Customer and supplier privacy notice

Purpose of this Notice

This Privacy Notice sets out the principles adopted by Termoacqua Tecnologie Srl, as the parent company of the Termoacqua Group, regarding the use and protection of the Personal Data of customers and suppliers operating for all companies within the Group. The Company and all its subsidiaries respect the privacy rights of customers and suppliers and are committed to handling Personal Data responsibly and in accordance with applicable laws, and ask you to adopt the same safeguards. This Notice describes the Personal Data we collect and process, the purposes of such Processing, and your rights in relation to it.

Data Controller for the Companies of the Termoacqua Group

The Data Controller is TERMOACQUA TECNOLOGIE S.R.L.

Processing Activities and Purposes

TERMOACQUA TECNOLOGIE S.R.L. informs you that your company’s registered name, as well as the personal and identification data of the contact person interfacing with our company, will be collected and processed for the following purposes, which are essential to the business relationship:

Performance of contractual and/or collaboration activities;
Fulfilment of administrative and accounting obligations (including regulatory obligations);
Engagement of external professional collaborations for compliance with legal obligations;
Protection of contractual rights;
Internal statistical analyses;
Other activities for which your specific consent may be requested: marketing activities through the sending of promotional or advertising materials related to products or services similar to those covered by the existing business relationship.

We inform you that the processing carried out using paper and/or electronic tools does not involve automated decision-making processes.

General Information

We process the Personal Data of Data Subjects whose Personal Data may have been provided to us.

For the purposes of this Notice, Termoacqua Tecnologie Srl, also on behalf of its subsidiaries, will act as the Data Controller for the Personal Data of Data Subjects. Additionally, other companies may act as Data Processors for certain processing activities relating to Personal Data at the IT control level, such as External Data Processors appointed under the GDPR, Legislative Decree 101/2018, and subsequent amendments. 
Should you, in the context of the relationship with us, be required to manage confidential data related to employees of our company, your name will be communicated to the External Data Processor, who may contact you, where deemed appropriate, to verify the protection measures adopted by your organisation for safeguarding the processed data.

Legal Basis for Processing

Processing is carried out on the basis of the existence of a contractual relationship between the Data Controller and the Data Subject and, in any case, because the processing is necessary for the pursuit of the Data Controller’s legitimate interest.

Mutual Provision of Data

Please note that providing data is optional but necessary to achieve the purposes mentioned above. Failure to provide such data will make it impossible to fulfil contractual obligations or manage the administrative, accounting, or simple information exchange activities related to the relationship.

Personal Data We May Collect or Share

The types of Personal Data processed or shared concerning Data Subjects may include, by way of example: identification and contact details (such as name, address, telephone number, email address, date of birth…), professional data (such as employer, role, position, office location, etc.), location and electronic data (such as browsing history on company websites), details relating to personal and professional life, national identifiers (such as tax code, VAT number, ID card/passport), IT information required to grant access to the company web platform or mobile app (such as IP addresses, browsing data, login details), financial details (such as bank account number), and any other information voluntarily provided (such as details regarding enquiries or complaints from a Data Subject) or exchanged during interactions.

Data Disclosure and Scope of Dissemination

Data may be disclosed to the following categories of entities engaged by TERMOACQUA TECNOLOGIE S.R.L. to perform functions necessary for the provision of its services: 
Group subsidiaries for intercompany customer portfolio management; accounting and tax advisors; banks for payments; legal firms in case of dispute; public authorities for legally required disclosures; independent or associated consultants.

The data will not be disseminated.

Retention Period

Data will be retained for the period necessary to fulfil the purposes described above, in compliance with contractual and legal obligations, unless otherwise required by law.

Rights of the Data Subject

You have full rights to: request from the Data Controller access to your personal data, their rectification or erasure, restriction of processing, or to object to processing, as well as the right to data portability. These rights may be exercised by sending an email to privacy@termoacqua.com

The Data Controller will cease processing upon receiving a request from you to do so.

Complaint to the Supervisory Authority

Data Subjects have the right to lodge a complaint with the Supervisory Authority if their requests for information addressed to the Data Controller have not produced satisfactory responses.
 The competent authority is the Garante per la Protezione dei Dati Personali.

Requests or Concerns

For any questions or concerns regarding how we process Personal Data, or to obtain further information on this Notice, or if you wish to exercise your privacy rights, please contact:

The Internal Privacy Officer is available at: privacy@termoacqua.com

Updates to This Notice

This Privacy Notice may be updated periodically to reflect any necessary changes in our privacy practices.

Forms available to Data Subjects for exercising their rights under Articles 15–22 of EU GDPR 2016/679 can be found at: https://www.garanteprivacy.it/home/modulistica-e-servizi-online