SUPPLIER POLICY PRIVACY
The Supplier acknowledges that the provisions of the privacy policy – EU Regulation 2016/679 of the
European Parliament and of the Council of 27 April 2016 on the protection of natural persons with
regard to the processing of personal data, hereinafter the “GDPR” – concern the processing of the
personal data, relating solely to natural persons, acquired and processed by the Customer for the
conclusion and performance of the Agreement and does not include data relating to companies, entities
and associations. For the purposes of this Agreement, the Customer may therefore process personal
data concerning (i) the Supplier, only if it is an individual enterprise or self-employed person, and/or
however (ii) representatives, agents, employees or collaborators of the Supplier.
Pursuant to article 13 of the GDPR, the Supplier declares to be aware that the personal data provided by
them for the conclusion and performance of the Agreement are collected and processed by the
Customer, as Data Controller, exclusively for these purposes and for the related regulatory,
administrative and accounting requirements, using suitable methods and procedures (including
electronic), by specifically appointed internal staff and by external collaborators designated as data
managers or processors. The Supplier acknowledges that, with regard to personal data processed for
the conclusion and performance of this Agreement, the natural person to whom the data refers (i.e. the
data subject) has the right of access, rectification, limitation, cancellation, portability and opposition
(articles 15-22 of the GDPR), as well as the right to complain to the Privacy Guarantor.
The Supplier is responsible for ensuring the lawful use of personal data concerning, for example, any of
its representatives, agents, employees and collaborators, that are communicated to the Customer to
conclude and perform the Agreement and, in particular, the proper fulfilment of the obligations to
inform data subjects and, where necessary, to collect their consent, with regard to the processing of
their personal data by the Company for the aforementioned purposes and within the terms specified
above.