Privacy Notice

Notice concerning the processing of Personal Data (Art. 13 of the GDPR)
FOR CUSTOMERS (CONTRACT EXECUTION)

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter Regulation or GDPR), the company ARS TECH S.r.l., hereinafter “Controller”, “Employer”, “We”, “Our”, “Ours”, as the data controller, provides you, as a Customer, with information regarding the processing of your personal data.
1. Identity and contact details of the Data Controller
The Data Controller is the company A.R.S. TECH S.R.L., located in Controguerra (TE), 6010 Via Vallecupa 25, tel. 0861/1828018, VAT number 02088620683, email privacy@ars-tech.com PEC ars-tech@legalmail.it.
2. Nature of the processed data
The data subject to processing relates to your internal contacts responsible for managing the business relationship with us (conclusion and execution of the contract) through paper and electronic correspondence, on-site visits, participation in events and fairs, information requests, etc. We also process common personal data (address, residence, date and place of birth, identity document, tax code, etc.) of your representatives, managers, and partners involved in managing the relationship between the parties in the execution of commercial and business relationships.
The processed personal data are common in nature, such as name, surname, address, fixed and mobile telephone number, email address, data concerning duties, roles, assignments, work experiences of your representatives (employees and collaborators involved in the commercial relationship). The processing of special categories of personal data is excluded.
3. Purposes of processing and legal bases
Personal data is processed for the following purposes:
A. contract execution and/or pre-contractual measures;
B. administrative and accounting obligations provided by law regarding the contractual relationship between the parties;
C. management of complaints and any legal disputes arising from the contract’s execution;
D. account management and promotion of secure and reliable services on the www.ars-tech.com portal;
The legal basis for the processing referred to in letter A is the contract between the parties pursuant to Article 6.1.b of the Regulation. The legal basis for the processing referred to in letter B is the legal obligation pursuant to Article 6.1.c of the Regulation. The legal basis for the processing referred to in letters C-D is our legitimate interest pursuant to Article 6.1.f of the Regulation.
4. Mandatory or optional nature of data provision and consequences of refusal to provide
The provision of personal data for the purposes mentioned in the previous section 3 (“Purposes of Processing and Legal Bases”) is necessary to implement pre-contractual/contractual measures between us and your company (or the Customer of Ars Tech S.r.l.) and to allow mutual fulfillment of the resulting obligations, as well as to allow us to fulfill legal obligations and/or pursue our legitimate interest in carrying out business activities. Therefore, your refusal to provide them makes it impossible to conclude pre-contractual/contractual measures between us and your company.
5. Recipients or categories of recipients of the data
Personal data is accessible, within the Departments involved in activities related to Customers (Administration & Finance, Technical & Commercial Management, IT, Prototyping, etc.), to our managers, employees, and collaborators specifically designated to perform specific tasks and/or functions as authorized/appointed, to external collaborators and our external service providers, designated data processors, to whom specific written instructions have been given, to the extent strictly necessary for the pursuit of the purposes referred to in section 3 (“Purposes of Processing and Legal Bases”). The processed data may, for example, be communicated to third parties for purposes such as:

– postal services or other couriers for mail delivery;
– transport companies for the shipment of goods;
– banks/financial institutions for the management of collections and payments;
– business consultants and freelance professionals collaborating with us (e.g., accountants, individuals responsible for auditing the balance sheet and administrative, tax, and contractual consultants);
– insurance companies;
– marketing and newsletter sending;
– public authorities to fulfill regulatory obligations.

The list of external data processors designated by us is available upon request from the data subject. For mere business needs, some personal Customer data may be communicated to companies belonging to our corporate Group, in accordance with Consideration no. 48 of the Regulation.
6. Data retention period
The processed personal data is kept for the time strictly necessary to achieve the purposes outlined in section 3 (“Purposes of Processing and Legal Bases”). In detail, the retention period of personal data processed for the purposes mentioned in section 3 letters A-B) is ten years from the conclusion of the contract. The retention period of personal data processed for the purposes mentioned in section 3 letters C-D-E corresponds to the statute of limitations for possible legal disputes related to the commercial relationship and/or the services subject to the contract.
7. Transfer of personal data to a Third Country
The processed personal data is stored at our headquarters and its servers (both located in Italy). The data will not be transferred outside the European Economic Area.
8. Processing methods
The personal data collected for the aforementioned purposes will be processed by specifically authorized personnel using automated or non-automated methods. The processing of personal data does not involve the existence of automated decision-making processes, including profiling. We adopt all appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of your personal data.
9. Rights of the data subjects
The data subject, where applicable, has the right to exercise the following rights:
– receive confirmation of the existence of personal data and request access (Article 15 Regulation)
– rectify, modify, and/or correct personal data (Article 16 Regulation)
– request deletion, transformation into anonymous form, or blocking of data processed unlawfully (Article 17 Regulation)
– limitation of processing (Article 18 Regulation)
– receive notification in case of rectification, deletion, or limitation (Article 19 Regulation)
– receive a copy of the data and request transmission to another data controller (Article 20 Regulation)
To exercise one or more of the rights listed above, you can send us a specific request by post or email, following the methods indicated on the website of the Privacy Guarantor in the section “How to protect your rights” (www.garanteprivacy.it).
10. Right to object
According to Article 21 of the Regulation, you have the right to object at any time, for reasons related to your particular situation, to the processing of personal data based on Article 6, paragraph 1, letter f), including profiling.
11. Right to lodge a complaint
Data subjects who believe that the processing of their personal data is carried out in violation of the Regulation and the Code have the right to lodge a complaint with the Guarantor (Article 77 Regulation), or alternatively, to take appropriate legal action (Article 79 Regulation).
The Data Controller
ARS TECH S.r.l.
Last update: May 2018

