Privacy Notice on personal data processing according to Article 13 GDPR to suppliers

Dear Supplier,
please read carefully this privacy notice on personal data processing according to Article 13 of General Data Protection Regulation No. 679/2016 (hereinafter “GDPR”) that includes the details related to the personal data collected and processed by Van Berkel International S.r.l. in relation to the cooperation and execution of the agreement or business relationship with your company. 

This privacy notice is given to contact personnel belonging to the organizational structure of Your Company and who trades with Van Berkel International S.r.l.

1. Subjects involved in processing activities
1.1. Data Controller
The Data Controller is Van Berkel International S.r.l. with registered office at Oggiona con Santo Stefano (VA), Via Ugo Foscolo n. 22 (Italy), V.A.T. no. 08688960965 (hereinafter the “Data Controller” or “Berkel”) that can be contacted at the following e-mail address:
Recipients of your persona data
• persons authorized by the Data Controller that are committed to/ or under an appropriate statutory obligation of confidentiality;
• subjects delegated and/or appointed by the Data Controller to carry out activities related to the purposes specified below rightly appointed as data processor;
• persons, companies or professional firms that provide assistance to the Data Controller, appointed, where necessary, as data processor;
• subjects, bodies or authorities to whom the communication of your personal data is mandatory pursuant to the provisions of law or orders of the competent authorities;
• third parties involved in the performance of activities strictly related or linked to the conclusion and/or execution of extraordinary transaction;
• other group company.

Your personal data will not be transferred outside the European Economic Area.

2. Personal data processed
The Data Controller collects and processes the personal contact details (e.g. name, surname, e-mail address, telephone number) necessary to pursue and fulfil the obligations set forth in the agreement and/or the business relationship with Berkel.

3. Purposes and legal basis of the processing activities
Your personal data could be processed by the Data Controller for the following purposes:
a) fulfil any necessary administrative obligation in order to conclude the agreement and/or establish a business relationship;
b) execute the obligations provided by the agreement and/or the business relationship;
c) ensuring compliance with legal obligations, regulations and European regulations;
d) ascertain, exercise or defend a right in judicial proceedings or whenever the judicial authorities exercise their jurisdictional functions;
e) Allowing the Data Controller to conclude a potential merger, transfer of assets, transfer of company or branch of company by disclosing and transferring your personal data to the third party involved.

The legal basis of processing for purposes as per 3 (a) and (b) is the necessity to perform a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract according to art. 6 (1) (b) GDPR.
The legal basis of the processing as per 3 (c) is the necessity to comply with a legal obligation to which the Data Controller is subject according to art. 6 (1) (c) GDPR.

The legal basis of the processing as per 3 (d) and (e) is the legitimate interests pursued by the Data Controller according to art. 6 (1) (f) GDPR.

4. Retention period
Your personal data will be stored by paper and electronic means and for the period strictly necessary to pursue the purposes as per paragraph 3 above.
Your personal data will be processed in order to perform the agreement and/or the business relationship with Berkel, without prejudice to the legal obligations to which the Company is subject, beyond the time allowed by Italian law to protect its interests from possible complaints.
With reference to the processing activities carried out for the purposes as per 3 (d) and (e) your personal data will be processed for the period strictly necessary to allow the Data Controller to verify, exercise or defend a right before a court or whenever the authorities exercise their jurisdictional functions and / or carry out any extraordinary transactions involving Berkel and related activities.

5. Exercise of your rights
You have the right, at any time, to request to the Data Controller access to, rectification, erasure, to object to relevant processing activity. According to art. 18 GDPR you are entitled to ask for restriction of the processing concerning your personal data or and to receive in a structured, commonly used and machine-readable format the personal data concerning you, in accordance with art. 20 GDPR.
Requests to exercise your rights must be sent to the following address:
In any case, pursuant to the Applicable Law, you have the right to lodge a complaint with the relevant supervisory authority (the Italian “Garante per la protezione dei dati”) if you believe that the processing of your Personal Data is against the applicable law.

6. Privacy notice update
This Privacy Policy has been published in March 2019 and may change over time, also in relation to the entry into force of new sector regulations, the updating or provision of new services or technological innovations. Berkel will inform you of such changes as soon as they are introduced and they will be binding as soon as they are published on the websites. Berkel invites you, therefore, to regularly visit this section to become aware of the most recent and updated version of this Privacy Policy in order to be always updated on the data collected and on the use made of it by the Data Controller.