The Customer/Supplier acknowledges that the provisions of the privacy policy – EU Regulation 2016/679 of
the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with
regard to the processing of personal data, hereinafter the “GDPR” – concern the processing of the personal
data, relating solely to natural persons, acquired and processed by the Supplier for the conclusion and
performance of the Agreement and does not include data relating to companies, entities and associations.
For the purposes of this Agreement, the Customer/Supplier may therefore process personal data
concerning (i) the Customer/Supplier, only if it is an individual enterprise or self-employed person, and/or
however (ii) representatives, agents, employees or collaborators of the Customer/Supplier.
Pursuant to article 13 of the GDPR, the Customer/Supplier declares to be aware that the personal data provided by them for the conclusion and performance of the Agreement are collected and processed by the Customer/Supplier, as Data Controller, exclusively for these purposes and for the related regulatory, administrative and accounting requirements, using suitable methods and procedures (including electronic), by specifically appointed internal staff and by external collaborators designated as data managers or processors. The Customer/Supplier acknowledges that, with regard to personal data processed for the conclusion and performance of this Agreement, the natural person to whom the data refers (i.e. the data subject) has the right of access, rectification, limitation, cancellation, portability and opposition (articles 15- 22 of the GDPR), as well as the right to complain to the Privacy Guarantor.
The Customer/Supplier is responsible for ensuring the lawful use of personal data concerning, for example, any of its representatives, agents, employees and collaborators, that are communicated to the Customer/Supplier to conclude and perform the Agreement and, in particular, the proper fulfilment of the obligations to inform data subjects and, where necessary, to collect their consent, with regard to the processing of their personal data by the Company for the aforementioned purposes and within the terms specified above.