Supplier Information

INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR SUPPLIERS

ai sensi dell’art. 13-14 del Regolamento UE 2016/679

TITOLARE DEL TRATTAMENTO

Azienda Agricola Madre Terra S.r.l. (anche denominata “AGRITURISMO LE MACINE”) è il Titolare del trattamento dei dati personali trattati.

La sede legale è in Contrada Cerrano 36 – 64028 Silvi (THE), P. Iva 02215160678, Cod. Fisc. 02215160678 e per tutti gli aspetti privacy è possibile contattare il seguente indirizzo email: info@agriturismolemacine.it, ovvero il recapito telefonico tel. +39 0859354033.

Il sito web istituzionale ha come indirizzo il seguente: https://www.agriturismolemacine.it/

DESCRIZIONE DEL TRATTAMENTO E CATEGORIE DEGLI INTERESSATI

AGRITURISMO LE MACINE informs that the personal data acquired in the context of negotiations, for the conclusion and execution of relationships with suppliers will be processed in compliance with EU Regulation 2016/679 e della normativa nazionale applicabile, secondo principi di liceità, correttezza, trasparenza, pertinenza e minimizzazione, adottando misure idonee a garantirne la sicurezza e la riservatezza, nonché a tutelare i diritti e le libertà fondamentali degli interessati.

La gestione dei rapporti con i fornitori, costituiti prevalentemente da persone giuridiche, comporta il trattamento dei dati personali delle persone fisiche coinvolte nelle attività commerciali, precontrattuali, contrattuali, amministrative e operative. La presente informativa si applica pertanto sia ai fornitori che operano in qualità di persone fisiche, liberi professionisti o imprenditori individuali, sia alle persone fisiche che agiscono per conto di società, enti o altre organizzazioni fornitrici, quali amministratori, dipendenti, collaboratori, consulenti e referenti commerciali, technical or administrative.

The data processed may include, in particular, identifying and professional data, telephone contacts, email addresses, role or function held within the organization of affiliation and any other information necessary for managing the supply relationship.

Personal data may be collected directly from the data subject, with consequent application of the article 13 del Regolamento UE 2016/679, or be communicated by the company, by the entity or organization of affiliation, by other subjects involved in the contractual relationship or acquired from publicly accessible sources, such as public records, professional registers, institutional or company websites. In these latter cases, this information notice is also provided pursuant to the article 14 del Regolamento UE 2016/679.

The processing is carried out exclusively for purposes connected to the establishment, management, and execution of the supply relationship, as well as for the fulfillment of related administrative, accounting, tax, and regulatory obligations, in compliance with the principles and guarantees provided by the legislation on personal data protection.

TYPES OF DATA COLLECTED AND DATA ORIGIN

The personal data processed are contact details, oltre ad ulteriori informazioni di natura identificativa e economico-finanziaria nel caso di rapporti contrattuali stipulati con persone fisiche. Il trattamento dei dati personali può essere eseguito per tutte le persone fisiche che, in virtù di contratti o collaborazioni stipulati, o anche in via di perfezionamento, si relazionano con soggetti appartenenti ad AGRITURISMO LE MACINE.

Dati Personali raccolti: dati identificativi, telephone contacts, email, professione, coordinate bancarie, dati contabili, fiscali e finanziari, address, certificati di qualità professionali, codice fiscale ed altri numeri di identificazione personale.

Tali dati personali sono forniti dall’interessato in occasione di:

  • visite o telefonate;

  • contatti diretti;

  • ricezione/proposizione di offerte;

  • trasmissioni e transazioni successive all’ordine.

I dati sono in parte raccolti presso l’interessato ed in parte possono essere raccolti presso terzi. I dati possono anche provenire una fonte accessibile al pubblico.

FINALITÀ DEL TRATTAMENTO E BASI GIURIDICHE

I dati personali sono trattati per la selezione e la qualificazione dei fornitori, la gestione delle richieste di preventivo e delle trattative precontrattuali, la stipulazione e l’esecuzione dei contratti di fornitura, la gestione degli ordini, delle consegne, delle prestazioni, delle comunicazioni operative, della fatturazione, dei pagamenti, degli adempimenti amministrativi, contabili e fiscali, nonché per la gestione di eventuali contestazioni e per la tutela dei diritti del Titolare.

Quando l’interessato è un fornitore persona fisica, un libero professionista o un imprenditore individuale, il trattamento necessario alla gestione delle trattative, the performance of the contract or the adoption of pre-contractual measures requested by the data subject is based on Article 6, paragraph 1, letter b), del Regolamento UE 2016/679. This provision applies only when the data subject is personally a party to the contract or requests the adoption of pre-contractual measures.

When personal data of directors, dipendenti, collaboratori, consultants or representatives of a company, of an entity or of a supplier organization are processed, the processing is based on the legitimate interest of the Controller to establish, organize and properly manage the commercial and contractual relationship with the person represented by the data subject, pursuant to Article 6, paragraph 1, letter f), del Regolamento UE 2016/679. The Controller believes that such processing does not prejudice the fundamental rights and freedoms of the data subjects, as far as ordinary professional and contact data used exclusively within the scope of the employment or commercial relationship is concerned.

The processing necessary to fulfill the obligations provided for by civil law, tax, accounting, administrative, pension-related or concerning the traceability of payments is based on Article 6, paragraph 1, letter c), del Regolamento UE 2016/679.

