Vers. 27/02/2023
Onebra SRL processes your data in compliance with EU Regulation 2016/679 on the protection of personal data (“GDPR”) and other applicable regulations. Please read the following information carefully. In the text below, the term “data subject” refers to you. The Data Controller is at your disposal for any clarification.
Origin of the data – Data subject
Data subjects – The organization’s suppliers (including consultants)
Types of data processed – Personal and contact data, tax identification data, bank reference data, data related to services and payments, payment data.
Purposes of processing – To prepare and execute the contractual relationship, to obtain goods and services for the Controller and pay the corresponding fees, to manage accounting and tax compliance, to comply with any legal obligation.
Data Controller – Onebra SRL Via del Brennero 97 – Trento info@onebra.it
Joint Controller – Not present
Data Protection Officer (DPO) – Not appointed
Representative in the EU – Not appointed
Legal basis for processing – Art. 6(1)(b) GDPR (processing is necessary for the performance of a contract or pre-contractual measures), Art. 6(1)(c) GDPR (processing is necessary for compliance with a legal obligation).
Legitimate interest – Not applied
Data retention period – 10 years (equal to the legal retention period for accounting records).
Potential recipients of the data – Technology service providers, banking institutions, tax and/or accounting consultants and/or auditors, public bodies and authorities, third-party creditors (any recipients may only process the data in the interest of the Controller and for the purposes indicated above).
Transfer of data outside the EU – Data transfer to the following countries is foreseen: USA on the basis of an adequacy decision (Art 45 GDPR).
Your rights – Your rights (available at the link below) can be exercised by contacting the Controller, the Representative, or the DPO by post or e-mail.
Complaints – For any violation of your rights, you can file a complaint with the Garante per la Protezione dei Dati Personali in Rome (the Italian Data Protection Authority) or, alternatively, with the supervisory authority of the place where you are established within the EU.
Provision of data – Necessary: the refusal to provide the data in question may prevent the establishment or continuation of the relationship with the Controller’s organization.
Consent – Not required