Pursuant to art. 13 and art. 14 of EU Regulation 2016/679 – GDPR

Dear Supplier,

pursuant to articles 13 and 14 of the European Regulation on the processing of personal data (GDPR 2016/679), the following information is provided:

The Data Controller is the company IPM S.R.L.

VAT number IT01020900393, located in LUGO – 48022 (RA) – Italy, via Dell’Artigianato, 13


Telephone number: +39 0545 23342 and Fax: +39 0545 30911

Purpose of the treatment

The collection and processing of personal data are carried out:

  • for the fulfillment of legal obligations;
  • for the execution of obligations deriving from a contract or from a pre-contractual relationship;
  • for supplier management (supplier administration, contract administration; orders, goods receipt, invoices, selections in relation to company needs, etc…);
  • for the management of any disputes (breach of contract; notices; transactions; arbitrations; legal disputes, etc…).

Legal basis of the treatment

The legal bases on which the data processing is based are:

  • needs relating to contractual or pre-contractual obligations;
  • legal obligations to which the undersigned company is subject.

Data categories and sources

The processed data are personal data and can be collected directly from the interested party and/or indirectly from public lists, deeds or documents that are publicly known.

Data Recipients

The recipients or any categories of recipients are:

  • public entities, postal entities or other mail delivery companies;
  • banks and credit institutions and debt collection companies;
  • law firms and insurance companies;
  • carriers and transport companies;
  • IT equipment maintenance/repair companies;
  • professional firms and/or companies and/or business and entrepreneur associations that provide certain services (accounting, tax, etc…);
  • companies with which the company collaborates or which intervene in parts of the work, that is necessary for the execution of the contract.

Additional information, necessary to ensure fair and transparent processing

We inform you that your data are subjected to both paper and electronic processing and, in the latter case, kept on a server located in the European Union; we also inform you that the owner adopts the appropriate security measures aimed at preventing any access, the unauthorized disclosure, modification or destruction of such personal data.

Data retention period

The personal data processed will be kept:

 --> 5 YEARS for pre-contractual treatments;

 --> 10 YEARS for contractual fulfillment and legal obligations;

 --> until the conclusion of any dispute.

Rights of the interested party

We inform you that you have the right to ask us for access to your personal data, to obtain their rectification, cancellation or limitation of treatment, to oppose their treatment and to request the portability of your data.

These rights may be exercised at any time against the Data Controller.

You are also entitled to lodge a complaint with a supervisory authority.

Nature of data provision

The communication of your data is:

  • mandatory by law, therefore your refusal to communicate the data will make it impossible to fulfill the relationship between the parties;
  • necessary requirement for the conclusion of the contract, therefore your eventual refusal to communicate the data will make it impossible to fulfill the contract.

Update 05/24/2018


The legal representative