WEBSITE PRIVACY INFORMATION NOTICE
pursuant to Art. 13 of EU Regulation 2016/679 (hereinafter, “GDPR”)
for the processing of personal data of natural persons acting as contact persons of Suppliers,
Consultants and Self-employed Collaborators
1. GENERAL INFORMATION
Suppliers, Consultants and/or Self-employed Collaborators are informed of the following general profiles,
valid for all areas of processing that may involve the reference natural persons (hereinafter also referred
to as “data subjects”, pursuant to Art. 4(1) GDPR):
The Data Controller is GOLDEN CAR S.R.L., with registered office at Via C. Battisti, 66 – 12030
Caramagna P.te (CN), VAT No. 02087210049, email: amministrazione@golden-car.it. The Data
Controller has appointed a Data Protection Officer (“DPO”), in the person of Dr. Valentina Lauria,
reachable at: v.lauria@studiovlauria.it.
- All data of Suppliers, Self-employed Collaborators and/or Consultants, referring directly or
indirectly to natural persons, are processed lawfully, fairly and transparently towards the data
subject, in compliance with the general principles set out in Art. 5 GDPR. - We have adopted specific security measures to prevent data loss, unlawful or incorrect use, and
unauthorized access. - The processing is carried out with IT/telematic means and/or manually and concerns only
“ordinary” data (name/surname/address/telephone/email/tax code/bank details), and does not
include “special categories of data” or “judicial data”.
The processing of data is related to the provision of requested services and/or supply of related products
or services, maintenance and assistance, management of complaints and/or disputes, archiving of
suppliers’ personal data, and use of personal data for communications related to the performance of the
contractual relationship.
2. PURPOSES AND COMMUNICATIONS
2.1 Purpose of processing
The processing of personal data pursues the purpose of entering into and performing contractual
relationships with suppliers, self-employed collaborators and/or consultants, including professional
services (the “Contract”).
Prior to the conclusion of the Contract, processing may pursue pre-contractual purposes, such as
responding to specific requests from the data subject. In any case, personal data are also processed to
allow the Data Controller to comply with legal, regulatory and EU obligations, as well as for civil,
accounting and tax purposes.
Furthermore, personal data may be processed to assert or defend the rights of the Data Controller before
competent authorities (judicial, arbitral, administrative, etc.), whether or not related to the Contract.
2.2 Communication of data
The Data Controller may communicate data to third parties, as independent controllers or processors,
providing ancillary services to the execution of the Contract, to accounting, tax, legal and administrative
consultants, to banking institutions for payment services, to public entities (e.g. withholding tax), to the
shareholders of the Data Controller for their control rights, and to authorized internal personnel. Data will
not be disseminated.
2.3 Legal basis
In all the cases described above, the Data Controller is not required to obtain consent from the data
subject. The legal bases for processing are the Contract, compliance with legal obligations, or the need
to implement measures requested by the data subject. For the assertion or defense of rights in court, the
legal basis is the legitimate interest of the Data Controller
3. DATA TRANSFER AND RETENTION
3.1 Data are stored on the Data Controller’s servers.
3.2 Data will be retained for ten years as required by applicable laws (tax, civil, anti-money laundering).
4. YOUR RIGHTS
• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to object to automated decision-making (Art. 22)
The data subject may exercise their rights by writing to the Data Controller or by email to
amministrazione@golden-car.it, specifying the request and attaching a copy of an identity document.