The processing carried out to prevent or manage defaults, disputes, controversies, recover credits or exercise and defend the rights of the Data Controller is based on the legitimate interest of the Data Controller, pursuant to Article 6, paragraph 1, letter f), del Regolamento UE 2016/679.

RECIPIENTS, RESPONSIBLE PARTIES AND AUTHORIZED SUBJECTS

The personal data processed by the Controller are not disclosed, that is, it is not made known to unspecified subjects, in no possible form, including making them available or simply consulting them. They may, instead, be communicated to employees working under the Data Controller, to external subjects who collaborate with it designated as Data Processors or authorized to process as operating under the authority of the Data Controller.

They may also be communicated, within the strictly necessary limits, to the subjects who, for the purpose of fulfilling your requests, must supply goods or carry out services or tasks on behalf of the Controller. Finally, may be communicated to subjects entitled to access them under legal provisions, regulations, community legislation.

In particular, based on the roles and work duties performed, the workers have been authorized to process your personal data, within the limits of their competences and in accordance with the instructions given to them by the Data Controller.

The updated list of Managers can always be requested from the Data Controller.

Resta fermo l’obbligo di AGRITURISMO LE MACINE di comunicare i dati ad Autorità Pubbliche su specifica richiesta.

TRANSFER ABROAD

I dati sono trattati presso le sedi operative del Titolare ed in ogni altro luogo in cui le parti coinvolte nel trattamento siano localizzate, dunque il Titolare del trattamento non trasferisce questi dati personali in paesi terzi o a organizzazioni internazionali.

Tuttavia, si riserva la possibilità di utilizzare servizi in cloud; nel qual caso, i fornitori dei servizi saranno selezionati tra coloro che forniscono garanzie adeguate, così come previsto dall’art. 46 GDPR 2016/679. For the processing of information and data that may eventually be communicated to these subjects, equivalent levels of protection adopted for the processing of personal data of their own employees will be required. In any case, only the data necessary to achieve the intended purposes will be communicated.

DURATION OF PROCESSING

The processing will have a duration not exceeding that necessary for the purposes for which the data were collected. The data will be processed for the entire duration of the established contractual relationship and even afterward, for the fulfillment of all legal obligations, as well as for future commercial purposes.

Even after the termination of the contractual relationship, AGRITURISMO LE MACINE and any other authorized parties may retain your personal data of an administrative-accounting nature – also to comply with legal and regulatory obligations (e.g.. 10 years for tax retention, as well as for defensive purposes of their own or of third parties) or for the fulfillment of specific legal obligations, until the expiration of the retention period applicable by law on a case-by-case basis.

Your data are collected and recorded lawfully and fairly for the purposes indicated above in compliance with the principles and requirements referred to in art. 5 c 1 of the GDPR.

METHODS AND NATURE OF THE PROVIDING

The data are collected and recorded lawfully and fairly for the purposes indicated above in compliance with the principles and provisions referred to in art. 5 par. 1 of the GDPR.

The processing of personal data is carried out using manual tools, IT and telematics personnel with logics strictly related to the purposes themselves and, comunque, in order to ensure their security and confidentiality.

Il conferimento dei dati necessari alla gestione delle trattative, alla stipulazione ed esecuzione del contratto e all’adempimento degli obblighi di legge è necessario. Il mancato conferimento può impedire l’instaurazione o la prosecuzione del rapporto contrattuale, l’esecuzione della fornitura o l’adempimento degli obblighi connessi.

Per i dipendenti, collaboratori e referenti della società fornitrice, il conferimento dei dati avviene normalmente tramite la società o l’organizzazione di appartenenza ed è necessario per consentire lo svolgimento delle comunicazioni e delle attività operative connesse al rapporto di fornitura.

Quando i dati personali non sono raccolti direttamente presso l’interessato, This information is provided within a reasonable time from the acquisition of the data and, comunque, no later than one month, or at the time of the first communication with the data subject or the first communication of the data to another recipient, if such circumstances occur earlier. Article 14 of the GDPR indeed requires that the data subject is also informed about the categories of data processed and their source of origin.

RIGHTS OF THE DATA SUBJECTS

In accordance, within the limits and under the conditions provided for by the legislation on personal data protection regarding the exercise of the Data Subjects' rights (Arts. from 15 at 21 of the GDPR), as far as the processing covered by this notice is concerned, as data subjects, users can exercise certain rights regarding the data processed by the Controller.

In particular, The Data Subject has the right to:

  • Withdrawal of consent at any time (where required)

  • Objection to the processing of their data

  • Access to their Data

  • Verification and correction

  • Restriction of processing

  • Deletion or removal of one's personal data

  • Portability

Furthermore, The data subject has the right to lodge a complaint with the competent Personal Data Protection Authority or take legal action, in case they believe that the processing concerning them violates the GDPR rules, ai sensi dell’art. 77 of the GDPR.

How to exercise your rights

If they wish to request further information on the processing of their personal data or to exercise their rights, they may contact in writing at the email address info@agriturismolemacine.it

also using the specific "Rights Exercise Form”. Requests are filed free of charge and processed by the Data Controller as quickly as possible, in any case within one month.

AUTOMATED PROCESS

In no case, regarding the indicated processing activities, does the Data Controller carry out processing consisting of automated decision-making on personal data of natural persons.

CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users via email and on the Website. The Controller will proceed to collect the consent of the Data Subject again, if necessary.

Last update: 29/07/2026