{"id":238962,"date":"2026-06-12T10:49:13","date_gmt":"2026-06-12T10:49:13","guid":{"rendered":"https:\/\/www.gallispa.com\/?page_id=238962"},"modified":"2026-06-12T13:07:40","modified_gmt":"2026-06-12T13:07:40","slug":"supplier-information","status":"publish","type":"page","link":"https:\/\/www.gallispa.com\/en\/supplier-information\/","title":{"rendered":"Suppliers&#8217; Privacy Notice on the Processing of Personal Data pursuant to Art. 13 of EU Regulation 2016\/679"},"content":{"rendered":"<p>Dear Supplier,<\/p>\n<p>GALLI SPA, in its capacity as Data Controller, with registered office in Via Cararola 59 \u2013 27029 Vigevano (PV), Fiscal Code and VAT number 00595810185, tel. 0381-42423, e-mail : info@gallispa.it, hereby informs you that the personal data you provide to the undersigned is processed in compliance with European personal data protection legislation (EU Regulation 2016\/679, hereinafter &#8220;Regulation&#8221;) and national regulations. The processing will be based on principles of correctness, lawfulness, and transparency, safeguarding your confidentiality and your rights.<\/p>\n<p><strong>&#8211; Purposes and legal bases of the processing <\/strong><\/p>\n<p>The personal data collected will be processed exclusively for the following purposes:<\/p>\n<ol>\n<li>Carrying out activities related to customer-supplier contractual or pre-contractual fulfillments.<\/li>\n<li>Administrative and accounting fulfillments.<\/li>\n<li>Defense of one&#8217;s own right or interest in court, litigation management, breaches of contract, formal notices, settlements, debt collection, credit protection, arbitrations.<\/li>\n<\/ol>\n<p>For the purposes outlined above, the applicable legal bases of the processing, pursuant to Art. 6 paragraph 1 of EU Regulation 2016\/679, are the following: Letter B &#8211; contractual fulfillment or execution of pre-contractual measures, Letter C &#8211; processing necessary to comply with a legal obligation to which the Data Controller is subject, Letter F &#8211; pursuit of the legitimate interest of the Data Controller.<\/p>\n<p><strong>&#8211; Type of data processed and nature of provision<\/strong><\/p>\n<p>The provision of personal data (personal, corporate, and contact details) is to be considered mandatory for the achievement of the purposes indicated above; therefore, failure to provide them, or providing partial or inaccurate data, may make it impossible, in whole or in part, to finalize and manage the existing or future relationship with the Data Controller.<\/p>\n<p><strong>&#8211; Data processing methods <\/strong><\/p>\n<p>The collected data may be processed mainly in automated form (via IT means) and on paper by personnel specifically authorized to process it by the undersigned Data Controller and, if applicable, by third parties appointed as external data processors, pursuant to Art. 28 of the Regulation. The Data Controller undertakes to adopt appropriate security measures to protect the data against the risk of loss, misuse, or alteration of personal data, in accordance with the law, the provisions of the Italian Data Protection Authority (Garante per la protezione dei dati personali), and what is stated in Art. 32 of the Regulation.<\/p>\n<p><strong>&#8211; Scope of communication and data transfer<\/strong><\/p>\n<p>Personal data will be processed by individuals identified and expressly authorized to process it by the Data Controller, such as employees and\/or collaborators. The collected data may also be processed by third parties whose services the Data Controller utilizes to pursue the purposes indicated above (for example: accounting and tax consultants, management or accounting software providers, consultants, credit institutions). These parties will process the data in accordance with the instructions received from the Data Controller, based on operational profiles assigned to them in relation to the functions performed, limited to what is necessary and instrumental for the execution of specific operations within the requested services and exclusively for the achievement of the purposes indicated in this notice. The data subject to processing will <u>not<\/u> be subject to dissemination and will not be transferred to non-EU countries.<\/p>\n<p><strong>&#8211; Retention of processed data<\/strong><\/p>\n<p>All data is retained for the time necessary to fulfill the purposes indicated above or, in any case, for a period of time not exceeding that necessary to achieve the goals for which they were collected and to fulfill contractual, pre-contractual, or legal obligations to which the undersigned Data Controller is bound. Other criteria used to determine the retention period may refer to specific legal regulations governing the Data Controller&#8217;s activities (e.g., tax legislation regarding the processing of administrative and accounting data). In the event of judicial litigation, the data will be retained for its entire duration and until the expiration of the deadlines for filing appeals. Once the retention periods specified herein have expired, the data will be destroyed or anonymized, compatibly with technical deletion and backup procedures.<\/p>\n<p><strong>&#8211; Rights of the data subject<\/strong><\/p>\n<p>We inform you that, in relation to the data processing, as a data subject you may exercise the rights referred to in Articles 15-22 of GDPR 2016\/679, namely:<\/p>\n<ul>\n<li>Request and obtain the erasure, transformation into anonymous form, or blocking of data processed in violation of the law;<\/li>\n<li>Request and obtain the updating, rectification, and integration of the data;<\/li>\n<li>Request and obtain attestation that such operations have been brought to the knowledge of those to whom the data are communicated;<\/li>\n<li>Object on legitimate grounds to the processing of data or to any automated decision-making process (including profiling);<\/li>\n<li>Request and obtain the restriction of processing or portability to another controller;<\/li>\n<li>Request and obtain compensation for material and non-material damages.<\/li>\n<\/ul>\n<p>To gain full clarity on the operations we have reported, to exercise your rights provided by the Law, and to view the updated list of data processors, you may contact the Data Controller in writing at the e-mail address: :info@gallispa.it or via registered letter with acknowledgment of receipt addressed to GALLI SPA Via Cararola 59 \u2013 27029 Vigevano (PV).<\/p>\n<p>Please also note that the data subject always has the right to lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali) for the exercise of their rights or for any other matter relating to the processing of their personal data. It is possible to download the necessary forms from the institution&#8217;s website at the page www.garanteprivacy.it\/home\/modulistica-e-servizi-online<\/p>\n<p style=\"text-align: left;\"><strong>The Data Controller<br \/>\n<\/strong><strong>GALLI SPA<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dear Supplier, GALLI SPA, in its capacity as Data Controller, with registered office in Via Cararola 59 \u2013 27029 Vigevano (PV), Fiscal Code and VAT number 00595810185, tel. 0381-42423, e-mail : info@gallispa.it, hereby informs you that the personal data you provide to the undersigned is processed in compliance with European personal data protection legislation (EU [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-238962","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.gallispa.com\/en\/wp-json\/wp\/v2\/pages\/238962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gallispa.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.gallispa.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.gallispa.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gallispa.com\/en\/wp-json\/wp\/v2\/comments?post=238962"}],"version-history":[{"count":4,"href":"https:\/\/www.gallispa.com\/en\/wp-json\/wp\/v2\/pages\/238962\/revisions"}],"predecessor-version":[{"id":238989,"href":"https:\/\/www.gallispa.com\/en\/wp-json\/wp\/v2\/pages\/238962\/revisions\/238989"}],"wp:attachment":[{"href":"https:\/\/www.gallispa.com\/en\/wp-json\/wp\/v2\/media?parent=238962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}