body which, individually or together with others, processes personal data, establishing the purposes and methods of the processing of personal data.

Specifically, the processing of the personal data of the interested parties may be carried out by persons specifically authorized by the Company to carry out processing operations.

This information concerns “interested parties”, by which we mean the natural persons to whom the personal data refer, or all those subjects who operate in the name and on behalf of the legal person Client of the Company and whose personal data are processed by the same.

1. Purpose and legal basis of the processing of personal data

The collection and processing of personal data by the Company takes place for the exclusive purpose of adequately providing for the obligations related to the performance of the economic activity and in particular for:

1. the execution of pre-contractual activities and the acquisition of preliminary information for the purpose of signing the contract;
2. the management of the contractual relationship and all administrative, operational, management and accounting activities relating to the contract (order management, invoicing, customer reliability checks);
3. the management of litigation, breach of contract, warnings, transactions, arbitrations, judicial disputes;
4. the fulfillment of the obligations established by Laws, Regulations, Community Regulations and provisions issued by Authorities.

The processing is carried out by virtue of the fulfillment of contractual and / or pre-contractual and legal obligations related to the relationship established with the Company; consequently, the express consent of the interested parties is not required.

2. Nature of the provision of personal data

The provision of personal data is mandatory for those personal data in relation to which there is a legal or contractual obligation to provide the same; likewise, the provision of personal data necessary for pre-contractual obligations is mandatory. Any refusal to provide such “mandatory” personal data could lead to the non-execution of the contract. Any refusal to provide personal data strictly functional to the execution of contractual relationships, but for which there is no obligation to provide, will in principle not entail any consequence, except for the possible impossibility of following up the related operations to such personal data or the impossibility of establishing new relationships.

3. Methods of processing and storage time of personal data

The processing of personal data will be carried out in a lawful and correct manner and in any case in compliance with the aforementioned regulations, using suitable tools to guarantee their security and confidentiality; the processing of personal data may also be carried out using IT tools in order to store, manage and transmit the data.

The treatment will be carried out, primarily, by company personnel specifically authorized and instructed by the Company regarding the completion of processing operations on personal data.

With reference to the other subjects who could process the personal data of the subjects concerned, please refer to point 4 of this information.

The retention of personal data will take place in a form that allows the identification of the interested parties for a period of time not exceeding that necessary for the purposes for which they are collected and processed.

In particular, in relation to the management of the contractual relationship, personal data will be kept for the times defined by the relevant legislation as well as, upon termination of the contractual relationship, for the ten-year term for the conservation of only data of a civil nature.

4. Recipients of personal data

In relation to the personal data of the interested parties, the Company may carry out communications deriving from an obligation of law, regulation or community legislation.

For the purposes stated in this information only, personal data may be communicated, without the express consent of the interested parties being required, to companies of the Euronovate group which carries out management and coordination activities for the companies of the group.

The communication, even through the simple consultation or making available of the personal data of the interested parties, can also intervene in relation to the following subjects:

1. bodies, supervisory bodies, authorities or public institutions;
2. natural or legal persons who provide specific services, such as data processing, administrative, tax and / or accounting consultants, organization of trade fairs and communication events;
3. commercial intermediaries, banks and credit institutions, legal consultancy companies, financial intermediation companies, natural or legal persons responsible for the recovery or disposal of credit, auditing and / or certification of financial statements and quality systems, independent collaborators of the Company, agents and reporters, insurers and brokers.

The subjects referred to in points a) and c) operate as independent Data Controllers.

The subjects referred to in point b) operate as specifically appointed Data Processors.

In any case, only the personal data necessary and relevant to the purposes stated in this information are transferred to the aforementioned subjects. The list of these third parties will be constantly updated and accessible by interested parties upon request to the Company, by writing to the email address indicated in points 6 and 7 of this information. If necessary for the execution of contractual relationships, personal data may be transferred to third countries not belonging to the European Union (EU) or to the European Economic Area (EEA) based on the existence of adequacy decisions of the European Commission. or on the basis of the adoption of model contractual clauses, duly adopted, or of specifically authorized binding corporate rules. Personal data will not be disclosed and therefore will not be disclosed to the public or to an indefinite number of subjects.

5. Rights of the interested parties pursuant to art. 15, 16, 17, 18, 20 and 21 of the EU Regulation

Each interested party can exercise the rights of access to personal data provided for by art. 15 of the EU Regulation and the rights provided for by art. 16, 17, 18, 20 and 21 of the same Regulation regarding access, rectification, cancellation, limitation of processing, portability of personal data where applicable and opposition to the processing of personal data and the withdrawal of consent.

6. Identification of the data controller

The data controller is ESignworld S.r.l VAT number 02680100357 with registered office in Via Giovanni Savelli 28 – PADOVA (PD) and registered office in Via della Previdenza Sociale, 13 – 42124 REGGIO EMILIA (RE), tel: +390496892032 E-mail esignworld@legalmail.it

If the Company does not provide feedback to the request from each interested party within the timeframe provided for by the law or the response to the exercise of the rights is not suitable, the interested party may lodge a complaint with the Guarantor Authority for the Protection of Personal Data.

7. Personal Data Protection Officer

It should be noted that the Company has appointed the Personal Data Protection Officer. The Personal Data Protection Officer monitors compliance with the regulations on the processing of personal data and provides the necessary advice. In addition, where necessary, it cooperates with the Authority for the Protection of Personal Data.

Below is the indication of the Personal Data Protection Officer and related contact details:

The DPO is available at this contact point: mbollani@ecoconsult.it