Information notice on the processing of personal data pursuant to Articles 13–14 of EU Regulation 2016/679

Data Subjects: suppliers

TECNOSS DENTAL S.r.l. in its capacity as Data Controller of your personal data, pursuant to and for the purposes of Regulation (EU) 2016/679, hereinafter referred to as the 'GDPR', hereby informs you that the aforementioned regulation provides protection for data subjects with respect to the processing of personal data. This processing will be conducted in compliance with the principles of fairness, lawfulness, transparency and protection of your privacy and rights.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations set out therein.

Purpose and legal basis for processing: in particular, your data will be processed for the following purposes relating to compliance with legislative or contractual obligations:

• Management of existing orders and contracts (Legal basis: performance of a contract)
• Compliance with legal obligations in the fields of taxation and accounting. (Legal basis: legal obligation)

The processing of data necessary for fulfilling these obligations is essential for the proper management of the relationship. The provision of such data is mandatory to achieve the purposes set out above. Furthermore, the Data Controller informs you that failure to provide or incorrect provision of any mandatory information may result in the Data Controller being unable to ensure the consistency of the processing itself.

Processing methods: your personal data may be processed in the following ways:

• Electronic processing via computer systems
• Manual processing via paper records

All processing is carried out in accordance with the provisions of Articles 6 and 32 of the GDPR, and by implementing the appropriate security measures as required.

Disclosure: your data may only be disclosed solely to public authorities and offices to whom tax-related data must be provided. If necessary, it may also be shared with competent individuals, duly appointed to perform the services essential for the proper management of the relationship, while ensuring the protection of the data subject's rights.

Your data will only be processed only by personnel who have been expressly authorised by the Data Controller.

Dissemination: Your personal data will not be disseminated under any circumstances.

Retention Period: We wish to inform you that, in accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, your personal data will be retained for the following periods:

• accounting and tax data: for 10 years, in compliance with the obligations relating to the retention of accounting records (Article 2220 of the Italian Civil Code, which requires accounting records to be retained for 10 years; Article 22 of Italian Presidential Decree no. 600 of 29 September 1973)
• other data: for 10 years, from the date the contract ceases to be enforceable, or, in the event of disputes, for the statutory limitation period provided by the relevant legislation protecting related rights.

Data Controller: the Data Controller, pursuant to the Law, is TECNOSS DENTAL S.r.l., with office in Torino, Via Livorno 60

You have the right to obtain from the Data Controller the erasure (right to be forgotten), restriction, updating, correction, portability, and objection to the processing of your personal data. You may also, in general, exercise all rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of the GDPR.

You can exercise your rights by emailing [email protected]

In addition, if you believe that the processing of your data is in breach of current legislation, you have the right to lodge a complaint with the Personal Data Protection Authority pursuant to Article 77 of Regulation 2016/679.

Rights of the Data Subject

1. The data subject is entitled to obtain confirmation as to whether or not any personal information concerning the same exists, including any unregistered information, and to receive communication of any such information.

2. The data subject has the right to obtain indication of:

• a. the origin of the personal data;
• b. the purposes and methods of data processing;
• c. the logic applied when the processing is performed using electronic instruments;
• d. the identification details of the data controller and processors and of the representative appointed pursuant to Article 5, paragraph 2;
• e. the subjects or categories of subjects to whom the personal information may be communicated or who may become aware of the personal information in their capacity as appointed representatives in the state, data processors or persons in charge of the processing.

3. The data subject has the right to obtain:

• a. the updating, correction or, when required, integration of data;
• b. the erasure, anonymisation or blocking of data processed in violation of the law, including data that no longer needs to be retained in relation to the purposes for which it was collected or subsequently processed;
• c. confirmation that the actions referred to in points a) and b) have been communicated, including their content, to those to whom the data have been disclosed or disseminated, except where this requirement proves impossible or involves the use of means manifestly disproportionate to the protected right.
• d. data portability.

4. The data subject is entitled to object, in whole or in part:

• a. for legitimate reasons, to the processing of their personal data, even if relevant to the purpose of the collection.