PRIVACY POLICY CUSTOMERS AND SUPPLIERS – EU Reg 2016/679 – (European Data Protection Regulation)

1. Introduction

This privacy policy (« Privacy Policy ») describes the personal data processing activities carried out by Lab68 S.r.l. (« Lab 68 ») in the execution of contractual relationships with customers and suppliers (data subjects).

2. Identification details of the Data Controller.

The Data Controller is LAB68 S.r.l., P.IVA 04443990231, with registered office in via dell’Oreficeria n. 36, 36100 Vicenza (VI), pec: lab68srl@pec.it

3. Type of data processed

The personal data processed are common data, such as personal data (name and surname, address), contact data (e-mail address, telephone number), accounting and banking data (IBAN) and any further personal data necessary for the performance of contractual obligations.

4. Legal basis, purposes and methods of data processing

Lab68 processes the personal data of the person concerned for the purpose of managing the commercial and contractual relations established with the same as well as fulfilling the ensuing legal obligations (e.g. administrative, accounting and tax obligations). The legal basis for the processing is the execution of pre-contractual measures and contractual obligations as well as the fulfilment of legal obligations.

Personal data may be processed in electronic and paper form. 

Processing is not carried out by means of automated decision-making processes. 

5. Storage of personal data

Personal data are stored and processed through computer systems owned by Lab68, which are also managed by third party suppliers. 

The data shall be processed by the Data Controller for the period necessary for the pursuit of the aforementioned purposes and for the further mandatory period relating to the storage of contracts and administrative data and/or for legal defence.

6. Scope of data communication and access

The user’s personal data may be communicated to: i) all subjects who must have access to such data by virtue of regulatory provisions; ii) collaborators and employees of the data controller, within the scope of their duties; iii) third parties who must come into contact with the personal data for the purposes of carrying out the activity for which they have been appointed by Lab68. 

The processed data shall not be transferred outside the European Union. Should it become necessary to transfer the data to Third Countries, this will be done in accordance with the provisions of EU Reg. 2016/679.

7. Nature of provision of personal data

The provision of personal data is compulsory in order to allow the Company to manage the contractual relationship established with the interested party and fulfil the consequent regulatory obligations. If personal data is not provided, the data controller will not be able to perform the contractual relationship.

8. Rights of the data subject

Pursuant to Articles 15 et seq. of the GDPR, the data subject has the right to obtain from the data controller, with reference to each specific processing operation, confirmation as to whether or not personal data relating to him or her are being processed and, if so, to obtain access to the personal data and information relating to the processing as well as rectification of the information. 

In addition, the data subject has the right to obtain from the data controller: i) the erasure of personal data concerning him/her; ii) the restriction of processing when one of the hypotheses provided for by the aforementioned legislation applies; iii) the personal data being processed in a structured, commonly used and machine-readable format (portability). 

The rights may be exercised by sending an email to info@lab68.eu or by pec to lab68srl@pec.it, attaching a copy of your identity document.

Before proceeding with the processing of the request received, it may be necessary to verify the identity of the person concerned and answer a few questions.