Supplier privacy notice
INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA – SUPPLIERS (Articles 13 and 14 of Regulation EU 2016/679)
UPD. 06/09/2026
What does this notice cover?
This notice is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter the “GDPR”) and applies to personal data processed by Anemocyte S.r.l., with its registered office at Via Roberto Lepetit, 34, Gerenzano (VA) – in its capacity as data controller (hereinafter the “Controller”, “we”, “us” or “our”, as appropriate) – relating to you and/or your business (where the data relating to it falls within the definition of “personal data” under the applicable data protection legislation) (hereinafter the “Supplier”) and to its legal representatives, employees, collaborators and contact persons in general, within the framework of the contractual relationship with us.
It is understood that it is the Supplier’s responsibility to inform its legal representatives, employees, collaborators and contact persons in general of the processing of personal data as set out in this notice and to obtain their consent, where necessary.
What categories of personal data do we collect?
- identification data such as first name, surname, date and place of birth, address(es), information contained on identity documents, tax code and VAT number;
- contact details such as email address(es), telephone number(s) and postal address(es);
- information relating to professional or business activities, such as membership of professional registers, sector of activity, positions held within the company, and goods and services offered;
- commercial information such as financial statements, Chamber of Commerce records, financial reports, information relating to protested bills or insolvency proceedings, and other information relevant to assessing technical suitability, reputation or compliance with applicable legislation;
- information relating to orders placed and/or contracts entered into;
- payment and invoicing information, such as payment methods, bank account number, IBAN, and email address for invoicing;
- any other information provided voluntarily by the Supplier.
How do we collect the Supplier’s personal data?
For what purposes and on what legal basis do we process the Supplier’s personal data?
The Supplier’s personal data will be processed for the following purposes:
- to enter into and perform the contract to which the Supplier is a party and to carry out the activities necessary to fulfil the obligations under the contract or to take pre-contractual measures at the Supplier’s request;
- to comply with the legal obligations to which we are subject;
- to assess the Supplier’s technical, economic and financial suitability and to verify that the Supplier meets the necessary requirements for the purposes of the Supplier’s qualification or its renewal;
- to establish, exercise or defend a right in court or before an administrative body, or in the context of arbitration or conciliation proceedings;
- to carry out preparatory activities or activities otherwise connected with the execution of extraordinary transactions such as disposals of business units, acquisitions, mergers and demergers.
The processing of the Supplier’s personal data for the purpose under (1) does not require the Supplier’s consent, as it is necessary for the fulfilment of contractual or pre-contractual obligations relating to the contractual relationship, in accordance with Article 6(1)(b) of the GDPR. The processing of the Supplier’s personal data for the purpose under (2) does not require the Supplier’s consent, as it is necessary to comply with the legal obligations to which we are subject, in accordance with Article 6(1)(c) of the GDPR. The processing of the Supplier’s personal data for the purposes under (3), (4) and (5) does not require the Supplier’s consent, as it is necessary for the pursuit of our legitimate interests underlying those purposes, in accordance with Article 6(1)(f) of the GDPR.
How do we process the Supplier’s personal data?
We implement security measures to protect the Supplier’s personal data from the risks of destruction, loss or alteration (whether accidental or unlawful) of personal data, as well as unauthorised disclosure of or access to such data.
How long do we retain the Supplier’s personal data
Most of the Supplier’s personal data will, as a rule, be retained for the entire duration of the contractual relationship and for 10 years following its termination. Certain data may be retained for a shorter period if the specific purpose for which it was collected has been fulfilled or no longer applies.
To whom is the Supplier’s personal data disclosed?
our employees or contractors in any capacity;
employees or collaborators in any capacity of any parent companies, subsidiaries or associated companies;
public or private entities, whether natural or legal persons, who carry out processing activities on our behalf or to whom we are required to disclose the Supplier’s personal data pursuant to legal or contractual obligations (for example, solicitors, accountants, banks, service providers, judicial and police authorities, etc.);
potential purchasers, should we intend to transfer ownership or control of all or part of our company.
As a general rule, we will not transfer the Supplier’s personal data outside the European Economic Area (EEA). In the event that any of the entities listed above are based outside the EEA, we will transfer the Supplier’s personal data – in the absence of adequacy decisions and where none of the derogations set out in Article 49 of the GDPR apply – on the basis of the standard contractual clauses approved by the European Commission by Implementing Decision (EU) 914/2021.
The Supplier’s rights under data protection legislation
- be informed of the purposes and methods of the processing of their personal data;
- access their personal data;
- rectify any personal data that is incomplete, inaccurate or out of date;
- obtain the erasure of their personal data;
- obtain, in the cases provided for by law, the restriction of the processing of their personal data;
- to object, in whole or in part, where permitted by law, to the processing of your personal data;
- to obtain, where technically feasible, the portability of your personal data.
You may exercise the above rights and request any information regarding the processing of your personal data by contacting us at the following addresses:
- post: Anemocyte, via R. Lepetit 34, Gerenzano 21040 (VA) – Italy;
- e-mail: privacy@anemocyte.com.
Furthermore, the Supplier has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they consider that their rights under the GDPR have been infringed.
