Introduction and general terms
The subject of the protection offered by every privacy REGULATION is the "processing
of personal data". Before going into this information it is necessary to define what it
means to "treat personal data" and to do so it seems to us that the best thing is to
refer immediately to the EU Regulation 2016/679 (GDPR) which, in Art. 4 n.2) defines it as the
activity of collection, recording, organization, storage, consultation, processing, modification,
selection, extraction, comparison, use, interconnection, blocking, communication, cancellation
and destruction of data that refer to persons identified or identifiable physical data.
As a natural person to whom the processed data refer (we could say "owner" of the
personal data of reference), the EU Regulation 2016/679 defines it with the "interested"
and reserves a series of rights and prerogatives in your favor.
The first of these rights is undoubtedly to be informed, in a clear and transparent manner,
about the purposes and the ways in which they will be managed (to say it with the correct legal
"treated") the personal data that, for various reasons, will provide the company directly
or through this website.
This obligation of information is complied with by submitting to the interested parties'
documents such as this which is being read, supplemented case by case, by other more specific
Purpose of the processing personal data
The company SVAD DONDI SPA carries out various treatments of personal data, referable
to: Suppliers; Customers; Employees; Natural persons; External legal entities with which there
are relations of supply of goods and/or services, and/or inter-company collaboration.
These treatments are carried out exclusively for the purpose of fulfilling the obligations
connected with the establishment and maintenance of the aforementioned relationships for the
various purposes envisaged by the regulations in force for the operation of the company and
based on the following general principles:
- Necessity - all the treatments and technologies used are organized in such a way as to minimize
the use of personal and identification data and, whenever possible, anonymous data is used or
methods that allow identification of the interested party only in case of necessity;
- Purpose - the data and the relative treatments are acquired and carried out exclusively for
the organizational-administrative purposes of the company;
- Lawfulness - all the treatments carried out are carried out in accordance with laws and
- Fairness and loyalty - the principle of fairness and loyalty concerns the guarantee of both
data loyalty and the integrity of the methods of collection, storage and transmission;
- Security and protection.
Without claiming to be exhaustive (the details will be contained in the specific
information that will be provided from time to time), the processing performed by the company
pursuant to art. 6 letter e) of the EU Regulation are: use of telematic and e-mail services
for all purposes. Data dissemination will take place within the limits of essential
information (principle of essentiality).
Obligatory or optional of providing personal data
The provision of the requested data is mandatory, as it is necessary for the realization
of the organizational purposes, administrative procedures referred below. Any refusal to process
such data could make it impossible to fulfill the contractual obligations.
The mandatory personal data to be provided, strictly necessary for the exercise of the
- adherence to specific and additional services, such as our newsletter and other similar
information services on our business;
- fulfillment of orders and related activities;
- management of your requests: technical, commercial, on the progress of your orders and
requests for information in a broad sense;
- making contact with the representatives of our services;
- evaluation request for your inclusion in our staff, by sending CVs.
The mandatory personal data are the following: name, surname and email address. In
the cases provided, possible place and date of birth, residence, tax code.
Procedure for data acquisition and processing
The personal data of the owner/legal representative are acquired directly by the
interested party. To guarantee the rights of the data subject, the processing of data is
carried out according to the methods and precautions envisaged by current legislation,
respecting the conditions of legitimacy of each request for data, following principles of
correctness, transparency, protection of its dignity and of his privacy. The treatment can
be carried out in paper form, or through computer and electronic tools, and the relative
data will be kept in the archives present at the present company. In this case the data
will be processed and stored according to the digital preservation technical rules indicated
by the AGID. The paper data, on the other hand, according to the provisions of the
conservation and waste plans indicated by the general direction of the archives at the
Ministry of Cultural Heritage. The processing involves as main phases: collection, recording,
organization, storage, processing, communication, dissemination and deletion of data when
they cease to be necessary.
Can my data be communicated?
The subjects to whom the personal data may be communicated within the company are:
the administrative manager, the data processor, the persons in charge of the administrative
treatment, the human resources manager. Personal data, other than sensitive and judicial data,
may be communicated to other private entities exclusively in the cases provided for by laws
and regulations (in particular: software houses, INAIL, INPS).
Which is the period of storage of personal data?
The data will be stored at the company for as long as the service will be active and
then, in the event of termination of the contract, the file will be retained for the mandatory
retention period required by current legislation.
The data storage times (without any difference between paper and digital) are
established by the relevant legislation.
- Data referable to documents subject to unlimited storage or for 50 years: bargaining, contract
registers, work contracts, salary registers and other checks, consultancy liquidation.
- Data referable to documents subject to archiving for 6 years (with the obligation, however, to
keep 1 copy per sample): requests for certificates and authorizations with respect to the use of
the premises, leave applications and permits, requests for advance post-employment benefits,
certifications for medical examinations.
- Data referable to documents subject to archiving for 1 year: (with the obligation, however,
to keep 1 vintage per sample every 10 years), requests for access and copies of documents.
- All accounting-administrative documentation is subject to a 10 year conservation