Privacy Policy

INFORMATION FOR THE PROCESSING OF PERSONAL DATA UNDER ARTICLES 13 – 14 EU REG. NO. 679/2016

1. Object of the processing.
The Data Controller will process personal, identification, contact and tax data (for example: name, last name, company name, address, telephone, e-mail, bank and payment references, etc.) communicated by you at the time of signing the above contract and during the subsequent fulfillment.
2. Purpose of data processing.
The processing is aimed at the correct and complete execution of the use of the Tesora platform. Your data will also be processed in order to:
a) fulfill the obligations provided for in the tax and accounting area;
b) comply with the obligations incumbent on the Grantor as provided for by current legislation. Your personal data may be processed by means of both paper and computer files (including portable devices) and in the manner necessary to meet the above-mentioned purposes. The personal data communicated will be processed without your express consent as allowed by art. 6 EU Reg. 679/2016.
3. Methods of processing.
The processing of your personal data is carried out by means of the operations indicated in art. 4 no. 2 of the GDPR and precisely: collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, alignment or combination, restriction, erasure or destruction of data.The processing is carried out by persons in charge and collaborators within the scope of their respective functions and in accordance with the instructions received, always and only for the achievement of specific purposes, scrupulously respecting the principles of confidentiality and security required by applicable regulations.
4. Access to data.
Your data may be made accessible for the purposes set out in point 2 above:
a) to the Data Controller’s employees and collaborators in their capacity as data processors and/or system administrators;
b) to companies associated with the Data Controller as well as their employees and collaborators;
c) to third party companies or other subjects(by way of indication: professional firms, consultants, etc.) that carry out outsourcing activities on behalf of the Data Controller;
d) banking and insurance institutions that provide services functional to the obligations under the contract signed;
e) parties that process data in execution of specific legal obligations;
f) judicial or administrative authorities for the fulfillment of legal obligations(e.g.anti - money laundering).
5. Data communication.
The Data Controller, in accordance with the provisions of art. 45 of the Regulation, for the purposes of the execution of the contract, will communicate your data to the company that manages the treasury.
6. Data Retention.
All personal data provided will be processed in compliance with the principles of lawfulness, correctness, relevance and proportionality and in the manner strictly necessary to pursue the purposes described above.The personal data will be kept for 10(ten) years from the termination of the contract.
7. Rights of the data subject.
In accordance with articles 15 to 22 of EU Reg.No 679/2016, the data subject has the possibility to exercise specific rights.In particular, the interested party has the right to:
a) obtain confirmation of the existence of processing of personal data concerning him/her and, if so, access to such data;
b) obtain rectification of inaccurate personal data and completion of incomplete personal data;
c) obtain erasure of personal data concerning him/her, where this is permitted by the Regulation;
d) to restrict the processing, in the cases provided for by the Regulation;
e) have a notification sent to each of his/her recipients to whom his/her personal data has been disclosed, regarding any rectification or erasure or restriction of his / her personal data carried out in accordance with the GDPR, unless this proves or involves disproportionate effort;
f) to receive, in a structured, commonly used and machine - readable format, personal data provided to the Data Controller, as well as the transmission of such data to another data controller, and this at any time, including the termination of any relations with the Data Controller;
g) to object at any time, on grounds related to his/her particular situation, to the processing of personal data concerning him / her pursuant to article 6, paragraph 1, letters(e) or(f), including profiling on the basis of these provisions.Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data relating to him/her carried out for such purposes, including profiling to the extent that it is related to such direct marketing;
h) lodge a complaint with a supervisory authority pursuant to article 77 of Regulation(EU) No. 679/2016.
8. Methods of exercising rights.
You may at any time exercise your rights by contacting the Data Controller at the following addresses: Head of the department of Tesora’s Customer Service: e-mail: privacy@tesora.io.

CONSENT TO THE PROCESSING OF PERSONAL DATA EX ART. 13 - 14 EU REG. NO. 679/2016

Having read this information, the undersigned declares to have understood its contents and to have received a copy. The undersigned also declares his/her consent to the processing of his/her personal data for the purposes and according to the modalities indicated in the above information for which this consent represents the legal basis of the processing.

Place: ______________________________ Date: _________________ Signature: ___________________________