Pursuant to articles 12, 13, and 14 of the European Regulation n. 679/2016, we hereby provide you with the Information Notice on the Processing of Your Personal Data.
We remind you that you have the right to read it before transmitting your Personal Data to us, as well as the right to object to one or more purposes identified in this Information Notice at the relevant section.
The Data Controller is:
MERIDIANI SRL VIA BIRAGO 16 MISINTO
The main processing activities carried out are related to the fulfilmments of the purchase agreement,the support contract and to all obligations referred to such contracts (wether of a contractual or fiscal nature). Furtermore, we process your Data for the purpose of acquiring new clients and promoting our products, by means of marketing activity or registration to our website.
The main risk associated with the above mentioned processing activities may be the possibility that one or more actions aimed at keeping the acquired clients may affect the rights and freedoms of Data Subjects.
For example, the latter may be disatisfied to receive unsolicited commercial offers.
However, Meridiani S.r.l. adopts all the technical and organizational measures necessary to ensure that those who will receive advertising materials or its commercial offers have actually given their consent.
Furthermore, Meridiani S.r.l. will make sure that the sending frequency and the chosen methods do not exceed what is considered to be a legitimate advertising activity.
Usually, an identifiable risk is the possibility that non-authorized persons or third parties access Personal Data of which Meridiani S.r.l. is the Data Controller of. However, pursuant to the Applicable Law, Meridiani S.r.l. adopts all the appropriate technical and organizational measures in order to reduce such risk to the lowest acceptable level.
The purposes for which we process your Personal Data are the following
1) If you are a Customer of Meridiani S.r.l.: Fulfillment of the obligations related to the purchase agreement and the support contract signed with the Data Subject and performance of all the pre-contractual measures referred to it, such as cost estimation, negotiation, etc. In this case, Consent is not required since the Legal Basis of the Data Processing is the contract signed with the Data Subject and all the pre-contractual measures related to it, or the Legitimate Interest of the Controller.
2) If you are a natural person and you are not a customer of Meridiani S.r.l.: Marketing activity by sending of commercial communications by means of email, telephone or postal service. In this case, Consent is required and constitutes the Legal Base of the processing itself.
3) Management of the existing customer portfolio, including natural person retailers. In this case, the Legal Basis of the Data Processing is the Contract signed by the parties or the Legitimate Interest of the Controller. Therefore, neither the Consent nor the Legitimate Interest are required since “there is a relevant and appropriate relationship” with the Data Subject.
Upon request, a comprehensive list of the Recipients, which we may need to share your Personal Data with in accordance with the applicable law, is available. Such request has to be submitted to the Data Controller without any particular formality.
The Categories of Recipients to which your Personal Data will be communicated to are the following:
1) Companies and Experts responsible for the management, maintenance and remote support of the IT system of Meridiani S.r.l.
2) Experts in the Accounting sector.
3) Companies which manage the web systems of Meridiani S.r.l.
4) Software Houses and Producers of Software Solutions used by Meridiani S.r.l. for the Processing of Personal Data.
5) Public entities such as Income Revenue Authority, Italian Finance Police (Guardia di Finanza), etc. if the communication of your Personal Data is mandatory by Law.
All the Recipients listed above will be appointed as Data Processors and they will be instructed by Meridiani S.r.l. in accordance with legal provisions. Also, they are obliged to maintain confidentiality on the information submitted to them and to return or delete such information at the end of the processing activities.
Meridiani S.r.l. does not transfer and will not transfer your Personal Data to international organizations or Data Controllers located outside the European Economic Area. If Meridiani S.r.l. decides to do so, it will strictly comply with the provisions of the Regulation (EU) 679/2016 on the transfer of Personal Data abroad and will inform you before the transfer takes place in accordance with legal provisions.
Meridiani S.r.l. will retain your Personal Data according to the following criteria:
1. In case of Personal Data Subject to obligations of retention set by Italian or European Law: within the deadlines set by the legislation, after which Personal Data will be deleted or made anonymous.
2. In case of Personal Data of natural persons who are clients of Meridiani S.r.l. which are processed for the purposes referred to in point 3) of the purposes of the Processing: until the Data Subject withdraws their Consent and in any case no later than 5 years from the given Consent.
3. Data which are not subject to retention obligations established by Italian or European Law and which belongs to retailers (natural persons) of Meridian S.r.l. will be deleted or made anonymous when the contract enxpires.
Below you may find the rights you are entitled to pursuant to the European Regulation n. 679/2016.
In case you wish to enforce one or more of the following rights please contact Meridiani S.r.l. (the contact details are listed above).
The customer shall have the right to access their personal data the Company holds pursuant to art. 15 of the European Regulation n. 679/2016, and the Data Controller is required to inform the Data Subject about the purposes of the proceeding.
Pursuant to art. 16 of the European Regulation n. 679/2016, the Data Subject shall have the right to obtain from the Data Controller the rectification of inaccurate personal data concerning them without undue delay.
Taking into account the purposes of the processing, the Data Subject shall have the right to integrate incomplete personal data, also by means of a supplementary statement.
The Data Subject shall have the right to obtain from the Data Controller restriction of processing where the grounds provided by article 18 of the European Regulation n. 679/2016 apply.
The Data Subject shall have the right to obtain from the Data Controller the delation of their personal data without undue delay and the Data Controller shall have the obligation to erase personal data without undue delay where the grounds provided by article 17 of the European Regulation n. 679/2016 apply.
With regard to the purposes for which your Consent is required, you are entitled to withdraw the given Consent, i.e. to unilaterally terminate the processing activities related to the purposes for which you have given your Consent. The processing activities carried out before your Withdrawal will be in any case lawful, according to the applicable law.
If you believe that a processing activity we have carried out has caused yourself an injury or damage, or if you believe that there has been an illegitimate processing of Personal Data, you are entitled to lodge a Complaint to the Supervisory Authority, according to the procedures established by the latter which are available on the following website:
Please send an email to firstname.lastname@example.org in order to obtain the rights here above mentioned. We will proceed with your request within ca. 30 working days after receipt of your complete request.
If you refuse to provide Your Personal Data to Meridiani Srl , no purchase agreement or support contract will be signed between the interested parties.