Information on the processing of personal data – Resellers

This information is provided  to you pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter “GDPR”) to inform you of the methods of processing your personal data that you may provide to us in the event that you decide to become an authorized reseller of our products.

  1. Data Controller:

Pursuant to the GDPR, Kidaria Bioscience S.r.l. with registered office in Monterosso al Mare, 8 (SP), C.F. and P.IVA 01542720113 in the person of its pro-tempore legal representative, is the Data Controller, for any request you can contact us at the email: privacy@kidaria.it

  1. Purpose of the processing

The personal data that will be requested to you and that will be processed are necessary in order to be able to contact you, inform you about Kidaria products and evaluate the establishment of a commercial collaboration between us for the resale of our products.

  1. Categories of personal data that may be requested from you

You will be asked to provide personal data such as: name, surname, personal e-mail, company name, address, tax code and VAT number.

  1. Nature of the processing

We would like to point out that, with regard to the purpose referred to in point 2, the provision of your personal data is mandatory in order to be able to contact you in response to your request for information, as well as to be able to execute collaboration contracts with you as a reseller.

Any refusal to provide such data will make it impossible to evaluate your requests.

  1. Legal basis of the processing and request for consent

The legal basis for the processing is the execution of pre-contractual measures requested by you, in particular aimed at sending information functional to the establishment of a collaboration relationship.

  1. Processing methods and retention period

The processing will be carried out in automated and/or manual form, in compliance with the security measures referred to in art. 32 of the GDPR, by specially appointed persons, in compliance with the provisions of Article 29 of the GDPR.

In compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR, the retention period of your personal data will not exceed one year, a period that we believe is appropriate in order to be able to carry out the processing related to the requests that you might have made.

After one year, your data will be deleted, if you want to contact us again for information on a new product or a new Kidaria initiative, you will therefore have to provide your data again.

  1. Transfer and disclosure of Personal Data

The data collected may be communicated to recipients belonging to the following categories:

  1. Mail Up S.p.a., the company that manages the e-mail marketing platform we use to contact you.
  2. Entities provided for by current accounting and tax legislation as recipients of mandatory communications;
  3. Competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request;
  4. Subjects who manage/support/assist, even if only occasionally, the Data Controller in the administration of the Information System and telecommunications networks (including e-mail, web and Cloud platforms);
  5. Banking institutions and equivalents;
  6. Firms or professional companies based in Italy in the field of legal, tax and administrative/accounting assistance and consultancy;
  7. Any suppliers of services functional to the execution of the contracts in place between the parties (i.e. deliveries of products, etc.).

We specify that:

  1. the entities that will act as external data processors operate in jurisdictions subject to the GDPR;
  2. Your data will not be transferred outside the European Economic Area.
  1. Rights of the data subject

At any time, pursuant to art. 15-22 of the GDPR, you may exercise the right to:

  1. ask for confirmation of the existence or otherwise of their personal data;
  2. obtain information about the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
  3. obtain the rectification and deletion of data;
  4. obtain the restriction of processing;
  5. obtain data portability, i.e. receive them from Kidaria, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
  6. object to the processing and also in the case of processing for direct marketing purposes;
  7. revoke consent to the processing of the data provided;
  8. object to automated decision-making relating to natural persons, including profiling;
  9. lodge a complaint with the Data Protection Authority or other competent supervisory authority.

You can exercise your rights by sending a written request to Kidaria at the postal address of the registered office or at the email address privacy@kidaria.it