Client Privacy Notice

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA – CLIENTS (Articles 13 and 14 of Regulation EU 2016/679)

UPD. 06/09/2026

What does this notice cover?

This notice is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and applies to personal data collected by Anemocyte S.r.l., with its registered office at Via Roberto Lepetit, 34, Gerenzano (VA) – in its capacity as data controller (hereinafter, the “Controller”, “we” or “our”, as the case may be) – relating to you and/or your business (where the data relating to it falls within the definition of “personal data” under the applicable data protection legislation) (hereinafter the “Client”) and to its legal representatives, employees, contractors and contact persons in general, within the framework of the contractual relationship with us.

It is understood that it is the Client’s responsibility to inform its legal representatives, employees, collaborators and contact persons in general of the processing of personal data as set out in this notice and to obtain their consent, where necessary.

What categories of personal data do we collect?

We may collect the following categories of personal data:

identification data such as first name, surname, date and place of birth, address(es), information contained on identity documents, tax code and VAT number;
contact details such as email address(es), telephone number(s) and postal address(es);
information relating to business activities, such as sector of activity and positions held within the company organisation;
commercial information such as financial statements, Chamber of Commerce records, financial reports, and information relating to protested bills or insolvency proceedings;
information relating to orders placed and/or contracts entered into;
payment and invoicing information, such as payment methods used, bank account number, IBAN, and email address for invoicing;
any other information provided voluntarily by the Client.

The provision of personal data is necessary for the purposes listed below; should you fail to provide your personal data, it will be impossible for us to fulfil these purposes.

How do we collect the Client’s personal data?

Most of the data we collect is provided to us by the Client at the time the contract is entered into and during the course of the contractual relationship. In addition, we may also collect the Client’s personal data through third parties (for example, commercial information service providers) or public registers. We do not use any form of fully automated decision-making in relation to the processing of the Client’s personal data.

For what purposes and on what legal basis do we process the Client’s personal data?

The Client’s personal data will be processed for the following purposes:

to enter into and perform the contract to which the Client is a party and to carry out the activities necessary to fulfil the obligations set out in the contract or to take pre-contractual measures at the Client’s request;
to comply with the legal obligations to which we are subject;
to assess the Client’s financial soundness and creditworthiness;
to establish, exercise or defend a right in court or before an administrative body, or in the context of arbitration or conciliation proceedings;
to carry out preparatory activities or activities otherwise connected with the execution of extraordinary transactions such as disposals of business units, acquisitions, mergers and demergers.

The processing of the Client’s personal data for the purpose under (1) does not require the Client’s consent, as it is necessary for the performance of contractual or pre-contractual obligations relating to the contractual relationship, in accordance with Article 6(1)(b) of the GDPR. The processing of the Client’s personal data for the purpose under (2) does not require the Client’s consent, as it is necessary to comply with the legal or regulatory obligations to which we are subject, in accordance with Article 6(1)(c) of the GDPR. The processing of the Client’s personal data for the purposes under (3), (4) and (5) does not require the Client’s consent, as it is necessary for the pursuit of our legitimate interests underlying those purposes, in accordance with Article 6(1)(f) of the GDPR.

How do we process the Client’s personal data?

We implement security measures to protect the Client’s personal data from the risks of destruction, loss or alteration (whether accidental or unlawful) of your personal data, as well as from unauthorised disclosure or access to it.

How long do we retain the Client’s personal data?

Most of the Client’s personal data will, as a rule, be retained for the entire duration of the contractual relationship and for 10 years following its termination. Certain personal data may be retained for a shorter period if the specific purpose for which it was collected has been achieved or no longer applies.

To whom is the Client’s personal data disclosed?

The Client’s personal data may be made accessible to, brought to the attention of or disclosed to the following parties, who will act as persons authorised to the processing, data processors or independent data controllers:

our employees or contractors in any capacity;
employees or collaborators in any capacity of any parent companies, subsidiaries or associated companies;
public or private entities, whether natural or legal persons, which carry out data processing on our behalf or to whom we are required to disclose the Client’s personal data, pursuant to legal or contractual obligations (for example, solicitors, accountants, banks, service providers, judicial and police authorities, etc.);
potential purchasers, should we intend to transfer ownership or control of all or part of our business.

The Client may, at any time, request a list containing the names and contact details of the parties belonging to the aforementioned categories of recipients by contacting us at the postal and email addresses indicated below.

As a general rule, we will not transfer the Client’s personal data outside the European Economic Area (EEA). In the event that any of the parties listed above are based outside the EEA, we will transfer the Client’s personal data – in the absence of adequacy decisions and where none of the derogations set out in Article 49 of the GDPR apply – on the basis of the standard contractual clauses approved by the European Commission by Implementing Decision (EU) 914/2021.

The Client’s rights under data protection legislation

Pursuant to Articles 15 to 21 of the GDPR, the Client has the right to:

be informed of the purposes and methods of the processing of their personal data;
access their personal data;
rectify any personal data that is incomplete, inaccurate or out of date;
obtain the erasure of their personal data;
obtain, in the cases provided for by law, the restriction of the processing of their personal data;
to object, in whole or in part, where permitted by law, to the processing of your personal data;
to obtain, where technically feasible, the portability of your personal data.

The Client may exercise the above rights and request any information regarding the processing of personal data by contacting us at the following addresses:

post: Anemocyte, via R. Lepetit 34, Gerenzano 21040 (VA) – Italy;
e-mail: privacy@anemocyte.com.

Furthermore, the Client has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), should they consider that their rights under the GDPR have been infringed.