Privacy Policy - Clients

Privacy Policy - Suppliers

INFORMATION PURSUANT TO ART. 13-14, GDPR UE/2016/679 and Legislative Decree 101/2018

The European Regulation EU/2016/679 (hereinafter “Regulation“) establishes rules relating to the protection of individuals with regard to the processing of personal data, as well as rules relating to the free circulation of such data.
In compliance with the transparency principle provided for by art. 5 of the Regulation, COBER s.r.l. Via Ofanto, 3 20073 Opera (MI), as Data Controller, provides you with the information required by art. 13 and 14 of the Regulation.

Purpose of processings

The processing of your personal data will be based on principles of correctness, lawfulness and transparency, protecting your privacy, your rights and in accordance with the privacy policy of the Entity/Company. The Entity/Company also undertakes to process your data in compliance with the principle of “minimization”, or by acquiring and processing the data limited to what is necessary with respect to the following purposes:

‘For Marketing Office processings:

1. Marketing activities
2. Definition of marketing strategies

‘For Privacy advice processings:

1. Advice on personal data protection

‘For tax and accounting advice processings:

1. Tax obligations management
2. Accounting obligations management

‘For Supplier Management processings:

1. Claims management
2. Goods acceptance
3. Management of suppliers contracts
4. Purchase of goods or services

‘For Management of Production Activities processings:

1. Goods acceptance
2. Business Planning
3. Management of suppliers contracts

‘For Quality Mangement processings:

1. Internal audit activities
2. Claims management
3. Goods acceptance
4. Product quality control activities

For Sub-contract Management processings:

1. Management of employment relationship
2. Purchase of goods or services

‘For Export Office processings:

1. Freight forwarding activities

‘For Legal Advice processings:

1. Legal Advice

In relation to such data, the processing may be carried out as:

‘For Supplier Management:

1. the processing is carried out, in the context of its legitimate activities and with adequate guarantees, by a foundation, association or other non-profit body that pursues political, philosophical, religious or trade union purposes, provided that the processing concerns only the members, former members or persons who have regular contact with the foundation, association or body due to its purposes and that personal data are not disclosed externally without the consent of the interested party

The provision of your personal data and consent to the processing is mandatory, for the purposes of:

‘For Privacy advice processings:

1. Advice on personal data protection

‘For tax and accounting advice processings:

1. Management of tax obligations
2. Management of accounting obligations

‘For Supplier Management processings:

1. Claims management
2. Goods acceptance
3. Management of suppliers contracts
4. Purchase of goods or services

‘For Management of Production Activities processings:

1. Goods acceptance
2. Business Planning

‘For Quality Mangement processings:

1. Internal audit activities
2. Claims management
3. Goods acceptance
4. Product quality control activities

For Sub-contract Management processings:

1. Management of employment relationship
2. Purchase of goods or services

‘For Export Office processings:

1. Freight forwarding activities

‘For Legal Advice processings:

1. Legal Advice

and Your refusal to provide the data will make it completely impossible to stipulate the contract.

The provision of your personal data and consent to the processing for the purposes of:

‘For Marketing Office processings:

1. Marketing activities
2. Definition of marketing strategies

‘For Management of Production Activities processings:

1. Management of suppliers contracts

it is optional and your refusal does not prevent the correct stipulation and subsequent execution of the contract.

Processing methods

The processing of your personal data will be carried out using paper and IT tools in compliance with the provisions on personal data protection and, in particular, with the appropriate technical and organizational measures pursuant to art. 32.1 of the Regulations, and with the observance of every precautionary measure that guarantees its integrity, confidentiality and availability.

Source from which the data originate

Recipients categories

Your personal data may be communicated, in close relation to the purposes indicated above, to the following subjects or categories of subjects:

‘For Marketing Office processings:

1. Employers
2. Consultants and freelancers also as associates

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), b) can only be made after getting your consent.

‘For Privacy advice processings:

1. Consultants and freelancers also as associates

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), b), is necessary to execute the contract to which you are a party.

‘For tax and accounting advice processings:

1. Consultants and freelancers also as associates
2. Tax Assistance Centers (CAF)

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), b), constitutes a legal obligation which the Data Controller must comply with;
• the communication of your data to the categories of subjects referred to in letters a), b), is necessary to execute the contract to which you are a party.

‘For Supplier Management processings:

1. Banks
2. Consultants and freelancers also as associates

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), b), is necessary to execute the contract to which you are a party.

‘For Management of Production Activities processings:

1. Employers

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), is necessary to execute the contract to which you are a party.

‘For Quality Mangement processings:

1. Consultants and freelancers also as associates

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), is necessary to execute the contract to which you are a party.

For Sub-contract Management processings:

1. Employers

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), is necessary to execute the contract to which you are a party.

‘For Export Office processings:

1. Clients and/or users

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), is necessary to execute the contract to which you are a party.

‘For Legal Advice processings:

1. Lawyers

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), constitutes a legal obligation which the Data Controller must comply with;
• the communication of your data to the categories of subjects referred to in letters a), is necessary to execute the contract to which you are a party.

In relation to these categories of recipients, the Data Controller undertakes to rely exclusively on subjects who provide adequate guarantees regarding data protection, and will appoint them as Data Processors pursuant to art. 28 of the Regulation. The list of Data Processors is available from the Entity/Company and can be viewed upon request to the Data Controller.
Furthermore, your data will be processed, exclusively for the aforementioned purposes, by the employees and/or collaborators of the Entity/Company, specifically authorized and instructed by the Data Controller pursuant to art. 29 of the Regulation.
Your personal data will not be disseminated, except when required by a law or regulation or by community legislation

Personal data transfer

‘For Marketing Office processings:

Your personal data will not be transferred to non-European countries or to international organizations.

