Suppliers' Policy

Dear Supplier,

Geda s.r.l. issues this information notice in compliance with European and Italian regulations on the protection of personal data.

For the purposes of this informative note:

• You, if you are a natural person (including sole traders or professionals),are the \'Data Subject\' and your data shall be processed as indicated below; you also have the rights that we illustrate below.
• If you, if you are a legal person (company, entity, etc.),are NOT the \'Data Subject\', your data are NOT Personal Data and the processing thereof is NOT covered by the legislation in question.
• In any case, any of your directors/representatives/employees/collaborators/officials - whose personal data may be incidentally conferred or communicated, having contact with the Controller on your behalf - are \'Data Subjects\' and their data will be processed as indicated below; they will also have the rights illustrated below. You are therefore obliged to communicate this information to such data subjects.

DATA CONTROLLER

The data controller is GEDA S.r.l. with registered office in Via Maestri del Lavoro, 16/18 - 33080 Porcia (PN) P.IVA 01018780930 mail info@gedanextage.com

PURPOSE AND LEGAL BASIS OF THE PROCESSING

The Data Controller processes the Supplier\'s personal data for the purpose of taking pre-contractual measures, fulfilling contractual and regulatory obligations connected with the business relationship, as well as pursuing the legitimate interest of carrying out qualification and/or monitoring processes against the Supplier, managing any litigation and, in general, correctly managing the business relationship.
The legal basis of the processing is the necessity for the pursuit of the aforementioned purposes.

DATA RETENTION PERIOD

The Data Controller will process the Supplier\'s data for the entire duration of the business relationship and, thereafter, for the fulfilment of all obligations connected with or arising from the establishment of the same.

In any case, for technical/organisational reasons, the processing will last for a maximum period of 10 years from the conclusion of the contract.

NATURE OF DATA CONFERMENT AND CONSEQUENCES IN CASE OF REFUSAL

The provision of data is necessary and therefore any refusal to provide such data in whole or in part may make it impossible for the Data Controller to pursue the purposes indicated above.

CATEGORIES OF RECIPIENTS

The Data Controller will not disseminate the data, but intends to disclose them to internal figures authorised to process them on the basis of their respective duties, as well as to credit institutions, business associations and/or organisations, professionals or service companies and public and private bodies, also following inspections and audits.
These recipients, should they process data on behalf of the Controller, will be appointed as data processors by means of a contract or other legal act.

DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION

Personal data will not be transferred either to non-European third countries or to international organisations.

RIGHTS OF DATA SUBJECTS

The data subject has the right to ask the Data Controller to access his/her personal data and to rectify it if it is inaccurate, to delete it or limit its processing if the conditions are met, to object to its processing, and to obtain the portability referred to in Articles 15-20 of European Regulation 679/2016 by sending an email request to info@gedanextage.com

The exercise of the data subject\'s rights may be delayed, limited or excluded in the cases provided for in Article 2-undecies of Legislative Decree 196/03.

RIGHT TO COMPLAIN TO THE SUPERVISORY AUTHORITY

Finally, we remind you that you also have the right to lodge a complaint with the relevant supervisory authority.