Updated as at 30 May 2019
Welcome to Isagro SpA’s website, Data controller with office in Via Caldera, 21, Orange Building, 20153 Milan (MI), Italy. The e-mail address of our Data Protection Officer (DPO) is email@example.com.
Your privacy is very important to us and this is why we want to inform you about how we collect and use information about you.
Our company has always paid special attention to the processing and protection of the personal data of its Customers, Users, Suppliers, Employees and all of those it comes into contact with. For this reason, in order to ensure utmost compliance with EU Regulation 2016/679, Isagro SpA has adopted a suitable Privacy Organisational Model.
Pursuant to the Regulation, those who process personal data must inform the data subject about the data being processed and certain elements qualifying the processing: this must be done fairly, lawfully and transparently while protecting your privacy and your rights. In accordance with the provisions of Articles 13 and 14 of EU Regulation 2016/679, we provide you with the following information.
What is this Policy and who does it concern?
This policy is addressed to the Customers and Suppliers of Isagro SpA and describes our practises concerning privacy.
This page describes how we process the personal data of our Customers and Suppliers, i.e. what information we collect, how we collect it, what we do with it, how we protect it, how long we retain it, and the rights of the data subjects with respect to their information.
What information do we collect?
We collect two types of information: Personal Information (which can be used to uniquely identify an individual, such as an e-mail address) and Non-Personal Information (which relates to Legal Persons or which does not allow the identification).
In addition to information about Legal Persons, we may collect information about the Employees of our Customers and Suppliers, such as contact details (e-mail, telephone number, etc.), personal and tax data, as well as other personal data of a common nature needed for the performance of current or future contractual relationships with our companies.
Why do we collect personal data?
We collect and use information to effectively manage contractual relationships.
We collect information that concerns you for the following purposes:
Who do we share your information with?
We may share our Customers' or Suppliers' information with Third parties, such as suppliers, Parent companies, subsidiaries or affiliates, or by virtue of a legal obligation.
Information may only be shared in accordance with this policy.
Isagro SpA may share your Information with third parties (or otherwise grant them access) only in the following ways and in the following cases:
Isagro SpA may share the Information of its Customers or Suppliers with outsourcers for the sole purpose of fulfilling the obligations arising from a contract which the Customer or Supplier is a party to or to address, prior to the conclusion of the contract, your specific requests, or for the conclusion or execution of a contract entered into in your favour. In this case, the outsourcer is appointed as Data Processor pursuant to Article 28 of Regulation 2016/679.
Parent companies, subsidiaries or associates
Parent companies, subsidiaries or associates pursuant to Article 2359 of the Italian Civil Code, or companies subject to common control, may access information relating to Customers or Suppliers for administrative and accounting purposes or for activities connected with the performance of organisational, administrative, financial and accounting activities, regardless of the nature of the data processed. In particular, these aims are pursued through internal organisational activities, activities that enable the fulfilment of contractual and pre-contractual obligations, the management of the employment relationship in every phase, the keeping of the accounts and the application of the rules on tax, trade union, social security and welfare, health, hygiene and safety at work.
Fulfilment of legal obligations
Isagro SpA may disclose or otherwise grant others access to the Information of its Customers or Suppliers by virtue of a legal or juridical obligation, such as a tax obligation, subpoena, judicial proceeding, search warrant, court order, or under applicable law, if it believes in good faith that such conduct is required by law, with or without prior notice to the Data Subjects.
Transfers outside the EU
The transfer of information relating to our Customers or Suppliers, even temporarily, to a country outside the European Union may only take place if it is necessary to perform obligations arising from a contract which the Customer or Supplier is a party to or to fulfil, before the conclusion of the contract, your specific requests, or for the conclusion or execution of a contract entered into in your favour.
How long do we retain the information?
We retain the information for the time necessary to manage the contractual relationships and to fulfil legal obligations.
We retain the Information of our Customers or Suppliers as long as necessary to manage existing contractual relationships.
We may continue to retain this Information after the purpose for which it was collected has been achieved to the extent reasonably necessary to fulfil legal obligations, resolve disputes, prevent fraud and misuse, comply with contracts entered into and/or protect our legitimate interests.
Your rights and how to contact us
You can request by e-mail or letter to access the personal data we process, request its rectification or erasure.
We will respond to requests within a reasonable time frame and, in any event, no later than 30 days from their receipt.
Please remember that you have the right to obtain from Isagro SpA, where applicable, access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing (Articles 15 et seq. of the Regulation).
The requests must be sent:
Right to claim
Data subjects who believe that the processing of personal data relating to them is breaching the provisions of the Regulation have the right to make a complaint to the Authority, as set forth in Article 77 of the Regulation, or to bring an action before the appropriate courts (Article 79 of the Regulation).