‘For Privacy advice processings:

Your personal data will not be transferred to non-European countries or to international organizations.

‘For tax and accounting advice processings:

Your personal data will not be transferred to non-European countries or to international organizations.

‘For Supplier management processings:

Your personal data will not be transferred to non-European countries or to international organizations.

‘For Management of Production Activities processings:

Your personal data will not be transferred to non-European countries or to international organizations.

‘For Quality Mangement processings:

Your personal data will not be transferred to non-European countries or to international organizations.

‘For Sub-contract Management processings:

Your personal data will not be transferred to non-European countries or to international organizations.

‘For Export Office processings:

Your personal data will not be transferred to non-European countries or to international organizations.

‘For Legal Advice processings:

Your personal data will not be transferred to non-European countries or to international organizations.

Retention period

Rights recognized to the interested party

At any time you can exercise, towards the Data Controller, your rights provided for by articles 15-22 of the Regulation.

Specifically, at any time, you will have the right to request:

• access to your personal data;
• their correction in case of inaccuracy of the same;
• cancellation;
• the limitation of their use.

You will also have:

• the right to object to their processing if processed for the pursuit of a legitimate interest of the Data Controller, if youbelieve their fundamental rights and freedoms have been violated;
• the right to withdraw your consent at any time in relation to the purposes for which this is necessary;
• the right to portability of your data, i.e. the right to request and receive the personal data referable to you in a structured format, commonly used and readable by an automatic device.

Identity and contact details of the Data Controller

‘For Marketing Office processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

‘For Privacy advice processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

‘For tax and accounting advice processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

‘For Supplier Management processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

‘For Management of Production Activities processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

‘For Quality Mangement processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

‘For Sub-contract Management processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

‘For Export Office processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

‘For Legal Advice processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

Contact details of the Data Protection Officer

For all questions relating to the processing of your data and the exercise of your rights deriving from the Regulations, you can contact the Data Protection Officer (DPO) at the following email address:

info@cober.it

Privacy Policy - Applicants

INFORMATION PURSUANT TO ART. 13-14, GDPR UE/2016/679 and Legislative Decree 101/2018

The European Regulation EU/2016/679 (hereinafter “Regulation“) establishes rules relating to the protection of individuals with regard to the processing of personal data, as well as rules relating to the free circulation of such data.
In compliance with the transparency principle provided for by art. 5 of the Regulation, COBER s.r.l. Via Ofanto, 3 20073 Opera (MI), as Data Controller, provides you with the information required by art. 13 and 14 of the Regulation.

Purpose of processings

The processing of your personal data will be based on principles of correctness, lawfulness and transparency, protecting your privacy, your rights and in accordance with the privacy policy of the Entity/Company. The Entity/Company also undertakes to process your data in compliance with the principle of “minimization”, or by acquiring and processing the data limited to what is necessary with respect to the following purposes:

‘For Employee Management processings:

1. Personnel recruitment and selection
2. Establishment and management of employment relationships of any type, including part-time or temporary, and other forms of employment that do not involve the establishment of a subordinate employment relationship
3. Personnel selection activities
4. Establishment of employment relationship

The provision of your personal data and consent to the processing is mandatory, for the purposes of:

‘For Employee Management processings:

1. Personnel recruitment and selection
2. Establishment and management of employment relationships of any type, including part-time or temporary, and other forms of employment that do not involve the establishment of a subordinate employment relationship
3. Personnel selection activities
4. Establishment of employment relationship

and Your refusal to provide the data will make it completely impossible to stipulate the contract.

Processing methods

The processing of your personal data will be carried out using paper and IT tools in compliance with the provisions on personal data protection and, in particular, with the appropriate technical and organizational measures pursuant to art. 32.1 of the Regulations, and with the observance of every precautionary measure that guarantees its integrity, confidentiality and availability.

Source from which the data originate

Recipients categories

Your personal data may be communicated, in close relation to the purposes indicated above, to the following subjects or categories of subjects:

‘For Employee Management processings:

1. Employers

We thereby inform you that:

• the communication of your data to the categories of subjects referred to in letters a), can only be made after getting your consent.

In relation to these categories of recipients, the Data Controller undertakes to rely exclusively on subjects who provide adequate guarantees regarding data protection, and will appoint them as Data Processors pursuant to art. 28 of the Regulation. The list of Data Processors is available from the Entity/Company and can be viewed upon request to the Data Controller.
Furthermore, your data will be processed, exclusively for the aforementioned purposes, by the employees and/or collaborators of the Entity/Company, specifically authorized and instructed by the Data Controller pursuant to art. 29 of the Regulation.
Your personal data will not be disseminated, except when required by a law or regulation or by community legislation

Personal data transfer

‘For Employee Management processings:

Your personal data will not be transferred to non-European countries or to international organizations.

Retention period

Rights recognized to the interested party

Specifically, at any time, you will have the right to request:

• access to your personal data;
• their correction in case of inaccuracy of the same;
• cancellation;
• the limitation of their use.

You will also have:

• the right to object to their processing if processed for the pursuit of a legitimate interest of the Data Controller, if youbelieve their fundamental rights and freedoms have been violated;
• the right to withdraw your consent at any time in relation to the purposes for which this is necessary;
• the right to portability of your data, i.e. the right to request and receive the personal data referable to you in a structured format, commonly used and readable by an automatic device.

Identity and contact details of the Data Controller

‘For Employee Management processings:

• The Data Controller is: COBER s.r.l., registered office: Via Ofanto, 3 20073 Opera (MI), tel .: +390257601341, e-mail: info@cober.it

Contact details of the Data Protection Officer

For all questions relating to the processing of your data and the exercise of your rights deriving from the Regulations, you can contact the Data Protection Officer (DPO) at the following email address:

info@cober.it