(Articles 13 and 14 of EU Regulation 2016/679 GDPR)

We inform clients and suppliers that the personal data collected within the professional relationships established with the undersigned Data Controller are managed in accordance with this document.

1. Data Controller

The Data Controller of the personal data is the company IRS Italian Remote Sensing S.r.l., headquartered at Via Vittorio Emanuele II No. 93, Montefalcone nel Sannio (CB), ZIP Code 86033, represented by the Legal Representative.

2. Purpose and Object of Processing

Personal data are processed exclusively for purposes strictly related to the following activities:

1. Concluding contracts and executing them;
2. Complying with obligations imposed on the Data Controller by laws, regulations, EU norms, and orders of public authorities;
3. Exercising the Data Controller’s rights, such as the right to defense in legal proceedings.

Under Articles 13 and 14 of EU Regulation 679/2016, if the Data Controller intends to process personal data for purposes other than those for which they were collected, appropriate information will be provided, and specific consent will be requested prior to such processing.

3. Legal Basis of Processing

The legal basis for the processing of data can thus be identified as follows:

• The necessity to execute a contract or pre-contractual measures requested by the data subject, for the purpose indicated in point a) above;
• The necessity to comply with legal obligations, for the purpose indicated in point b) above;
• The legitimate interest of the Data Controller, for the purpose indicated in point c) above.

4. Principles and Methods of Processing

Processing is carried out using manual, IT, and telematic tools, respecting the principles of personal data protection, with organizational and processing logics strictly correlated to the purposes and ensuring security, integrity, and confidentiality. No data profiling is conducted, nor are automated decisions made.

5. Transfer Outside the EU

Processing primarily takes place within the EU. Any transfer outside the EU will be conducted with appropriate safeguards.

6. Data Communication and Disclosure

Data are processed exclusively for the above-mentioned purposes by internal staff, formally appointed and instructed to ensure processing adheres to the principles and confidentiality standards. Data may be communicated to professionals and companies performing technical-organizational tasks, control, auditing, and certification of activities on behalf of the Data Controller. To the extent strictly necessary for contract execution or legal compliance, certain personal information will be communicated to public authorities, accounting auditors, credit institutions, insurance companies, and financial entities.

7. Retention Period

Data are processed until the purposes for which they are collected are achieved; retention is limited to the period imposed by laws or regulations. Any complaints, disputes, or ongoing actions may extend the retention period to the extent necessary to defend or assert the Data Controller’s rights. Data processed based on consent are retained until consent is withdrawn. For details on how to withdraw consent, refer to the following section.

8. Rights of the Data Subject and Methods of Exercise

Pursuant to Articles 15 et seq. of EU Regulation 2016/679, data subjects (clients/suppliers) have the right, free of charge and without formal constraints, to:

• Access their personal data, rectify them, and, in applicable cases, delete them or limit processing;
• Object to processing when it is based on the legitimate interest of the Data Controller;
• Receive their personal data in a structured, commonly used, and machine-readable format, and to transmit such data to another Data Controller without hindrance, where technically feasible.

Clients/suppliers are reminded of their right to withdraw consent at any time. Any rectifications, deletions, or limitations will be communicated to all recipients of the data unless this proves impossible or involves disproportionate effort. For any questions or concerns related to data processing or to exercise any of the aforementioned rights, please write to “IRS Italian Remote Sensing S.r.l. Via Vittorio Emanuele II No. 93, 86033 Montefalcone nel Sannio (CB),” or send an email to: [email protected].

If clients/suppliers believe their rights have not been protected, without prejudice to other legal actions, they may file a complaint with the Data Protection Authority by following the procedure available at the following link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/

DOWNLOAD AS PDF