Data Processing

Information for agreements with the Company

Information provided pursuant to Article 13 of EU Regulation 2016/679 ("GDPR") of April 27, 2016, for the processing of personal data of representatives of public and private entities entering into agreements with Trusty S.r.l. Società Benefit, approved with D.R. no. 1520 of 26.11.2019

EU Regulation 2016/679 of the European Parliament and the Council of April 27, 2016 (hereinafter referred to simply as “GDPR”), provides protection for individuals with regard to the processing of personal data. According to the aforementioned regulation, such processing will be based on the principles of fairness, lawfulness, transparency, and the protection of your privacy and rights.

Pursuant to Article 13 of the GDPR, the following information is provided.

1. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The data controller is:

Trusty S.r.l. Società Benefit
Represented by the Legal Representative
Via dei Platani no. 47
65019 PIANELLA (PE)
Tel. 085.2030716
E-mail: info@trusty.id
PEC: trusty@pec.cloud

2. CONTACT DETAILS OF THE DATA PROTECTION OFFICER

Pursuant to Articles 37 and following of the GDPR, the Company has appointed a Data Protection Officer (DPO).

Tel.: 085.2030716
E-mail: info@trusty.id
PEC: trusty@pec.cloud

3. TYPE OF DATA PROCESSED, PURPOSES, AND LEGAL BASIS OF THE PROCESSING

The personal data processed are:

3.1 Types of Data Processed
  • Common data such as personal data, tax identification code, identity document numbers, contact details, economic-financial data, income data, CV, career data.
  • Special data: judicial data.

These data are processed exclusively for the management and execution of the agreement, in particular to fulfill the related obligations, other legal obligations, and the specific services requested.

3.2 Purposes
  • Fulfillment of obligations under the law, regulations, and EU legislation for the establishment, execution, and management of the business relationship regulated by the agreement;
  • Preparation of any fiscal and accounting documentation;
  • In case of disputes, potential defense in court.
3.3 Legal Bases and Obligation to Provide Data

The legal bases for the processing operations aimed at executing the Agreement are compliance with legal and/or contractual obligations, pursuant to Articles 6, par. 1, letters b), c), e) of EU Regulation no. 2016/679 and the relevant civil law provisions; while the processing of data related to the management of complaints or disputes, and for the prevention and repression of fraud and any illegal activity, is justified under Articles 6, letter f) and 9, letter f) of the GDPR.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS AND POSSIBLE TRANSFER OF DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATION

In the context of the purposes mentioned above, the processed data will be communicated or otherwise made accessible to employees and collaborators assigned to the relevant departments of the Company, who will be adequately instructed by the Data Controller for data processing.

The data may also be communicated to other public or private entities if communication is necessary for the management of the work relationship and/or for the provision of requested services, and may be communicated to all public or private entities to whom, under the relevant circumstances, communication is mandatory pursuant to EU regulations, laws, or regulations.

Personal data may also be transmitted to parties who process the data in execution of specific contracts and who will be appointed as Data Processors and duly instructed by the Data Controller.

Among the recipients of personal data, the following may be included, purely by way of example:

  • Internal departments of the Company responsible for managing the administrative process for the establishment of the agreement and its subsequent management and execution;
  • Certifying administrations in the case of verification of declarations made under DPR 445/2000;
  • Judicial authorities (Criminal Code and Criminal Procedure Code).

Except in the above cases, personal data will not be communicated or disclosed to third parties for any reason.

Finally, personal data will not be transferred to third countries or international organizations unless this is strictly connected to specific requests from the contracting party (e.g., international exchanges), for which specific consent will be obtained.

5. OBLIGATION TO PROVIDE DATA AND CONSEQUENCES OF FAILURE TO PROVIDE DATA

The provision of data is necessary for the establishment of the relationship between the public or private entity and the Company and for the provision of the requested services; failure to provide the data will prevent the establishment and/or continuation of the relationship with the Company.

6. PROCESSING METHODS

Data collection is carried out in compliance with the principles of relevance, completeness, and non-exceedance in relation to the purposes for which they are processed.

The personal data provided are processed in accordance with the principles of lawfulness, fairness, and transparency, as required by Article 5 of the GDPR, also with the aid of IT and telematic tools to store and manage the data, ensuring their security, integrity, and availability and protecting the maximum confidentiality of the data subject.

Data may be processed in anonymized form for statistical and research activities aimed at improving the services provided.

7. DATA RETENTION PERIOD

Personal data will be processed for the duration of the relationship as outlined in the Agreement and for the fulfillment of the related obligations and, in any case, according to the applicable legal terms, including the statutory terms for the exercise of rights deriving from the business relationship, even after its termination.

8. RIGHTS OF THE DATA SUBJECT

With regard to the personal data provided, the data subject can exercise the following rights:

  • Access to their personal data pursuant to Article 15 of the GDPR;
  • Withdrawal of consent given for the non-mandatory processing of data, with the clarification that the withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal;
  • Rectification, erasure, or restriction of data processing pursuant to Articles 16, 17, and 18 of the GDPR, where permitted by law;
  • Opposition to data processing, where applicable;
  • Data portability (right applicable only to electronic data) pursuant to Article 20 of the GDPR;
  • Filing a complaint with the Supervisory Authority (Italian Data Protection Authority - garanteprivacy.it).

To exercise the rights above, the data subject may contact the Data Protection Officer as identified above.

9. CHANGES TO THE INFORMATION

This Information may be updated over time. It is therefore advisable to check the Privacy section of the website www.trusty.id to ensure that the version referred to is the most up-to-date.