Privacy Policy

Premise

VERXO S.r.l., with registered office in Via Rieti 4 – 25125 Brescia (Italy), CF and VAT no. 03742020989 (hereinafter, “Owner”), as data controller, informs you pursuant to art. 13 Legislative Decree 30.6.2003 n. 196 (hereinafter, “Privacy Code”) and art. 13 EU Regulation no. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the manner and for the purposes set out below. For Verxo S.r.l. personal data represents an asset of great value and an asset to be protected, adopting procedures and behaviors aimed at guaranteeing its protection. Transparency towards interested parties therefore represents a primary objective, pursued through effective communication tools and aimed at making basic information on the processing of their data available to interlocutors.

General information

Interested parties are informed (ex. Art.4, c.1 of the GDPR) of the following general profiles, valid for all areas of processing:

• All data are processed lawfully, correctly and transparently towards the interested party, in compliance with the general principles set out in Article 5 of the GDPR;
• Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

References and rights of interested parties

• The Data Controller is the undersigned Company, Verxo S.r.l., in the person of its legal representatives;
• You can contact Verxo S.r.l. to exercise all the rights provided for by articles 15-21 of the GDPR (right of access, rectification, cancellation, limitation, portability, opposition), as well as revoke a previously granted consent; in case of failure to respond to their requests, the interested parties can lodge a complaint with the Supervisory Authority for the protection of personal data (GDPR – Art.13, paragraph 2, letter d).

Data provided voluntarily by the user

The optional, explicit and voluntary sending of electronic and/or ordinary mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. If the sender sends his CV to submit his professional application, he remains solely responsible for the relevance and accuracy of the data sent. Please note that any CV without authorization to process data will be immediately deleted.

The “Data Controller” expressly recognizes and authorizes the use of its sub-suppliers and its own representatives in order to provide Services or satisfy any requests of the interested party. The list of sub-suppliers is available upon request from VERXO S.R.L. Support.

Il “Titolare del trattamento” garantisce che i propri Incaricati del trattamento siano in grado di soddisfare gli obblighi assunti dal “Responsabile del trattamento” nella presente informativa in relazione al trattamento dei dati personali effettuato dal Incaricato del trattamento.

Object of the treatment

Verxo S.r.l. processes personal identification data of customers/suppliers/employees (for example, name, surname, company name, personal/fiscal data, address, telephone, e-mail, bank and payment details) and of its operational contacts (name, surname and data contact details) acquired and used in the provision of services provided by Verxo or to fulfill obligations established by law, a regulation, community legislation or an order from the Authority.

Purpose and legal basis of the processing

The data is processed for:

• Conclude contractual/professional relationships;
• Fulfill the pre-contractual, contractual and fiscal obligations deriving from existing relationships, as well as manage the necessary communications connected to them;
• Fulfill the obligations established by law, by a regulation, by community legislation or by an order from the Authority;
• Exercise a legitimate interest as well as a right of the Data Controller (for example: the right of defense in court, the protection of credit positions; ordinary internal operational, management and accounting needs).

Il mancato conferimento dei suddetti dati renderà impossibile l’instaurazione del rapporto con il Titolare. Le suddette finalità rappresentano, ai sensi dell’Art.6, commi b,c,f, idonee basi giuridiche di liceità del trattamento. Qualora si intendesse effettuare trattamenti per finalità diverse verrà richiesto un apposito consenso agli interessati.

Treatment methods

The processing of personal data is carried out by means of the operations indicated in the Art. 4 no. 2) GDPR and precisely: collection, recording, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data is subjected to both paper and electronic and/or automated processing. The Data Controller will process personal data for the time necessary to fulfill the purposes for which they were collected and related legal obligations.

Scope of treatment

The data is processed by internal subjects duly authorized and trained pursuant to Article 29 of the GDPR. It is also possible to request the scope of communication of personal data, obtaining precise information on any external parties who operate as independent data controllers or data controllers (consultants, technicians, banking institutions, transporters, etc.).

Data transfer

The “Data Controller” may modify, without the Customer’s consent, the location or geographical area in which the data subject’s data are stored, guaranteeing in any case to remain within the territory of the European Union. The sub-suppliers of the “Data Controller” within the European Union are authorized to process the data of the interested party in the context of the Services provided and only on the basis of necessity for the performance of such services.

Rights of the interested party

In your capacity as an interested party, you have the rights referred to in the art. 7 Privacy Code and art. 15 GDPR and precisely the rights of:

• Obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
• Obtain indication of: a) the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the owner, managers and representative designated pursuant to art. 5, paragraph 2 Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representatives in the territory of the State, managers or agents;
• Obtain:
  • updating, rectification or, when interested, integration of data;
  • the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
  • the certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves a use of means that is manifestly disproportionate to the protected right;
• Object, in whole or in part:
  • for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
• to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator through and -mail and/or through traditional marketing methods via telephone and/or paper mail. Please note that the interested party’s right of opposition, set out in the previous point b), for direct marketing purposes using automated methods, extends to traditional ones and that in any case the possibility for the interested party to exercise the right of opposition also remains only partially. Therefore, the interested party can decide to receive only communications via traditional methods or only automated communications or neither of the two types of communication.

Where applicable, you also have the rights referred to in the articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limit processing, right to data portability, right to object), as well as the right to complain to the Guarantor Authority.

Methods of exercising rights

You may at any time exercise your rights in one of the following ways:

• a registered letter with return receipt to Verxo S.r.l. – Via Rieti 4 – 25125 Brescia (Italy);
• an email to privacy@verxo.it