Privacy Policy

Data Subjects: Suppliers and Customers
This privacy notice has been prepared and issued in accordance with and for the purposes of EU Regulation No. 679/2016 (hereinafter, the “GDPR”). In compliance with the aforementioned Regulation, your data will be processed for the following purposes and in the manner described below.

Data Controller
The data controller is Tema Sinergie S.p.A., with registered office at Via Marcello Malpighi No. 120, 48018 Faenza (RA), Tax ID and VAT No. 00970310397, tel. 0546/622663; email: privacy@temasinergie.com.

Definition of Personal Data and Purposes of Processing
Pursuant to Article 4(1) of the GDPR, “personal data” means “any information relating to an identified or identifiable natural person (data subject).” A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.”
Tema Sinergie S.p.A. processes your personal data—collected both at the time of signing the contract and subsequently—for purposes related to the fulfillment of obligations arising from the contractual relationship and related activities:

(i) the conclusion of contracts and/or the provision of related services by Tema Sinergie S.p.A.;
(ii) fulfillment of the relevant contractual obligations and/or customer and/or supplier support;
(iii) compliance with regulatory obligations (in particular, accounting and tax obligations) and related activities.
Should Tema Sinergie S.p.A. intend to use the provided data for purposes other than those indicated,
it will provide appropriate notice.

The processing of personal data necessary to achieve the aforementioned purposes is essential for the proper management of the contractual relationship, and the provision of such data is mandatory to fulfill the purposes indicated above. Failure to provide such data will make it impossible to fulfill the relevant contractual obligations and/or to provide the services offered by Tema Sinergie S.p.A., as well as to comply with legal requirements.

Methods of Data Processing
The processing of personal data will be carried out in accordance with the principles set forth in Article 5 of the GDPR: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Your personal data may be processed both using automated or electronic tools and manually, via paper records. All processing will be carried out in compliance with the aforementioned principles set forth in Article 5 of the GDPR.
The data will be processed exclusively by personnel expressly authorized for this purpose by the Data Controller or the Data Processor pursuant to Article 28 of the GDPR. The updated list of authorized data processors is available at the company’s headquarters and may be requested at: privacy@temasinergie.com.

Data Retention and Disclosure
Your personal data will be stored at the headquarters of Tema Sinergie S.p.A. for the period necessary to fulfill contractual obligations throughout their duration and even after the termination of the relationship, for the period necessary to comply with all legal requirements, including in accordance with the provisions of Article 2220 of the Italian Civil Code.
Your data may be disclosed to third parties to whom the disclosure of your personal data is necessary or functional to the proper management of the contractual relationships established with you and to the proper fulfillment of legal obligations (for example: banks, professional firms) in their capacity as external data processors pursuant to Article 28 of the GDPR.
In the event that your personal data must be transferred to third countries or international organizations for purposes necessary to the proper management of the contractual relationships established with you, Tema Sinergie S.p.A. guarantees that this will take place in full compliance with the provisions contained in Chapter V of the GDPR.

Rights of the Data Subject
As data subjects, you have the right to exercise the rights set forth in Articles 15 and following of the GDPR, specifically the rights to:

- to obtain confirmation of whether your personal data are being processed and, if so, to access such personal data and the following information: the purposes of the processing; the categories of personal data; the recipients to whom the data have been or will be disclosed; the retention period or the criteria used to determine it; information regarding the origin of the data; and the existence of automated decision-making;
– withdraw any consent you have provided pursuant to Article 7(3) of the GDPR;
– lodge a complaint with a supervisory authority pursuant to Article 14(e) and Article 77 of the GDPR;
– obtain the rectification of inaccurate personal data concerning you pursuant to Article 16 of the GDPR; the
erasure of the data pursuant to Article 17 of the GDPR; restriction of processing pursuant to Article 18 of the GDPR; data portability pursuant to Article 20 of the GDPR;
– object, in whole or in part, pursuant to Article 21 of the GDPR, on legitimate grounds, to the processing of personal data concerning you, even if such data is relevant to the purpose of collection; to the processing of personal data concerning you for the purpose of sending advertising or sales material, or for conducting market research or commercial communications.

You may exercise the above rights at any time by sending an email to the following address: privacy@temasinergie.com.