PRIVACY POLICY SUPPLIER
PRIVACY POLICY SUPPLIER STONEFLY S.P.A.
Dear Supplier, Stonefly S.p.A., in its capacity as the data controller (hereinafter referred to as the "Data Controller"), issues this notice to the Data Subject in compliance with European and Italian regulations concerning data protection.
The Data Controller has appointed a Data Protection Officer (DPO), who may be contacted by the Data Subject via email at the following address: dpo@stonefly.it.
Purpose and legal basis of processing
The Data Controller will process the personal data collected to take pre-contractual measures, fulfill contractual and regulatory obligations related to the business relationship, as well as to pursue the legitimate interest in carrying out qualification and/or monitoring processes against it, to manage any litigation and, in general, to properly manage the business relationship.
The legal basis is the need to pursue the aforementioned purpose.
Data retention period
The Data Controller will process the data for the entire duration of the supply contract and, subsequently, for the performance of any and all duties connected with or arising from the establishment of the same, for the period required by the law and based on the prescription of the rights arising from the business relationship, subject to further preservation for the time necessary for the settlement (however reached) of any disputes that may have arisen.
Nature of data provision and consequences in case of refusal of consent
The provision of data is optional, but failure to supply it may make it impossible to obtain the requested service.
Scope of data communication and categories of recipient
The Data Controller will not disclose the data, which will be communicated exclusively to internal personnel authorised to process it according to their respective duties, as well as to group company, credit institutions, business association or other third parties that carry out professionals or service companies, public and private entities, including as a result of inspections and audits. Such recipients, in case of process of data on behalf of Data Controller, will be, therefore, appointed as data processors under the terms of a specific contract or other legal document.
Transfer of data to a third country and/or international organisation
The personal data of the Data Subjects will not be transferred to non-European third Countries nor to international organisation.
Data Subjects’ Rights
The Data Subject has the right to unsubscribe from this service at any time and may also ask the Data Controller to access his/her personal data and rectify it if inaccurate, to erase it or restrict its processing if the conditions are met, and to obtain its portability.
To exercise his/her rights, the Data Subject may use the form available here and forward it to the Data Controller at the following address: legalmail@lottosportitalia.com.
The Data Subject also has the right to lodge a complaint with the relevant supervisory authority, the Italian Data Protection Authority (www.garanteprivacy.it).
Updated, 01st may, 2023.
