PRIVACY POLICY

in accordance with the European Regulation n°679/2016 GDPR ( General Data Protection Regulation)

INTRODUCTION

As a part of the business process, the privacy protection of the person concerned during personal data processing is object of considerable attention by Win Transport Italy Srl.
Personal data collected are processed in compliance with the Italian and European legislation, with particular reference to the European Regulation 679/16 (also knowing as “GDPR”), and the legal provisions in force in the countries where the Society works.

Win Transport Italy Srl as the owner agrees to protect your privacy and rights, and according to the principles dictated by standards mentioned, the processing of the data provided will be based on the principles of correctness, lawfulness and transparency.

PURPOSE OF THE TREATMENT

Our Company must acquire or must already hold some data that regard you.
Collection and processing of your data are carried out in order to allow our Company to conduct the activity of:

• management of the contractual relationship (as a customer, as suppliers or as a collaborator), more specifically: administrative activities, accounting, preventive administration of orders and contracts;
• litigation management;
• selection in relation to the needs of the Company;
• fulfillment of transactions imposed by legal requirements;
• auditing and financial report certification (mandatory/optional);
• historical data storage;
• collection of references during the precontractual informative phase.

METHOD OF TREATMENT

Data processing is carried out following this modalities:

• manual, with registration, processing and archiving in paper form
• electronic, by recording, processing, storing and transmitting data with the aid of IT equipment

The tools and media used – paper, magnetic, computer or telematic – as part of the processing activities are suitable to ensure the security and the privacy of data.
The custody of databases is carried out in protected enviroments, whose access is under control and in compliance with the legal provisions.
In carrying out the processing activities, the Company undertakes to:

• ensure the accuracy and the updating of the data processed, and promptly recognize any possible adjustment and /or integration requested by the interested party;
• adopt appropriate security measures to ensure an adequate data protection, considering the potential impacts that the processing involves on the rights and the fundamentals freedoms of the data subject;
• notify to the interested party, in the times and in the cases provided by the binding legislation, any possible violation of personal data;
• guarantee the compliance of the processing operations in accordance with the applicable provisions of the law.

TRANSFER ABROAD

Your data may be communicated to companies contractually linked to Win Transport Italy Srl, abroad within the European Union within the limits provided by the legislation in force, in order to comply with contracts or related purposes.
In any case, the transfer of personal data outside the European Union will take place only after the adoption of adequate guarantees, as required by the binding legislation, or if there is the consent of the interested party.

DATA CONSERVATION POLICY

The company keeps personal information in its systems, in a form that allows the identification of data subjects in a period of time not exceeding the attainment of the purposes for which they are processed or to comply with specific regulatory or contractual obligations.
Where time limits will not be detailed from regulatory sources in the field of conservation, Win Transport Italy Srl will retain the data acquired for a period of 12 months from the due date of the employment relationship; where the terms of conservation are subject to specific regulations, Win Transport Italy Srl will comply with the terms of conservation established.

COMMUNICATION AND DIFFUSION OF DATA

We inform you that without prejudice to the communications followed in fulfillment of legal obligations, your personal data collected may be known by the Data Controller, the Data Processors and by any third parties (parties involved in the management of the service). Data may be communicated, with the explicit consent of the interested subject and for the purposes previously indicated, also to the following subjects or categories of subjects:

• banks and credit institutions;
• partners of the company, professionals;
• contractors of our company;
• customers of the company;
• other offices of the company or of other companies, including foreign companies, linked or belonging to the group or rather with whom a correspondence relationship is maintained;
• auditing firm;
• anyone legitimate recipient of communications required by legal or regulatory provisions.
• body, authorities or public institutions;

The diffusion of the acquired data to the categories listed above, will remain bound to the purpose of the commercial relationship established with the interested party and carried out on the basis of the acquired consent.

RIGHTS OF THE INTERESTED PARTY

The interested subject can assert his rights, recognized by the GDPR art. 15-22 and the current legislation, such as:

• Right of access: right to obtain from the data controller the confirmation that whether or not that personal data are being processed and if so, to obtain the access to personal data and additional information about the origin, purpose, category of data processed, recipients of communication and/or data transfer, etc.
• Right to rectification: right to obtain from the data controller the correction of inaccurate personal data without unjustified delay, as well as the integration of incomplete personal data, also providing ad additional declaration.
• Right of Cancellation: right to obtain from the data controller the cancellation of personal data without unjustified delay in the event that:

• Personal data are no longer necessary with respect to the purposes of the processing;
• The consent on which the treatment is based is revoked and there is no other legal basis for the processing;
• Personal data have been processed unlawfully
• Personal data must be deleted to fulfill a legal obligation.

• Right to object to the processing: right to object at any time to the personal data processing that have as their legal basis a legitimate interest of the holder.
• Right of processing limitation: right to obtain from the data controller the limitation of processing, in cases where the accuracy of data is contested (for the necessary period to verify the accuracy of personal data by the data controller), if the treatment is illegal and/or if the interested party has opposed to the treatment.
• Right to data portability: right to receive personal data in a structured, commonly and legible format form an automatic device and transmit them to another data controller, only for cases where the processing is based on consent and only for data processed by electronic tools.
• Right to lodge a complaint to the supervisory authority: except any other administrative or judicial recourse, the person concerned who considers that the treatment concerning him/her reports a violation of the GDPR, has the right to lodge a complaint to the supervisory authority of the Member State where he/she lives or usually works, or rather the state in which the presumed violation has occurred.

DATA CONTRIBUTION

The release of consent, if proposed by Win Transport Italy Srl, is mandatory for the pursuit of the expected purposes as their unavailability would make it impossible to finalize the business relationship.

For any further explanations or comments regarding this informative document or for the exercise of your rights, the interested subject may contact the Data Controller at the following references:

Win Transport Italy Srl

Via Adamello 1 – 20061 Carugate (MI)

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.