Dear customer, pursuant to article 13 of Regulation UE 2016/679 (hereafter “GDPR”) we would like to inform you of the following:

1. Purpose and legal basis for data processing
2. ECO Certifications UK Ltd., having freely communicated and acquired your personal data as a result of the activity carried out, will process lawfully and fairly them for the following purposes:
3. fulfilment and execution of contractual and pre-contractual obligations. For this purpose, the legal basis that legitimizes the processing is art. 6, par. 1, letter b) of the GDPR;

keeping and updating administrative accounting and other obligations required by laws, regulations, and circulars on fiscal and administrative accounting matters. For this purpose, the legal basis that legitimizes the processing is art. 6, par. 1, letter c) of the GDPR.

sending newsletters and commercial information, also by other Fincasale group companies. For this purpose, the legal basis that legitimizes the processing is art. 6, par. 1, letter a) of the GDPR.

Methods of data processing and retention times

Your data will be processed, in compliance with the necessary security and confidentiality, through the following methods: direct data collection from the interested party by means of electronic tools (such as e-mail). The treatment will be carried out with or without the aid of electronic and automated tools. The data are processed according to logic strictly related to the purposes highlighted above, for the time necessary and identified by the law (usually 10 years from the termination of the supply relationship) and, in any case, in order to guarantee compliance with the provisions of the same, as well as protection of confidentiality, security, accuracy and relevance of data. The data are not processed by automated decision-making processes, nor are they subject to profiling.

Nature of data provision and consequences of any refusal to answer

The provision of data and the related processing are mandatory in relation to the purposes referred to in points a) and b). Your refusal to provide data for the aforementioned purposes may make it impossible for the writer to carry out the same contractual relationships and legal obligations. The provision of data and its processing is to be considered optional for the purposes referred to in point c).

Data scope of communication and spread

In relation to the purposes indicated, the personal data collected may be communicated to the following subjects or to the following categories of subjects: Judicial Authorities, Financial Administration, Public Security Authorities, Computer and telematic network management companies, Accounting data processing companies and tax obligations, postal service companies, banks and credit institutions in the context of the financial management of the company and companies, bodies, consortia or other organizations, having insurance purposes, companies or credit recovery bodies for the related shares, partners and / or companies belonging to the corporate group Fincasale which carry out administrative, legal and other technical consultants on behalf of the owner. The aforementioned subjects will act as independent data controllers.

Your personal data will not be transferred outside the European Economic Area (EEA).

Rights of the interested party

Pursuant to articles 15-21, the GDPR guarantees you the right to access the data concerning you at any time and to obtain a copy, to rectify and integrate them if inaccurate or incomplete, to cancel them or limit their processing where the conditions are met, to oppose their processing for reasons related to your particular situation, to request the portability of the data provided when processed in an automated way on the basis of your consent or for the execution of the contract. You also have the right to withdraw your consent, where required, without prejudice to the lawfulness of the processing based on the consent given before the revocation. You can exercise your rights at no cost by writing to the following e-mail address: info@ecocertifications.co.uk. Finally, your right to contact the Privacy Guarantor remains unaffected, also by submitting a complaint, where deemed necessary, for the protection of your personal data and your rights.

Processing of personal data owner and data protection officer

The data controller is ECO Certifications UK Ltd. with registered office in c/o Fidlaw Ltd Portman House – 2 Portman Street London – England W1H 6DU, in the person of its pro-tempore legal representative. The data controller has not appointed the Data Protection Officer as it is exempted pursuant to article 37 of the Regulation.

Data holder: Serena Farina

Place and date: Faenza 05.09.2022