Privacy Policy

Cannoni-Conrad is the ecological division of Mantovana Macchedil s.a.s.

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA – CUSTOMERS/SUPPLIERS pursuant to and for the purposes of Art. 13 of EU Regulation 2016/679 (General Data Protection Regulation)

Dear Customer/Supplier, pursuant to Article 13 of the EU Regulation 2016/679 hereinafter referred to as the "Regulation" and in relation to the personal data concerning you, our company, as the data controller, as a result of existing contracts wishes to provide you with the following information.

1.Identification details of the data controller

The data controller is Mantovana Macchedil di Rentstore srls s.a.s., with registered and operational office at Via Novellara, 1 – 46100 Mantova (MN). The contact details are as follows: Telephone (+39) 391294 Fax (+39) 0376 391307 E-mail: info@macchedil.it. Please note that, since the data controller is established within the European Union, the appointment of a representative of the data controller is not required.

2.Contact details of the Data Protection Officer

Following verification of the applicability of the provisions of Article 37 of the Regulation, the appointment of a Data Protection Officer was ruled out, as the company does not fall into any of the cases covered.

3.Purpose of the processing for which the data are intended and legal basis

The processing is carried out for the purposes of performing the following activities: - Compliance with legal and/or contractual obligations, and adherence to established practices and customs relating to the company’s commercial activities; - Accounting and administrative processing; - Management of legal compliance and disputes; compliance with current legislation on health and safety at work; - Compliance with the company’s internal management system – Sending communications relating to offers and promotions – user registration for e-commerce purposes – geolocation and recording of driving parameters for vehicles hired or loaned free of charge, the data from which will be used by the Lessor in the event of theft, failure to return the vehicle, accidents or other unlawful conduct involving the hired or loaned vehicle. The legal basis for the processing consists of the following: the contract for the purchase/supply of goods or services; Legislative Decree 81/2008, as amended, concerning current legislation on health and safety at work; and regulations relating to the application of the Civil Code and the Criminal Code.  The processing is carried out by means of operations or sets of operations, and in particular: collection, recording, organisation, storage, processing, modification, comparison, interconnection; selection, extraction, consultation, disclosure, blocking, erasure and destruction; it is carried out with or without the use of electronic means; it is carried out by the Data Controller’s organisation and by trusted companies, a list of which is available from the Data Controller, which are our direct partners and which operate with complete autonomy as separate external data controllers, obliged to comply, on their own behalf and in accordance with a contract with our company, with the legislation on the protection of personal data. Personal data will not be disclosed.

4.Legitimate interests of the data controller

Where processing within the meaning of Article 6(1)(f) is carried out, it shall be carried out solely for the purpose of meeting the legitimate interests of the data controller.

5.Recipients of personal data

The personal data collected may be disclosed to: - all parties whose right of access to such data is recognised by law; - our staff in the course of their duties; - all natural and/or legal persons, whether public and/or private, where such disclosure is necessary or relevant to the conduct of our business, in the manner and for the purposes set out above.

6.Transfer of personal data abroad

The data controller has no intention of transferring personal data to third countries or international organisations outside the European Union.

7.Period of retention of personal data

The data retention time limit for tax purposes currently in force (10 years) is taken as a parameter.

8.Rights of the data subject

The data subject has the right (Chapter III Rights of the Data Subject) to request from the data controller access to and rectification or erasure of personal data, as well as restriction or objection to their processing and data portability. To exercise these rights, please refer to the contact details mentioned above.

9.Withdrawal of consent

The data subject has the right to revoke the consent given pursuant to Articles 6(1)(a) and 9(2)(a).

10.Right to lodge a complaint with the supervisory authority

The data subject has the right to lodge a complaint with the supervisory authority, which can be contacted at the following addresses: Garante per la protezione dei dati personali - Piazza di Monte Citorio n. 121 00186 ROMA Fax: (+39) 06.69677.3785 Switchboard: (+39) 06.696771 E-mail: garante@gpdp.it Certified email: protocollo@pec.gpdp.it . The references and procedures for exercising the right to complain can be found on the website of the Garante della Privacy http://www.garanteprivacy.it.

11.Disclosure of personal data

The communication and subsequent processing of personal data is a necessary condition for the conclusion of the contract with our company. Failure to provide such information will result in the contract not being enforceable.

12. Automated decision-making process

Personal data collected will not be subject to automated decision-making processes, including profiling.