The EU Regulation 2016/679 (from now on, ‘GDPR’), as well as other legal provisions (including Legislative Decree 196/2003 from now on, ‘Privacy Code’) and regulations, protect the confidentiality of personal data and impose several obligations on those who process personal information on natural persons, defined as data subjects. Among the essential duties imposed by the GDPR is informing data subjects and acquiring their consent to the processing, where required as a legal basis.
This statement refers to the processing of personal data – provided directly by the company, entity, or professional and acquired from third parties – for the procedures related to the participation of ES+ Srl in a tender or to the submission (and subsequent evaluation) of an offer, but also for the stipulation and execution of a contract (contract/supply or other), the related fulfilments and the related administrative-accounting activities.
For the purposes mentioned above, personal data relating to legal representatives, technical managers, employees/collaborators of the other party and any subcontractors may or shall be collected and processed.
Given that the data processing carried out by ES+ srl will be based on the principles of lawfulness, correctness and transparency, minimisation and limitation of data retention, accuracy, integrity and confidentiality, the following information is provided:
Purpose | GDPR Legal Basis |
1) Carry out preliminary activities, and verify the technical, economic and financial suitability and the existence of all requirements imposed by the applicable regulations, to enable the subsequent conclusion and execution of the contract. Stipulation and execution of the contract. | 6.1.b – Contract 6.1.c – Legal Obligation |
2) Where required by law, judicial data relating to the company’s legal and technical representatives are also processed to verify the absence of grounds for exclusion and the lack of disqualification measures for the company according to Legislative Decree 231/01 or the Anti-Mafia Regulations. | 6.1.c – Legal Obligation |
3) In the case of construction sites or works in areas managed by the Controller, data of employees/collaborators with a role in the execution of the contract are also processed to manage accident prevention issues. | 6.1.c – Legal Obligation |
4) Accounting, administrative and financial management. | 6.1.c – Legal Obligation |
5) Exercise of a right in court to defend the interests of the Controller. | 6.1.f – Legitimate Interest |
6) Promotion and disclosure of services By way of example, sending – by automated or non-automated means of contact (such as e-mail, social media) – newsletters relating to the services offered by ES+ Srl.The condition that makes the processing lawful is consent.se | 6.1.a – Consent of the person concerned |
The data will be processed on paper and magnetic media, manually and by electronic or, in any case, automated means, and will be kept for 10 years and, in the event of litigation, until the judgments at all levels have become final.