Customer/supplier policy

Processing is intended solely for the correct management of the contractual relationship and, in some cases, to comply with current legislation on health and safety at work.

The legal basis for processing is the contract entered into, as well as the legal obligations to which both Controllers are subject (with particular reference to those provided for in accounting, tax, social security, and occupational health and safety matters).

The provision of personal data is strictly necessary for the performance of the contractual relationship.

Any refusal could result in delays, misunderstandings, breaches, or even the impossibility of fulfilling the contract.

Processing may be carried out in paper format and with the aid of electronic tools, as well as by persons in charge at the Company and other Companies of the CICLAT Group. These subjects have been duly instructed and contractually bound to comply with adequate technical and organizational measures aimed at protecting the data transmitted and communicated to them. Data will be processed in a lawful, fair, and transparent manner. Data will be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed, accurate, and up to date; they will be treated with the utmost confidentiality, in compliance with the principles dictated by the Regulation, any prescriptions issued by the Supervisory Authority, and in any case in such a way as to guarantee adequate security, including protection, with appropriate technical and organizational measures, from unauthorized or unlawful processing, as well as from loss, even accidental.

Personal data may be communicated to public bodies and authorities, in accordance with current regulations, or to expressly authorized external parties, for administrative, accounting, tax, social security, and legal protection purposes and whatever is necessary for contractual fulfillment; they will not be subject to dissemination.

Personal data will not be transferred abroad.

The management and storage of personal data will take place on servers located within the European Union belonging to the Controller and/or third-party companies appointed and duly designated as Data Processors.

Currently, our servers are located in Italy. Should a transfer to non-EU countries be necessary, the Controller undertakes to transfer in accordance with the provisions of Regulation 679/2016.

Data will be stored in accordance with the provisions of the law.

Data subjects may at any time ask to know the origin, purpose, and methods on which the processing is based, to obtain access to them, updating, rectification, integration, erasure, transformation into anonymous form, restriction of processing, to arrange for the blocking of data processed in violation of the law, and to obtain a copy in a structured, commonly used, and machine-readable format, or to transmit such data to another data controller without hindrance.

Data subjects may also lodge a complaint with the Supervisory Authority, represented in Italy by the Garante per la Protezione dei Dati Personali. For information on this, you can consult the Garante’s website at www.garanteprivacy.it.

To exercise their rights, data subjects may write to CICLAT TRASPORTI AMBIENTE Soc. Coop., with headquarters in Ravenna, Via Romagnoli n. 13, PEC ciclattrasportiambiente.privacy(at)ciclatpec.ra.it, fax 0544/608180.