BRIEF INFORMATION FOR CUSTOMERS, PARTNER SUPPLIERS AND OTHER SUBJECTS ART. 13 OF EUROPEAN REGULATION N. 16/679 and national legislation on the protection of personal data

APA HOLZ UG as Data Controller, with registered office in Via Alessandro Pompei 13 in Isola della scala 37063, intends to provide adequate information to natural persons who operate in the name and on behalf of suppliers, customers, partners and other subjects pursuant to art. 13 Reg. Eu. 2016/679 and national legislation on the protection of personal data. The Processing is carried out to execute the contract to which each supplier, customer, partner and other subject is a party or to the execution of pre-contractual or post-contractual measures adopted at the request of the same. Therefore, personal data of natural persons who operate in the name and on behalf of the subjects indicated may be processed for the following purposes: to forward communications, formulate requests or process requests received, exchange information aimed at the execution of the contractual relationship, including pre- and post-contractual activities. With reference to articles. 12 to 22 of the EU Regulation, you may exercise the following rights: access, rectification, cancellation, limitation of processing, portability, opposition, opposition to the automated decision-making process of GDPR 679/16; the interested party exercises his rights by writing to the Data Controller at the address above, or to the following info@apaholz.de specifying the subject of his request, the right he intends to exercise and attaching a photocopy of an identity document that certifies the legitimacy of the request.

COMPLETE INFORMATION FOR CUSTOMERS, SUPPLIERS, PARTNERS AND OTHER SUBJECTS ART. 13 OF EUROPEAN REGULATION N. 16/679 and national legislation on the protection of personal data

APA HOLZ UG as Data Controller, with registered office in Via Alessandro Pompei 13 in Isola della Scala 37063 hereby wishes to provide adequate information to natural persons who operate in the name and on behalf of suppliers, customers, partners and other subjects involved in contractual or pre-contractual activities of APA HOLZ UG pursuant to art. 13 GDPR 679/16 – “European Regulation on the protection of personal data” and national legislation on the protection of personal data.

1. Data subject to processing
The personal data processed are personal and contact details provided or received by the interested party on the occasion of:

• visits or phone calls or emails;
• direct contacts obtained through participation in events, etc.;
• requests for commercial information, proposals for offers;
• requests via our website or via the website of suppliers, customers, partners, other parties
• transmissions and transactions subsequent to the order for the provision of the service or good (provided/purchased)

2. Purpose of the processing
The personal data of natural persons operating in the name and on behalf of suppliers, customers, partners and other subjects are processed for:

• forward communications through various means of communication (telephone, mobile phone, SMS, email, postal mail, etc.);
• make requests or process requests received;
• exchange information aimed at executing the contractual relationship, including pre- and post-contractual activities, including assistance activities;
• execution of obligations established by laws, regulations or by community legislation, as well as to comply with provisions issued by public authorities authorised to do so or by supervisory and control bodies to which APA HOLZ UG is subject for ancillary purposes such as "News Alerts" via email or text message;
• management of any disputes.

The interested party may refuse to provide the Data Controller with his/her personal data. However, the provision of personal data is necessary for the correct and efficient management of the contractual relationship with suppliers, customers, partners and other subjects involved in the activities of the Data Controller. Therefore, any refusal to provide data may compromise, in whole or in part, the contractual relationship itself or the pre- and post-contractual activities.

3. Legal basis
The processing is necessary for the performance of a contract to which each subject is a party or for the performance of pre-contractual or post-contractual measures adopted at the request of the supplier, customer, partner, other subjects or APA HOLZ UG pursuant to art. 6.1, letter b) of the GDPR), or for the fulfillment of a legal obligation pursuant to art. 6.1, letter c) of the GDPR).

4. Methods of processing
The data of the interested parties will be processed in compliance with the principles of lawfulness, correctness and transparency, using manual or automated tools including through the insertion into databases, lists and lists suitable for the storage, management and transmission of data, in the ways and within the limits necessary for the pursuit of the aforementioned purposes.
APA HOLZ UG has provided adequate security measures in order to protect the data of natural persons who operate in the name and on behalf of suppliers, customers, partners and other subjects, for example: Firewall, paid antivirus, anti-ransomware, virtual machine, encrypted back ups, timer retentions.
The data will be processed exclusively by persons authorised to process data within APA HOLZ UG, in relation to the purpose of the processing.
The data is not subject to an automated decision-making process or profiling.

5. Data recipients
The personal data processed by the Data Controller will not be disclosed, or will not be made known to unspecified subjects, in any possible form, including that of making them available or simply consulting them. They may, however, be communicated to the Data Controller's workers and to some external subjects who collaborate with them, always in compliance with the purposes indicated. In particular, these are employees/collaborators who, on the basis of the roles and work tasks performed, have been authorised to process personal data, trained to do so within the limits of their skills and in accordance with the instructions given to them by the Data Controller. They may also be communicated, to the extent strictly necessary, to subjects who, for the purpose of issuing our orders or requests for information and estimates or formulations of offers, our services, must provide goods and/or perform services or tasks on our behalf. The data may be accessed (for the purposes of assistance on SW applications, on computer networks and for connectivity) by our appointed technicians or external consultants or by those appointed by companies that provide such services. Finally, they may be communicated to the subjects entitled to access them by virtue of provisions of law, regulations, community regulations. The updated list of data controllers, where requested, is available at the headquarters of APA HOLZ UG.

6. Data transfer
The Data Controller does not transfer personal data to third countries or to international organizations.

Data retention
The Data Controller stores and processes personal data for the time necessary to fulfill the purposes indicated. Subsequently, personal data will be stored, and not further processed, as documented in our Register. The storage period may vary significantly based on: the purposes, the type of data processed, legal obligations; in the event that the data were processed in the context of a funded project, the storage times could be subject to what is provided for in the call for tenders of the funding body. When it is no longer necessary to store personal data, they will be deleted or de-indexed or destroyed in a secure manner in accordance with our policy.

7. Rights of the interested party
Pursuant to art. 7 of Legislative Decree 196/2003 and articles 15 to 22 of the Regulation, you may exercise the following rights:

• ask for confirmation of the existence or otherwise of your personal data;
• obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;
• obtain the rectification and deletion of data;
• obtain limitation of processing;
• (where applicable) obtain data portability, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
• object to the processing at any time and also in the case of processing for direct marketing purposes;
• object to automated individual decision-making, including profiling
• ask the data controller for access to personal data and the rectification or erasure of the same or the limitation of the processing concerning him or her or to oppose their processing, in addition to the right to data portability;
• recall consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

The same, where exercisable by you, can be asserted by writing to APA HOLZ UG using the following contact details: Email: info@apaholz.de – PEC: apa-holz@pec.it , Via Alessandro Pompei 13, Isola della scala (VR) – 37063, Tel: +39 045 2245485, E-Mail: info@apaholz.de

specifying the subject of the request, the right that the interested party intends to exercise and attaching a photocopy of an identity document that certifies the legitimacy of the request.

8. Submission of complaint
The interested party has the right to lodge a complaint with the supervisory authority of the State of residence. For more information on the right to lodge a complaint, you can visit the following web page or contact us via the addresses indicated.