Pursuant to art. 13 of EU Reg. 2016/679 containing provisions on the protection of personal data, we inform you that the personal data registered through this section will be treated as set out below.

Nature of data
In addition to the public company data (company name, registered office, administrative office, tax data) requested from the potential supplier, the personal data entered in this form when registering for the supplier's application are subject to processing and, therefore, for any subsequent stipulation and execution of the contractual relationship. In particular, the personal data processed during registration are: name, surname and role of the company contact person, telephone, mobile number and company e-mail. Furthermore, any personal data voluntarily released in the "Company presentation" section and/or in the "additional notes" may be processed.

Purpose of the treatment
The data You enter in this section will be processed for the correct management of the supplier candidacy and for the potential stipulation and execution of the contractual relationship with Multicedi.

Legal basis of the processing and nature of the provision of data
The legal basis that legitimizes the processing of personal data for the aforementioned purposes is to be found in the art. 6 par. 1, lit. b) of EU Reg. 2016/679, or the need for processing for the execution of a contract of which the supplier is a party or for the execution of pre-contractual measures adopted at the request of the same. The provision of data is mandatory for the fulfillment of the purposes indicated above and any refusal to provide it will therefore not allow the pursuit of the purposes described.

Processing methods
In relation to the indicated purposes, the data will be processed lawfully, fairly and with the utmost confidentiality, with the support of IT or telematic tools in compliance with the security measures pursuant to articles from 32 to 35 of EU Reg. 2016/679.

Categories of data recipients
For the purposes indicated above, the data may be communicated and disseminated to specifically appointed managers and/or appointees internal and external to Multicedi Srl and will not be disclosed to unauthorized third parties.

Data transfer
The Data Controller does not transfer personal data to third countries; however, it reserves the right to use cloud services and in this case the suppliers of these services will be selected among those who provide adequate guarantees, as required by Article 46 of EU Reg. 2016/679.

Data Retention
Personal data will be stored within Multicedi's IT systems for the time strictly necessary for the pursuit of the purposes. At the end of the retention period, the data will be permanently and irreversibly deleted or made anonymous. In the event of stipulation of the contract, the data will be kept for the entire duration of the contract, and, after any termination, they may be kept for 10 years in order to be able to fulfill legal obligations.

Rights of the interested party
The person concerned with the processing of personal data has the right, pursuant to art. 15 of EU Reg. 2016/679, to obtain from Multicedi Srl confirmation that personal data concerning him is being processed and, in this case, to obtain access to personal data and information regarding the treatment. Furthermore, you may exercise the rights set out in the articles from 16 to 22 of EU Reg. 2016/679 such as: Art. 16-Right of rectification, Art. 17-Right to cancellation (right to be forgotten), Art.18- Right to limitation of treatment, Art. 19-Obligation of notification in case of rectification or cancellation of personal data or limitation of treatment, Art. 20-Right to data portability, Art. 21-Right of opposition and Art. 22-Automated decision-making process relating to natural persons, including profiling. To exercise the rights listed above, the interested party may send a request to the email address privacy@multicedi.com and for any further assistance regarding their rights, the user may contact the Data Protection Officer at the address gdpr@smsengineering.it. Finally, if the interested party believes that the processing that concerns him violates the provisions of EU Reg. 2016/679, he can always lodge a complaint with the Guarantor authority for the protection of personal data using the form and procedure indicated on the site and available at the link https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524.

Identification details of the Data Controller and Data Protection Officer
The Data Controller is Multicedi Srl with registered office in S.S Casilina – 81050 Pastorano (CE). The Data Protection Officer is SMS Engineering Srl, registered office in Via Carlo Di Tocco, 80142 – Naples (NA), which you can contact by email by writing to: gdpr@smsengineering.it