pursuant to Article 13, of EU Regulation 2016/679 (“GDPR”)
Dear Sirs, we wish to inform you that Regulation (EU) 2016/679 (GDPR) provides for the protection of individuals with regard to the processing of personal data.
In compliance with the indicated law, this processing will be based on principles of correctness, lawfulness and transparency, protecting your privacy and your rights.
Pursuant to Article 13 of the aforementioned Regulation, we therefore provide you with the following information.
1. Personal data processed, source of data, purpose of data processing, legal basis of processing and retention period
"Data" means those relating to natural persons processed by MOLLA S.R.L. for the stipulation and execution of the contractual relationship with its customers/suppliers, such as for example those of the legal representative of the customer/supplier who signs the contract in the name and on behalf of the latter, of the employees/consultants of the customer/supplier, involved in the activities referred to in the contract, the Data of the companies of the customer/supplier group for which the latter signs the contract with the necessary powers of representation, as well as the any other information necessary for the execution of the contract and/or for the provision of the service(s) (also indicated below).
The source from which the Data comes is the customer/supplier.
In particular, this Data will be processed for the purposes indicated below.
A. Management of the contractual/trade relationship, such as: fulfilment of specific requests of the data subject before the conclusion of the contract; conclusion, modifications, execution of the contract; provision and management of related services (installation, activation, migration, maintenance and2or assistance activities); claim management.
The legal basis for processing is the execution of the contract.
Data retention period: contractual duration and, after termination, for a further 10 years. In the event of legal disputes, for its entire duration, up to the expiration of the appeal period.
B. Administrative - accounting, such as: billing; management of payments, delays and default payments; communication of the same data between group companies, for internal organisational, administrative, financial and accounting purposes functional to the aforementioned activities.
The legal basis for processing is the need to fulfil a legal obligation to which MOLLA S.R.L. is subject.
Data retention period: contractual duration and, after termination, for a further 10 years. In the event of legal disputes, for its entire duration, up to the expiration of the appeal period.
C. Fulfilment of obligations or exercise of rights provided for by national or European Union law or by bargaining agreements in accordance with national law, such as: fulfilment of obligations under Community and national regulations, in particular by laws, regulations, including contingent and urgent measures for the protection of public order, the detection and repression of crimes.
The legal basis for processing is the need to fulfil a legal obligation to which the data controller is subject.
Data retention period: contractual duration and, after termination, for a further 10 years. In the event of legal disputes, for its entire duration, up to the expiration of the appeal period.
D. Out-of-court credit recovery (in the case of customers) such as: protection and possible recovery of credit, directly or through third parties (credit recovery agencies/companies) to whom they will only be communicated for this purpose.
The legal basis for processing is the legitimate interest of the Data Controller.
Data retention period: contractual duration and, after termination, for a further 10 years. In the event of legal disputes, for its entire duration, up to the expiration of the appeal period.
E. If necessary, to ascertain, exercise and/or defend rights in court.
The legal basis for processing is the legitimate interest of the Data Controller.
Data retention period: contractual duration and, after termination, for a further 10 years.
H. Security, pursuant to Legislative Decree 81/2008. With particular reference to the identification data freely provided by the guest/visitor at our offices (name, surname, institution or company to which they belong), the processing has the sole purpose of ensuring compliance with the formally applied corporate security procedures, also in force of the regulatory provisions in force (e.g. possible annotation in the visitor register/database, assignment of temporary identification badges, application of legal obligations regarding safety at work, application of the COVID-19 emergency management procedures).
The legal basis for processing is the need to fulfil legal obligation to which the data controller is subject.
Data retention period: the Data will be kept for the period of time required by law.
Once the above-mentioned retention period has expired, all data will be destroyed or made anonymous, compatibly with the technical cancellation and back-up procedures.
2. Scope of communication, parties authorised to process and transfer data to countries outside the European Union
Data may be communicated to external parties operating as data controllers, by way of example, supervisory and control authorities and bodies and in general public or private parties, entitled to request the Data (e.g. banks and credit institutions; Public administrations and other public authorities).
Data may be processed, on behalf of the controller, by external parties designated as data processors, who carry out specific activities on behalf of the controller, by way of example, its distribution network, companies and agents that carry out the activity of credit recovery for the controller, legal, tax and administrative consultants, software houses, management and maintenance companies of the MOLLA S.R.L. website.
Data may be processed by employees in the company departments appointed to pursue the aforementioned purposes, who have been expressly authorised for processing and who have received adequate operating instructions.
Data may be transferred to countries outside the European Union, only in relation to those in which the level of protection is deemed adequate and/or on the basis of adequate guarantees pursuant to the applicable legislation. Further information on the details of the transfer and the guarantees adopted can be requested by writing an e-mail to the address responsible_trigianato_dati@mollasrl.it
3. Provision of data
The provision of data by the customer/supplier is optional, however any refusal to provide such data could lead to failure or partial execution of the contract/service.
4. Data Controller
According to the Applicable Law, the data controller is MOLLA S.R.L. which has its registered office in Via Roccolo, 2 - 21048 Solbiate Arno (Varese) - Italy, in the person of its pro-tempore legal representative.
5. Rights of the data subject
By writing via e-mail to the address Molla srl, Via Roccolo 2, 21048 Solbiate Arno (VA), the data subject can ask MOLLA SRL to access to data concerning them, their cancellation, correction of inaccurate data, '' integration of incomplete data, deletion of data, limitation of processing in the cases provided for by art. 18 GDPR, as well as to oppose, for reasons connected to one's particular situation, to the processing carried out for the legitimate interest of the data subject.
Furthermore, the data subject, where the processing is based on consent or contract and is carried out with automated tools, has the right to receive the data in a structured, commonly used, machine-readable and interoperable format, and, if technically possible, to transmit it to another controller without hindrance.
The data subject shall have the right to lodge a claim with the pertinent supervisory authority in the Member State where they normally reside or work, or in the State where the alleged infringement has occurred.
6. Amendments to the privacy statement
The Data Controller reserves the right to make changes, at any time, to this information, by giving appropriate communication through the site. In order to view any changes made, the data subject should regularly consult this information, which in any case indicates the date of the last update.
Date of update of this information: July 2021.