Dear Client, we wish to inform you that European Regulation No. 679 of 27 April 2016 on the processing of personal data provides for the protection of individuals with regard to the processing of their personal data. Pursuant to Articles 13 and 14 of Regulation EU 2016/679, we therefore invite you to take note of the following:
The Data Controller is ASTE BOLAFFI S.p.A, in the person of its legal representative pro tempore, with registered offices in Via Cavour no. 17 - 10123 Turin, VAT n. IT09591610010.
The Data Controller collects the following data from the Data Subject: first name, last name, address, telephone, email and tax code. In the case of legal persons, the collected data will include the company name and VAT number.
The submitted personal data is processed solely for the purposes of:
(a) establishing and executing contractual relationships and the attendant obligations;
(b) protecting contractual rights;(
c) administration and tax management;
(d) participation in both in-person and online auctions;
e) sending advertising material/catalogues by email, telephone, text message, social media, regular mail and newsletters (subject to your consent);
(f) automated processing of personal data to evaluate specific personal aspects of a natural person, i.e. “profiling” (subject to your consent).
The legal basis for the processing for purposes 3.a-3.b-3.c-3.d is the contractual/ legitimate interest of the Data Controller;
The legal basis for the processing for purposes 3.e-3.f is provided by the consent of the Data Subject.
The personal data will be processed in printed, digital and telematic form, and entered into databases for access by the persons charged with processing it. The processing may also be done by third parties who provide specific processing, administrative or instrumental services required to achieve the above purposes. All data processing is done in such a way as to guarantee the integrity, confidentiality and availability of the personal data in question. With regard to purpose 2.d, it should be noted that the auctions in question are streamed on dedicated platforms, and that any in-person participants at such auctions may be filmed. On conclusion of said filming, the respective files will be deleted.
The submitted data will be retained pursuant to the law for contractual and administrative/tax purposes, while for the purposes indicated in 3.e-3.f it will be retained and processed until such time as the Data Subject revokes their consent.
With regard to the purposes set out in point 3, the data may be disclosed to the following entities:
- consultants/vendors of services instrumental to the purposes in question;
- banks, for the management of collections and payments;
financial administrations or public institutions, in fulfilment of regulatory obligations;
- legal offices and law firms, for the protection of contractual rights;
- any other companies, bodies or natural persons charged with activities instrumental, supportive or functional to the execution of the contracts or services offered by the Data Controller
With reference to art. 15 right of access, art. 16 right of rectification, art. 17 right to erasure, art. 18 right to restriction of processing, art. 20 right to portability, art. 21 right to object, art. 22 right to object to automated decision-making process of the GDPR 2016/679, the Data Subject may exercise their rights by writing to the Data Controller as indicated in point 1, or by email to gdpr@astebolaffi.it, specifying the subject of their request and the right they intend to exercise, and enclosing/attaching a photocopy of an identification document attesting to the legitimacy of their request.
Pursuant to Article 13(2)(d) of the GDPR 2016/679, if the Data Subject considers that their rights have been compromised, they have the right to lodge a complaint with the Data Protection Authority in the manner indicated by the Authority itself.
The personal data may be transferred to non-EU countries pursuant to contractual agreements between the Data Controller and other companies for the provision of specific services.
The Data Controller may amend or supplement this Notice in response to amendments/supplements to the Regulation.
Data Controller