Information pursuant to and for the purposes of Article 13 and 14 of EU Regulation 2016/679 (“EU Regulation”) and of the current national legislation, Legislative Decree 196/2003 and (“Privacy Code”). Pursuant to and for the purposes of articles. 13 and 14 of the European Regulation 2016/679 concerning the protection of personal data, laying down provisions for “Protection of persons and other subjects regarding the processing of personal data” and of the Privacy Code as amended by Legislative Decree of 10 / 8/2018 n. 101, the company Virax Borghi Italia srl, hereinafter also just “Virax Borghi” or “Company”, in its capacity as Data Controller makes known the following information in relation to the protection of individuals, with regard to the processing of personal data as well as to their free circulation.

Nature of personal data processed

Virax Borghi Italia and the other subjects that carry out, on behalf or in favor of the same, the assigned tasks, will treat the data concerning the common personal data, which are, for example, personal data (name, surname, address, telephone number, e-mail and other contact details) and economic-patrimonial data (ie data relating to the operations carried out during the contractual relationship with the Data Controller). In the absence of such personal data, the Company will not be able to carry out operations and manage the relationships that require the processing of your personal data.

Purpose of the processing and legal basis.

The collection and processing of personal data, even particular as identified above, will be carried out:
Without the express consent of the interested party (art. 24 letter a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following purposes:
conclude the contracts for the owner’s services;
respond to your requests for information;
fulfill the pre-contractual, contractual and fiscal obligations deriving from existing relationships with you;
to fulfill the obligations provided for by the law, by a regulation, by EU legislation or by an order of the Authority (such as in the field of anti-money laundering);
exercise the rights of the Owner, for example the right to defend in court;

Processing methods

Your personal data will be processed based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights. The processing of data for the purposes set out will take place both in automated mode, on electronic or magnetic support, and non-automated, on paper, in compliance with the rules of confidentiality and security provided by law, the consequent regulations and internal provisions.

Place of treatment

The data will be processed and stored at the administrative headquarters located in Via Tommaso Edison 2 – 20090 Segrate (MI). The data may also be processed, on behalf of Virax Borghi Italia, by professionals and / or companies charged with carrying out technical, development, management and administrative – accounting activities.

Data communication

Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated within the EU exclusively for the purposes specified above to:
subjects that provide services for the management of the information system and the communication networks of the owner, including e-mail and website management;
studies or companies in the context of assistance and consultancy relationships;
competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request;
in the case of administrative accounting purposes, the data may possibly be transmitted to commercial information companies for the assessment of solvency and payment habits and / or to subjects for credit recovery purposes.
The subjects belonging to the aforementioned categories perform the function of Data Processing Manager, or operate in total autonomy as separate Data Controllers.

Data retention period

The data provided will be kept for administration, accounting, payroll management, staff training, contract and labor law, management of any litigation during the duration of the employment relationship and for a subsequent period of 10 years or for a longer period if necessary for the fulfillment of all legal obligations.

Rights of the interested party

With regard to personal data, you can exercise, under the conditions and within the limits established by the EU Regulation and the Privacy Code, the rights enshrined in articles 15 to 22 and in art. 34 of the EU Regulation. In particular, you have the right to obtain from the Data Controller access, rectification, integration or cancellation (“right to oblivion”) of your personal data, limitation to the processing and portability of personal data; furthermore, he has the right to oppose the processing of personal data and the right to lodge a complaint with the Authority, the Guarantor (see annex “Rights of the interested party”). The rights provided for in articles 15 to 22 of the EU Regulation may be subject to limitations in the cases provided for by art. 2 – undecies of the Privacy Code. You may exercise the above rights at any time by sending a communication to the contacts indicated below. We also inform you that pursuant to art. 140 bis of the Privacy Code, you can lodge a complaint with the Guarantor or appeal before the Judicial Authority. These forms of protection are alternative, therefore, the complaint cannot be made if the judicial authority has already been referred to the same request for protection.

Data controller and data protection officer

The data controller is “Virax Borghi Italia srl” with administrative headquarters and general management in Via Tommaso Edison 2 – 20090 Segrate (MI). To exercise your rights under the EU Regulation as well as to receive any information relating to them and / or to this Policy you can use our contact details. The Owner, also through the designated structures, will take care of your request and provide it, without undue delay and in any case, at the latest, within one month of receiving it, the information relating to the action taken regarding your request.