PRIVACY POLICY

We hereby inform you that the personal data you have kindly provided will be processed by ATR-NORDEST srl (hereinafter "ATR-NE"), with registered office in San Martino Buon Albergo (VR), Via della Concordia n. 8, tel. 045/995033, pec atr-nordest.srl@pec.it, within the limits of what is strictly necessary for the most correct management of the relationship with you, by means of paper and electronic registration, in accordance with the conditions set out below.

1. Object

The data processed by ATR-NE may be:

personal, accounting and tax data;
telephone, fax and e-mail addresses.

2. Use of information provided by the Customer/Supplier.

PURPOSES	LEGAL BASIS
Providing information requested by the Customer/Supplier and fulfilling obligations arising from contracts concluded between the Customer/Supplier and ATR-NE;	Art. 6(1)(b), EU Reg. 679/2016 The processing is necessary for the fulfilment of mutual contractual obligations.
Receive payments from the customer/supplier and act for any debt recovery, also non-contractual;	Art. 6, para. 1, lett. b - c, EU Reg. 679/2016 Processing is necessary for the fulfilment of mutual contractual obligations and/or necessary to establish, exercise or defend legal rights.
Ensure compliance with applicable laws, regulations, EU and international legislation (in particular on accounting, taxation, health protection, public order and safety) and/or the General Terms and Conditions and/or our Privacy Policy.	Art. 6, para. 1, lett. b - c, EU Reg. 679/2016 Processing is necessary for the fulfilment of mutual contractual obligations and/or necessary to establish, exercise or defend legal rights.
Inform the Customer/Supplier of any changes to our services;	Art. 6(1)(b), EU Reg. 679/2016 The processing is necessary for the fulfilment of mutual contractual obligations;
Promote the service provided by means of marketing activities and commercial initiatives, advertising and/or direct marketing communication, albeit without any profiling of the persons concerned;	Art. 6(1)(a), EU Reg. 679/2016 Processing is carried out with the consent of the Customer/Supplier;

3. Mode

The aforementioned data, collected in any form from the data subject or otherwise, will be processed both in paper format and with electronic instruments, solely in accordance with logics and through forms of organisation strictly related to the obligations and purposes referred to in the preceding point. In any case, the data themselves will be stored with the necessary and appropriate technical and organisational measures in place to minimise the risks of destruction or loss of data, unauthorised access or unauthorised processing.

4. Recipients of personal data.

The data provided may be brought to the attention of third parties for whom this is necessary or even only appropriate, within the limits of the purposes and aims set out in point 2) to the relevant public or private subjects; to the relevant insurance companies; to lawyers/other trusted third party consultants. The same data may then be brought to the attention of employees and/or collaborators of TRE-NE, according to their respective duties/competencies and within the limits of the respectively permitted processing.

Personal data may also be brought to the attention of third parties or other appointees in the event that operations on the nature/organisation/transfer of the company are in progress, or even only under consideration.

5. Data transfer abroad

The data you provide, within the limits of the obligations and purposes set out in point 2, will not be transferred to countries outside the European Union.

6. Owner

The data controller is:

ATR-NORDEST srl
C.f./p.i. 04376400232
Registered office in San Martino Buon Albergo (VR), Via della Concordia n. 8
tel. 045/995033
pec atr-nordest.srl@pec.it

7. Nature of data provision and consequences of refusal

The provision of the data referred to in point 1 is optional. However, any refusal to provide the data (with the exception of data for marketing, statistical and service approval purposes) would not allow the performance of the agreed contractual services in favour of the data subject, nor the performance of the complementary activities necessary for the development and continuous improvement of the services of ATR-NE in favour of the data subjects. In any case, pursuant to Article 6 of Regulation (EU) 679/2016, the consent of the data subject is not required for the processing, including the collection, of personal data from public registers (such as those relating to personal data, tax, chamber of commerce, etc.) or necessary to perform obligations required by law or arising from a contract to which the data subject is party (such as that underlying the relationship with ATR-NE).

8. Rights of the data subject

The customer concerned is guaranteed the rights specifically set out in Article 13 of Regulation (EU) 679/2016, namely:

The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and its communication in intelligible form (right of access); (Art. 15 Regulation (EU) 679/2016)
The data subject shall have the right to obtain the correction, updating, rectification or, where interested therein, integration of personal data concerning him/her; (Art. 16 Regulation (EU) 679/2016)
The data subject has the right to obtain the deletion of personal data when the conditions set out in Article 17 of Regulation (EU) 679/2016 are met, the transformation into anonymous form or the blocking of data processed in violation of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
The data subject has the right to obtain restriction of processing in the cases provided for in Article 18 of Regulation (EU) 679/2016;
The data subject shall have the right to data portability, i.e. the right to receive in a structured, commonly used and machine-readable format the personal data concerning him or her provided to ATR-NE, and shall have the right to transmit such data to another data controller without hindrance if the conditions set out in Article 20 of Regulation (EU) 679/2016 are met;
The data subject has the right to revoke his or her consent to the processing of data at any time without prejudice to the lawfulness of the processing based on the consent given until revocation.
The data subject has the right to lodge a complaint with the competent Data Protection and Supervisory Authority, or take legal action.
The data subject has the right to know whether the communication of the data arises from a contractual or legal obligation and the possible consequences of not communicating the data.
The aforementioned rights may be exercised by written communication to be sent by pec to the address atr-nordest.srl@pec.it or by registered letter with advice of receipt to the address San Martino Buon Albergo (VR) - Via della Concordia n. 8.

9. Period of retention of personal data.

Personal data will be processed for the entire duration of the relationship between the Customer/Supplier and ATR-NE, in accordance with the terms and conditions specified by law.

Should abnormal events occur in the relationship between the parties (by way of example only: disputes/reports/requests by a public authority), the data will be processed for a longer period, until the abnormal event ceases.

ATR-NE undertakes to promptly communicate the possible existence of an abnormal event and an estimate of the period required for it to cease.