GDPR - General Data Protection Regulation 679/2016
DISCLOSURE For the processing of personal data
1. Data Controller
||Quick Load s.r.l.
||Via Fornace 20 – 40023 – Castel Guelfo di Bologna (BO)
|Taxpayer identification no. / VAT no.
|Appointment of DPO
|Contact information of DPO
|Contact information of Data Processor
2. Purpose and legal basis for the processing
The data controller has prepared a register of processing operations that contains all the processing
operations performed, with detailed information on the recipients, risks to the data, and measures taken to
protect the data.
||Personal data (name, surname, address, e-mail address, mobile phone) will be processed electronically
and on paper to fulfill contractual obligations and mandatory requirements.
Furthermore, the data is present in the commercial records relating to existing contractual
relationships. Therefore, this data is present in orders, e-mails, quotations, or commercial
disclosures, cataloged at our offices and on our servers.
Accounting firm Suppliers/Customers HW and SW managers
|Consent is not required due to the applicability of the lawfulness of the processing to satisfy the
requirements of Article 6 of Reg. 679/2016
3. Recipients and transfer outside the European Union
Personal data will not be disclosed to third parties or resold for any reason, besides what is indicated in
section 2 above.
4. Retention period
Personal data collected for the purpose of this disclosure will be retained until revocation of the consent
referred to in section 2, unless the same information is not subject to other processing by the same Data
Controller ( retention of mandatory records such as payroll records). In any case, upon revocation of consent
the data will no longer be processed for the purposes described in section 2.
5. Rights of the data subject
The data subject possesses the rights specified in Art. 15, Reg. 679/2016 and specifically the rights:
- to obtain confirmation as to whether or not personal data concerning them exists, even if not yet
recorded, and its communication in an intelligible form.
- to be informed: a) of the source of the personal data; b) of the purposes and methods of the
processing; c) of the logic employed should the processing be performed with the aid of electronic
instruments; d) of the identification data concerning the Data Controller, data processors, and any
representative appointed pursuant to Art. 3.1, Reg. 679/2016; and e) of the entities or categories of
entities to whom or which the personal data may be communicated and who or which may learn such data in
their capacity as appointed representatives in Italy, data processors or persons in charge of the data
- to obtain: a) updating, rectification or, where interested therein, integration of the data; b) deletion,
anonymization, or blocking of data that have been processed unlawfully, including data whose retention is
unnecessary for the purposes for which they have been collected or subsequently processed; c) certification
to the effect that the operations as per letters “a” and “b” have been notified, as also related to their
contents, to the entities to whom or which the data was communicated or disseminated, unless this
requirement proves impossible or involves a manifestly disproportionate effort compared with the right that
is to be protected.
- to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning
them, even though it is relevant to the purpose for which it was collected; b) to the processing of
personal data concerning them, where it is carried out for the purpose of sending advertising materials or
direct selling or for conducting market research or commercial communication, through the use of automated
call systems without the involvement of an operator by e-mail. It should be noted that the data subject’s
right to object, set forth in section b above, for direct marketing purposes through automated means
extends to traditional means and that, in any case, the possibility remains for the data subject to
exercise their right to object even only partially. Therefore, the data subject can decide to receive only
communications using traditional means or only automated communications or neither of the two types of
- Furthermore, the data subject possesses the rights specified in Arts. 16-21, Reg. 679/2016 (Right of
correction, right to be forgotten, right to restriction of processing, right to data portability, right to
object) as well as the right to lodge a complaint with the Authority for the Protection of Personal Data.
6. Procedures for exercising rights
You may exercise your rights at any time by sending an e-mail to firstname.lastname@example.org
7. Obligation of communication
The data controller is required, for contractual and legal reasons, to communicate the personal data collected
to the recipients.
8. Existence of automated decision-making processes
No automated decision-making process will be based on the data communicated for the processing that is the
subject of this disclosure.