General Data Protection Regulation (GDPR)

PRIVACY POLICY
as required by Regulation (EU) No. 679/2016 on data protection (GDPR)

The data subjects are informed as follows, with regard to their personal data:

1- Who is the Data Controller:
The Data Controller is Texa Industries S.r.l. headquartered at Strada Cà Bruciata 5, 46020 Pegognaga (Mantua), through its Legal Representative.
The Responsible for the processing of your data within the Company is Mr. Alessio Govi (Managing Director) who can be reached at privacy@texaindustries.com

2- Why we collect your data and on what legal basis:
You are under no obligation to provide us with personal data, other than the few details needed to allow the stipulation of a sale or purchase contract, or where necessary to allow payments or receipts.
Your data will be processed as part of our routine activities, for purposes connected to and instrumental to the management of our working relations.
Further processing will be necessary to comply with legal obligations, obligations dictated by European directives and the directions of the competent authorities and regulatory bodies.
The data is processed purely for the purposes of our activities and all processing takes place in accordance with Legislative Decree196/2003 and Regulation (EU) 676/2016.
Texa Industries only collects and processes your personal data when it has the legal basis to do so. This includes cases in which you authorise us to collect or process your personal data, when we have a contractual obligation to do so, and when we have a legitimate interest in processing your personal details.

3- How we process your data:
Your data is processed by means of the operations indicated in Article 4(2) GDPR 679/2016 and specifically:
– it is collected on printed forms or through our website
– we record the data in our computerised database to allow it to be used by our staff, for internal organisational purposes,
– we keep the data in computerised and printed archives,
– we read and process the data for internal work and statistical purposes,
– we modify the data if necessary,
– if necessary, we prevent unauthorised internal personnel from accessing the data
– we erase and destroy the data if the work relationship ends, or at the request of the data subject

4- Nature of the data processing:
If you do not provide us with your data we cannot establish or continue any working relationship.
Therefore the provision of your data is obligatory, in relation to the various purposes of the processing.
If you refuse to provide your data or do not allow for its processing or disclosure, we may be unable to establish or continue the working relationship or to carry out certain operations, depending on whether the data is necessary to complete the contract or operation.

5- Legitimate interests of the Data Controller:
The legitimate interests of the Data Controller are to respect and honour the parties’ contractual obligations.
In accordance with Art. 6 of the EU Regulation, the data processing is legitimate if it is based on the manifest consent of the data subject, which must be documented in writing if necessary.

6- Disclosure and dissemination of data to third parties:
Your personal data may, even without your express consent and solely in order to ensure the correct fulfilment of our activities and compliance with all the laws and regulations, be transmitted or disclosed to the following third parties, always in accordance with the provisions of the GDPR 679/2016:
– to employees and agents of Texa Industries Srl, in their capacity as persons in charge of data processing;
– to the financial administration and law enforcement authorities;
– to the suppliers we engage to provide ancillary services;
– to fraud investigation and debt recovery firms;
– to banks and credit institutions in connection with the company’s financial management;
– to insurance companies;
– to fiscal, contractual and administration consultants.
Texa Industries Srl is not responsible for the way in which third parties process and use the data.

7- Duration of Data storage:
Your data will be kept for 10 years from the date of termination of the contract/provision of the service or product, unless specifically requested otherwise by the data subject.

8- Automated decision-making process:
Texa Industries Srl is not a social network but a manufacturing company. For this reason we do not have or use any automated decision-making data processing system.

9- Intention of the Data Controller:
Texa Industries will not transfer your personal data to any third country or any international organisation.

10- Rights of the Data Subject:
Regardless of whether you are a customer of Texa Industries Srl, at the time you decide to provide us with your data, you may exercise the following rights under Article 15 of Regulation (EU) 679/2016 on data protection: the right of erasure, the right to amend or rectify your personal data without unjustified delay, the right to object to the use of your personal data, the right to limit the processing of your data, the right of access and the right of portability, or the possibility of receiving from the Data Controller your personal data in a structured machine-readable format, the right of transparency, the right of reply and the right to information.
The data subject may obtain confirmation from the data controller of whether or not his or her personal data is currently being processed, and if so may obtain access to that data.
Until notified otherwise by you in writing (by email or registered post) the Data Controller will be authorised to use your personal data for the above purposes and within the above limits.

Pegognaga 25/05/2018