Privacy statement pursuant to and for the effects of art. 13 of Legislative Decree 196/03 and of art. 13 of EU 2016/679 Regulation (GDPR) concerning the protection of personal data processing.

Atex Industries Srl is in possession of data relating to the staff of its customers and suppliers that it intends to keep in order to make it possible to carry out its business.

TYPES OF DATA PROCESSED
Personal data may consist of names, e-mail addresses, telephone numbers (contact details in general), role, duties, relating to: owners, members, executives and employees of customers and suppliers.
The essential elements of the treatments carried out are illustrated in our Personal Data Protection Policy which describes the modalities.

PURPOSE OF THE TREATMENT
The collection and processing of personal data is carried out in order to conduct:
1. the fulfillment of all transactions imposed by regulatory obligations, tax and tax provisions deriving from the performance of the business activity;
2. the establishment and execution of contractual relationships in progress;
3. transactions strictly connected and instrumental to the start of the aforesaid relationships, including the acquisition of preliminary information to the conclusion of the Contract;
4. the management of relations with the Customer / Supplier, for the relevant part of competence, for administration, accounting, orders, shipping, invoicing, services, management of any dispute;
5. the measurement of customer satisfaction, the development of internal statistics according to ISO 9001: 2015 specifications;
6. any evaluation of the supplier according to ISO 9001: 2015 specifications.

LEGAL BASIS
• Data processing is necessary for the execution of contracts for which the interested party (Customer / Supplier) is a party;
• processing is also necessary for the pursuit of the legitimate interest of Atex Industries S.r.l. to carry out its business activity.

TREATMENT MODE
The processing of data for the purposes set out takes place using either automated, electronic or magnetic, or non-automated means, on paper, in compliance with the rules of confidentiality and security required by law and the resulting regulations. Atex Industries has defined, trained and instructed the persons processing personal data; it has also adopted internal procedures that regulate access to data including the relative authorizations and limitations, the methods of processing and storage.

TREATMENT SITE
The data is currently processed and stored at the registered office of Atex Industries Srl in
Via Forgaria, 7 – Z.I. Ponte Rosso 33078 San Vito al Tagliamento (PN) – Italy.

They are also treated, on behalf of the writer, by professionals and/or companies charged with carrying out technical, development, management and administrative accounting activities.

CONSEQUENCES OF AN EVENTUAL REFUSAL TO THE CONFERENCE
The data quoted, in their entirety, are essential to meet regulatory and/or contractual obligations. Any refusal to provide or any impediment to their treatment would make Atex Industries Srl unable to execute or continue the contracts, without prejudice to the treatment of previously acquired data for the fulfillment of tax and tax obligations depending on the contracts concluded.

DATA COMMUNICATION
Without prejudice to communications and dissemination carried out in compliance with legal obligations, personal data relating to Customers and Suppliers may be communicated in Italy and/or abroad to:
• Factoring companies, credit institutes, debt collection companies, credit insurance companies, invoices, payment orders, or other similar financial assets;
• Business information companies, companies operating in the transport sector;
• Professionals, consultants, and consulting firms;
• Public and private bodies, also following inspections or audits such as, for example, those carried out by: the Financial Administration, the Tax Police, Judicial Authorities, the Labor Inspectorate, the Local Health Authorities, Social Security Agencies, the Chamber of Commerce, etc. on their explicit request or for legal provisions;
• In general all the subjects that can access your data by law.

TRANSFER OF DATA ABROAD
Customer or Supplier data may be communicated to Atex Industries partners located in non-European Third Countries, only for the fulfilment of obligations arising from the service contract of which the Customer or Supplier is an interested party; or to fulfill, before conclusion of the contract, specific requests; or for the conclusion or execution of a contract stipulated in your favor (under Article 43, letter b) of Legislative Decree 196/03).

DATA STORAGE TIMES
The personal data of the Customer/Supplier will be processed for the entire duration of the contractual relationships established and also subsequently for the fulfillment of all legal obligations.
• For administration, accounting, orders, management of budgeting and production flow, assistance and repair, shipping, billing, services, management of any dispute: 10 years after termination of the contractual relationship, as established by law, without prejudice to any delayed payments of the fees justifying the extension of this period;
• For the purposes referred to in points 5 - 6 listed in § "Purpose of processing", 5 years.


RIGHTS OF THE INTERESTED PARTY
With regard to personal data, the Customer / Supplier can exercise the rights provided for by art. 7 of Legislative Decree no. 196/2003 (of which the following text is reported) within the limits and conditions set forth in articles 8, 9 and 10 of the aforementioned legislative decree, and in CHAPTER III of the GDPR UE 2016/679 (Articles 15 to 22).
In particular, the interested party may request to know the origin of the data as well as the logic, the mode and the purpose on which the treatment is based; may request access to your data, anonymization or blocking of data processed in violation of the law, as well as updating, rectification, integration, limitation and portability (ie. copying the Data into a structured format, in common use and readable by automatic device) to another data controller, can finally obtain the cancellation ("right to be forgotten") if the data is no longer necessary for the purposes for which they were collected, or were processed illegally.
In case of signing of any form of consent to the processing that would be requested by Atex Industries Srl in the future, please note that the interested party can revoke it at any time, without prejudice to the mandatory requirements of the current legislation at the time of the request for revocation, by contacting the Data Controller at the addresses below.
The aforementioned rights may also be exercised by sending communications to the following e-mail address: privacy@atexindustries.it.
If you believe that your personal data may not have have been handled in an appropriate manner according to the law, you can contact the Guarantor for the protection of personal data – Piazza Monte Citorio, 121 00186 Rome Ph. +39 06 69677 1 Fax +39 06 69677 785 e-mail: garante@garanteprivacy.it – to lodge a complaint.

HOLDER AND RESPONSIBLE FOR TREATMENT
The data controller, to which the Customer / Supplier can contact to exercise their rights under Article. 7 above transcribed, is Atex Industries Srl Via Forgaria, 7 – Z.I. Ponte Rosso 33078 San Vito al Tagliamento (PN) – Italy.
Tel.: +39 0434 85183
Fax: +39 0434 85338
The person responsible for the processing is the CEO.

We invite Customers / Suppliers to share this information with employees of their organization, third-party collaborators, and other persons who are in any way related to it, whose personal data is directly or indirectly necessary for the execution of the above services.

San Vito al Tagliamento, 25/05/2018
Atex Industries Srl





EXTRACT FROM TITLE II "RIGHTS OF THE INTERESTED PARTY" D.LGS 196/03
Art. 7 - Right of access to personal data and other rights
1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him / her, even if not yet registered, and their communication in an intelligible form. 2. The interested party has the right to obtain the indication:
a. of the origin of personal data;
b. of the purposes and methods of processing;
c. of the logic applied in case of treatment carried out with the aid of electronic instruments;
d. of the identifying details of the holder, of the responsible and of the designated representative according to article 5, paragraph 2;
e. of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
3. The interested party has the right to obtain:
a. updating, rectification or, when applicable, integration of data;
b. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c. the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data has been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right. 4. The interested party has the right to object, in whole or in part:
a. for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b. to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.