NOTA INFORMATIVA SOBRE LA PRIVACIDAD

PRIVACY POLICY CUSTOMERS/SUPPLIERS

This policy is provided to customers/suppliers of AIRPROTECH SRL pursuant to Article 13 of GDPR 679/2016 – “European Regulation on the protection of personal data” (hereinafter the “Regulation”).

1) DATA CONTROLLER

The Data Controller is Airprotech S.r.l., Tax ID No. 11520580157 – VAT No. 03134260961, with registered office in V.Fratelli Bronzetti 10/12 – 20013 Magenta (MI) (hereinafter the “Company”)

2) PERSONAL DATA

Personal data means any information relating to you and attributable to you, including those indicated in Article 9 of the Regulation, referred to as “special categories of personal data,” such as information relating to health, racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership.

Specifically, the processing will concern data relating to natural persons involved in the conclusion and execution of the contractual relationship; such as those of the legal representative of the customer/supplier who signs the contract in the name and on behalf of the latter, the employees and consultants of the customer/supplier involved in the activities referred to in the contract, as well as any other information necessary for the execution of the contract and/or the provision of the service(s).

3) PURPOSE OF THE PROCESSING

The data will be processed for the following purposes:

- performance of the contractual services detailed in the contract signed between the parties;

- compliance with legal obligations of an administrative, accounting, civil, fiscal, regulatory, EU, and non-EU nature;

- customer/supplier management (personal data management, contract management, orders, arrivals, invoices, selections in relation to the Company's needs);

- management of disputes (breaches of contract, warnings, settlements, debt collection, arbitration, legal disputes);

The data of natural persons acting in the name and on behalf of the customer/supplier will be processed for:

- forwarding communications of various kinds and by various means of communication (telephone, mobile phone, email, fax, paper mail);

- formulating requests or fulfilling requests and proposals received;

- preparing accounting records and related legal and contractual obligations;

- exchange of information for the purpose of executing the contractual relationship, including pre- and post-contractual activities.

4) LEGAL BASIS FOR PROCESSING

The processing of Data for the purposes indicated in point 3) above is based on the execution of the contract, as well as on the fulfillment of the obligations to which the Company is subject.

5) RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

The Data will not be disclosed but will be communicated to specific individuals. Based on their roles and job duties, internal and external personnel will be authorized to process the data within the limits of their responsibilities and in accordance with the instructions given to them by the Data Controller.

The same data may be communicated to the Munters AB group, to persons authorized to access it by law, regulations, and rules, to mail delivery companies, banks and credit institutions, law firms, insurance companies, professional firms/companies providing accounting, tax, and fiscal services. The updated list of authorized persons and data processors is available at the Data Controller's registered office.

6) DATA RETENTION PERIOD

Your Data will be retained for the entire duration of the employment relationship and, in any case, until the rights arising from the relationship have expired, without prejudice to compliance with any retention obligations required by law.

7) RIGHTS OF THE DATA SUBJECT

With regard to your Data, you have the right to request from the Company, in the manner indicated in the Regulation:

- access, in the cases provided for (Article 15)

- the rectification of inaccurate Data and the integration of incomplete Data (Article 16)

- the deletion of Data for the reasons provided for (Article 17), such as when they are no longer necessary for the purposes indicated above or are not processed in accordance with the Regulation

- the restriction of processing for the cases provided for (Article 18), such as when the accuracy of the Data is contested and it is necessary to verify its correctness

- portability, i.e. the right to receive, in the cases provided for (Article 20), in a structured, commonly used and machine-readable format, the Data and to transmit such Data to another data controller

- objection to processing, in the cases provided for (Article 21).

All the rights listed above may be exercised by contacting us at the email address: info@airprotech.eu or at the contact details indicated in point 1).

8) COMPLAINTS

If you believe that the processing of your Data violates the provisions of the Regulation, you have the right to lodge a complaint with the Data Protection Authority in accordance with Article 77 of the Regulation.

9) NATURE OF THE PROVISION OF DATA

The provision of Data is mandatory and strictly necessary in order to fulfill the legal and contractual obligations inherent in the management of the contract.

Therefore, failure to provide even part of the Data will make it objectively impossible to establish and execute the contract, as well as to correctly perform all the obligations related to it.

10) TRANSFER OF DATA ABROAD

Your Data will be stored at the Company's headquarters and on servers located in the European Union.

However, the Company reserves the right to use cloud services and, in this case, the service providers will be selected from among those recognized as adequate in terms of security by the Commission pursuant to Article 45.3 of the Regulation or who provide adequate guarantees as provided for in Article 46 of the Regulation.

Last update: April 2025

Airprotech srl