Privacy information pursuant to art. 13 of the EU Regulation no. 2016/679
NAX B – Nordic Alliance X Business with registered office in Rome, Salita San Nicola da Tolentino, 1/B, as personal data controller (hereinafter “Data Controller” or “NAX B”) and as per article 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”), informs you that your personal data will be processed according to the following purposes.
In this regard, the Data Controller invites you to read carefully this notice (hereinafter, “Information”), as it contains important information on the protection of personal data and the security measures taken to ensure confidentiality in full compliance with the GDPR.
This Information is for:
- client who receive services provided by the Data Controller (hereinafter also the “Client” or the “Clients”)
1. DATA CONTROLLER
The Data Controller is NAX B – Nordic Alliance X Business with registered office in Rome, Salita San Nicola da Tolentino, 1/B.
2. PERSONAL DATA OBJECT OF PROCESSING
The execution of contractual relationships requires the processing of personal data of the Client. Personal data can refers to the Client as natural person and, in case of entity or company, to a “contact point” acting on behalf of the Client, as well as any Client’s employee duly hired for the contractual relationship between the Data Controller and the Client. In this respect, we ask you to submit this information to persons who, within your company organization, are responsible for the execution of the contractual relationship with the Data Controller.
Due to the execution of the agreement in force, the Data Controller collects and processes the following personal data:
- a) name, surname, place and date of birth, fiscal code, address of residence, e-mail address, telephone and mobile phone, income data, financial data and bank details of the Client and / or contact point, as well as of employees duly hired to perform the services provided by the contract signed between the Data Controller and the Client.
3. PURPOSES OF THE PROCESSING
The personal data processed are used to fulfill instrumental purposes i) to carry out sales and distribution of NAX B products, even but not exclusively, and ii) to carry out marketing activities of various kinds, including the promotion and distribution of informative and promotional material, the sending of newsletters and publications of images, events, projects and initiatives aimed at advertising the NAX B brands and products, as well as increasing the awareness of the brand, all through ordinary mail, e-mail and / or messaging services.
4. LEGAL BASIS OF THE PROCESSING
The legal basis of the processing (i) is the fulfillment and the execution of obligations deriving from the existing contract or those so-called pre-contractual and / or compliance with legal obligations (Article 6 paragraph 1 letter b) and c) of the European Regulation), and, (ii) for the marketing activities described below, the consent of the interested party. In particular, the provision of your data is mandatory for the performance of sales and distribution activities of NAX B’s products, even but not exclusively, and any express refusal will make it impossible for the Data Controller to carry out the activity, sales and distribution of products.
The provision of your data for the performance of the marketing activities listed above is optional, and any express denial will make it impossible to carry out promotional and marketing initiatives for NAX B products.
5. METHODS OF PERSONAL DATA PROCESSING
The personal data collected can be processed on paper or electronic media, and in any case using suitable tools to guarantee their security and confidentiality.
6. SCOPE OF COMMUNICATION AND TRANSFER OF PERSONAL DATA
For the aforementioned purposes, Personal Data may be communicated and / or transferred to the following categories of recipients, located within the European Union or outside the EU (this last transfer will in any case take place in compliance with the appropriate guarantees provided by applicable legislation):
- duly authorized collaborators and employees of NAX B;
- third party suppliers, appropriately appointed as Data Processors, who act within the scope of the purposes indicated in point 2 of this Notice in the sector, by way of example, of the organization of promotional events;
- third party suppliers of assistance and consultancy services for NAX B, appropriately appointed as Data Processors, with reference to the activities referred to in this Notice.
A complete list of data processors appointed by NAX B can be found, upon request, through the e-mail address: info@naxb.it
7. RIGHTS OF THE DATA SUBJECT
In accordance with the provisions of the GDPR, you have the right to ask the Data Controller, at any time, for access to your personal data, for a rectification or erasure of your personal data, or to object to the processing; additionally you have the right to request the restriction of processing provided for by art. 18 of the GDPR and to obtain your data in a structured commonly used and machine-readable format, in the cases provided for by art. 20 of the GDPR.
Any request can be addressed to registered office of NAX B – Nordic Alliance X Business Rome, Salita San Nicola da Tolentino, 1/B, or via e-mail address to info@naxb.it
In any case, you are always entitled to lodge a complaint with the competent supervisory authority (Italian Personal Data Protection Authority) pursuant to art. 77 of the GDPR, if you consider that the processing of personal data infringes the existing legislation.
8. RETENTION OF PERSONAL DATA
Personal data will be retained for the period of time necessary for the fulfillment of the administrative, accounting and tax purposes relating to the contractual relationship existing between the Data Controller and the supplier and for the fulfillment of the related obligations established by law, and in any case for a time not exceeding 10 years, unless otherwise required by law or the need to exercise rights, even in court by the Data Controller. When it is no longer necessary to keep personal data, these will be deleted or destroyed. When it is no longer necessary to keep personal data, they will be deleted or destroyed or made anonymous.
Personal data in accordance with business needs are stored on NAX B internal servers, electronic devices as well as a paper archive.
9. CHANGES AND UPDATES
NAX B may make changes and / or additions to this Information, also as a consequence of any subsequent amendments and / or regulatory additions. Any changes or updates to this Notice will be made available from time to time.