Notice concerning the processing of Personal Data (Art. 13 of the GDPR)
SUPPLIERS AND CONSULTANTS

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter Regulation or GDPR), the company ARS TECH S.r.l., hereinafter “Controller,” “Employer,” “We,” “Our,” as the data controller, provides you, as a Client, with information regarding the processing of your personal data.
1. Identity and contact details of the Data Controller
The Data Controller is the company A.R.S. TECH S.R.L., located in Controguerra (TE), 6010 Via Vallecupa 25, tel. 0861/1828018, VAT number 02088620683, email privacy@ars-tech.com PEC ars-tech@legalmail.it.
2. Nature of the processed data
The data subject to processing concerns your internal contacts responsible for managing the business relationship with us (contract conclusion and execution) through paper and electronic correspondence, site visits, participation in events and fairs, information requests, etc. We also process the personal data of a common nature (residence, domicile, date and place of birth, identity document, tax code, etc.) of your representatives, managers, and partners involved in managing the relationship between the parties in the execution of commercial and business relationships. The processed personal data are of a common nature such as name, surname, address, landline and mobile phone number, email address, data concerning duties, roles, positions, work experiences of your delegates (employees and collaborators involved in the business relationship), bank details, and commercial information of the Supplier. The processing of special categories of personal data is excluded.
3. Purposes of processing and legal bases
Personal data are processed for the following purposes:
A. Contract execution and/or pre-contractual measures;
B. Administrative-accounting obligations required by law concerning the contractual relationship between the parties; C. Handling complaints and any legal disputes arising from contract execution (right of defense);
The legal basis for processing under letter A is the contract between the parties pursuant to Article 6(1)(b) of the Regulation. The legal basis for processing under letter B is the legal obligation pursuant to Article 6(1)(c) of the Regulation. The legal basis for the processing under letter C is our legitimate interest pursuant to Article 6(1)(f) of the Regulation.
4. Mandatory or optional nature of data provision and consequences of any refusal to provide
The provision of personal data for the purposes outlined in the preceding section 3 (“Purposes of Processing and Legal Bases”) is necessary to execute pre-contractual/contractual measures between us and your company (or the Supplier of Ars Tech S.r.l.) and to enable mutual compliance with the resulting obligations, as well as to allow us to comply with legal obligations and/or pursue our legitimate interest in carrying out business activities. Therefore, your possible refusal to provide such data will make it impossible to conclude pre-contractual/contractual measures between us and your company.
5. Recipients or categories of recipients of the data
Personal data are accessible, within the departments involved in activities related to Suppliers (Administration & Finance, Technical & Commercial Management, IT, Infrastructure Management, Production, Purchasing, etc.), to our managers, employees, and specifically designated collaborators for the performance of specific tasks and/or functions as authorized/appointed, to external collaborators, and to our external service providers, designated data processors, to whom specific written instructions have been given, to the extent strictly necessary to achieve the purposes outlined in section 3 (“Purposes of Processing and Legal Bases”). Processed data may, for example, be disclosed to third parties for purposes such as:

– banks/financial institutions for managing collections and payments;
– business consultants and freelancers collaborating with us (e.g., accountants, subjects appointed for auditing the balance sheet, and administrative, tax, and contractual consultants);
– insurance companies;

The list of external data processors designated by us is available upon request by the data subject.
6. Data retention period
The processed personal data are retained for the time strictly necessary to achieve the purposes outlined in section 3 (“Purposes of Processing and Legal Bases”). In detail, the retention period of personal data processed for the purposes under section 3 letters A-B) is ten years from the end of the contract. The retention period of personal data processed for the purposes under section 3 letter C corresponds to the limitation period for possible judicial disputes related to the commercial relationship and/or the services subject to the contract.
7. Transfer of personal data to a Third Country
The processed personal data are stored at our headquarters and its servers (both located in Italy). The data will not be transferred outside the European Economic Area.
8. Processing methods
The personal data collected for the above-mentioned purposes will be processed by specifically authorized personnel using automated or non-automated methods. The processing of personal data does not involve the existence of automated decision-making processes, including profiling. We adopt all appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of your personal data.
9. Rights of the data subjects
The data subject, where applicable, has the right to exercise the following rights:
– receive confirmation of the existence of personal data and request access (Article 15 Regulation)
– rectify, modify, and/or correct personal data (Article 16 Regulation)
– request deletion, transformation into anonymous form, or blocking of data processed unlawfully (Article 17 Regulation)
– limitation of processing (Article 18 Regulation)
– receive notification in case of rectification, deletion, or limitation (Article 19 Regulation)
– receive a copy of the data and request transmission to another data controller (Article 20 Regulation)
To exercise one or more of the rights listed above, you can send us a specific request by post or email, following the methods indicated on the website of the Privacy Guarantor in the section “How to protect your rights” (www.garanteprivacy.it).
10. Right to object
According to Article 21 of the Regulation, you have the right to object at any time, for reasons related to your particular situation, to the processing of personal data based on Article 6(1)(f), including profiling.
11. Right to lodge a complaint
Data subjects who believe that the processing of their personal data is carried out in violation of the Regulation and the Code have the right to lodge a complaint with the Guarantor (Article 77 Regulation), or alternatively, to take appropriate legal action (Article 79 Regulation).
The Data Controller
ARS TECH S.r.l.
Last update: May 2018

