The Company CARROZZERIA UDINESE SRL with registered office in UDINE Via Umago n°35 as Data Controller of personal data pursuant to art. 4 of EU Regulation 2016/679, pursuant to art. 13 of the Regulations, we inform you that it will deal[1]your data manually and/or with the support of IT means for the purposes indicated below

Purpose of the treatment

The personal data you provide will be processed for purposes related to the execution of the contract, including any pre-contractual phase and, precisely, for the compilation of personal data lists, the drafting of estimates, bookkeeping, invoicing, carrying out of communications both by paper and computerized means, tax obligations, organizational management of the requested services and stipulation of contracts, setting of appointments, order fulfillment, deliveries, bureaucratic obligations relating to the requested services.

If you have been involved in a road accident for which the intervention of the police has been requested and/or a detention and/or seizure report has been issued against you, your data will also be made available to the intervening authorities. -

If your data has been provided to us for the performance of activities related to the judicial depositary, we inform you that your data will be processed for purposes of public utility connected to the confiscation of the property and that this processing may involve the police and the appointed by the Ministry of the Interior to carry out the alienation practices.-

Your data may be used to send commercial and/or promotional communications relating to products and services similar to those covered by the contractual relationship, unless you disagree.

Your data may be processed for internal purposes.

Failure to provide personal data will make it impossible for us to execute contracts and other connected obligations, as well as to correctly manage reciprocal commercial relations.

Legal basis

Your personal data will be processed for the execution of a contract, even verbal, concluded with you or for the execution of pre-contractual measures adopted at your request.

Data Recipients

Furthermore, your data may be communicated to third parties, for technical and operational needs strictly connected to the purposes set out above and in particular to the following categories of subjects:

a) bodies, professionals, companies or other structures entrusted by us with the processing connected to the fulfillment of the administrative, accounting and management obligations linked to the ordinary performance of our economic activity, also for credit recovery purposes (e.g. your data may be sent to insurance companies and external consultants or law firms for the management of damage compensation for the management of damage compensation);

b) to public authorities and administrations for purposes related to the fulfillment of legal obligations or to subjects entitled to access them by virtue of the provisions of the law, regulations, community regulations;

c) banks, financial institutions or other subjects to whom the transfer of the aforementioned data is necessary for the performance of our company's activity for the management of compensation for damages, in relation to the fulfillment, on our part, of the contractual obligations assumed in your comparisons.

d) suppliers of installation, assistance and maintenance services for IT and telematic plants and systems and all the services functionally connected and necessary for the fulfillment of the services covered by the Contract.

The list of data processors and data processors is available upon request

Data retention times

Your personal data will be kept for the time strictly necessary to carry out the purposes described above and to fulfill the obligations established by law.

The conservation forecast can be found in the Treatment Register.-

Data transfer

The Data Controller does not transfer personal data to third countries or to international organizations.

However, it reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Rights of the interested party

Pursuant to articles 13, paragraph 2, and from 15 to 21 of the Regulation, we inform you that with regards to the processing of your personal data, you may exercise the following rights:

a) Right to obtain access to personal data and the following information:

- confirmation that personal data is being processed or not;

- the purposes of the processing;

- the categories of personal data;

- the recipients or categories of recipients to whom the personal data have been or will be disclosed;

- if the data are not collected from the interested party, all the information available on their origin;

- the existence of an automated decision-making process, including profiling;

- a copy of the personal data being processed.

b) Right to rectification and integration of personal data;

c) Right to erasure of data ("right to be forgotten") if one of the following reasons exists:

1. personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;

2. the data subject revokes consent to data processing and there is no other legal basis for the processing;

3. the interested party opposes the treatment and there is no overriding legitimate reason to proceed with the treatment;

4. the personal data have been processed unlawfully;

5. personal data must be canceled to fulfill a legal obligation under Union or Member State law to which the data controller is subject.

If the data controller has made personal data public and is obliged to delete them, he must inform the other data controllers who process personal data of the request to delete any link, copy or reproduction of his data.

d) Right to limitation of treatment in the event that:

1. the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;

2. the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that its use be limited;

3. although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;

4. the interested party has opposed the processing, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

e) Right to lodge a complaint with the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority www.garanteprivacy.it.

f) Right to the portability of the data of the interested party or the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and possibly transmit them to another data controller, if the treatment is based on consent or on a contract and is carried out by automated means. Where technically possible, the interested party has the right to obtain direct transmission of data from one data controller to another.

g) Right to object at any time to the processing of personal data, including profiling, in particular in the event that:

1. the processing takes place on the basis of the legitimate interest of the owner, subject to the explanation of the reasons for the opposition;

2. personal data are processed for direct marketing purposes.

h) Right not to be subjected to a decision based solely on automated processing, including profiling, except in cases where the decision: is necessary for the conclusion or execution of a contract between the interested party and a data controller, is authorized by Union or Member State law to which the data controller is subject or is based on the explicit consent of the data subject.

i) Right to withdraw consent at any time; the data, if not based on another legal basis (including, fulfillment of a legal obligation or execution of a contract) must be canceled by the owner.

The exercise of rights is not subject to any formal constraint and is free.

Methods of exercising rights

The interested party may at any time exercise the rights by sending:

- a registered letter with return receipt CARROZZERIA UDINESE SRL based in Udine Via Umago n°35

- an email to the address bodyworkudinese@pec.it .

Data breaches

- If data theft is detected, communications will be immediately activated to the Privacy Guarantor and to the interested parties involved.-

The Data Controller is CARROZZERIA UDINESE SRL. Contact details: email: bodyworkudinese@tim.it tel. 0432297242
[1] By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, conservation , adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.