Notice concerning the processing of Personal Data (Art. 13 of the GDPR)
STAFF SELECTION PROCESS

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter Regulation), the company ARS TECH S.r.l., hereinafter “Controller”, “We”, “Our”, as the data controller, provides you with information regarding the processing of your personal data.
1. Identity and contact details of the Data Controller
The Data Controller is the company ARS TECH S.R.L., located in Controguerra (TE), 6010 Via Vallecupa 25, tel. 0861/1828018, VAT number 02088620683, email privacy@ars-tech.com PEC ars-tech@legalmail.it.
2. Nature of the processed data
The data subject to processing includes the following: A. Personal data, general information, address and other contacts, tax code, education, specializations, work experiences, and any other information necessary for the evaluation and selection process of personnel (curriculum vitae, cover letter); B. Any data suitable for detecting health status, collected in reference to membership in protected categories or suitability for certain tasks. In this regard, it is recommended to communicate or include in the CV only information relevant to the selection purpose, limiting health-related information to what is strictly necessary to inform the controller about membership in protected categories.
3. Purposes of processing and legal bases
The processing of personal data takes place within the framework of the selection process to which the data subject has adhered or promoted by sending a spontaneous curriculum vitae, in order to enable the controller to identify individuals to be included in its staff or in controlled or affiliated companies, and to evaluate whether they are in line with the sought profiles, to then proceed, if necessary, with the signing of the employment contract.
Legal basis: performance of pre-contractual measures at the request of the data subject (Article 6(1)(b) Regulation). In the case of personal data falling under letter B of paragraph 2, the legal basis is Article 9(2)(b) Regulation as well as the Guarantor’s Prescriptions for the protection of personal data (authorization no. 01/2016).
4. Mandatory or optional nature of data provision and consequences of refusal to provide
The provision of requested data is optional; however, failure to provide data will result in the data subject’s inability to participate in the staff selection process initiated by the Controller.
5. Recipients or categories of recipients of the data
Subject to communications made to comply with legal and contractual obligations, all collected and processed data may be communicated, exclusively for the above-mentioned purposes, to external consultants working on behalf of the Controller within the scope of the personnel evaluation and selection process. Personal data is not subject to dissemination.
6. Data retention period
Data retention following the conclusion of the personnel evaluation and selection process will not exceed the time necessary to fulfill the obligations and purposes set out in paragraph 3, with gradual deletion of data related to specific purposes no longer pursued. Unless the procedure concludes with hiring, data is deleted within 6 months from the end of the selection.
7. Transfer of personal data to a Third Country
The processing activity takes place within the territory of the European Union, and there is no intention to transfer personal data to a country outside the European Union or to an international organization.
8. Processing methods
The personal data collected for the above-mentioned purposes will be processed by specifically authorized personnel using digital (section “Career” of our website) or analogical methods. The processing of your personal data does not involve the existence of automated decision-making processes, including profiling.
9. Rights of the data subjects
The data subject, where applicable, has the right to exercise the following rights:
– receive confirmation of the existence of personal data and request access (Article 15 Regulation)
– rectify, modify, and/or correct personal data (Article 16 Regulation)
– request deletion, transformation into anonymous form, or blocking of data processed unlawfully (Article 17 Regulation)
– limitation of processing (Article 18 Regulation)
– receive notification in case of rectification, deletion, or limitation (Article 19 Regulation)
– receive a copy of the data and request transmission to another data controller (Article 20 Regulation)
To exercise one or more of the rights listed above, you can send us a specific request by post or email, following the methods indicated on the website of the Privacy Guarantor in the section “How to protect your rights” (www.garanteprivacy.it).
10. Right to object
According to Article 21 of the Regulation, you have the right to object at any time, for reasons related to your particular situation, to the processing of personal data based on Article 6(1)(f), including profiling.
11. Right to lodge a complaint
Data subjects who believe that the processing of their personal data is carried out in violation of the Regulation and the Code have the right to lodge a complaint with the Guarantor (Article 77 Regulation), or alternatively, to take appropriate legal action (Article 79 Regulation).
The Data Controller
ARS TECH S.r.l.
Last update: May 2018