{"id":5648,"date":"2026-07-20T09:16:15","date_gmt":"2026-07-20T08:16:15","guid":{"rendered":"https:\/\/www.brivio.it\/customer-information\/"},"modified":"2026-07-27T08:24:56","modified_gmt":"2026-07-27T07:24:56","slug":"customer-information","status":"publish","type":"page","link":"https:\/\/www.brivio.it\/en\/customer-information\/","title":{"rendered":"Customer Information"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Customer Information<\/strong><\/b><\/h1>\n

<\/p>\n

Customer information on the processing of personal data pursuant to Article 13 of EU Regulation 2016\/679<\/h2>\n

Dear Customer,<\/p>\n

A. Brivio Compensati S.p.a.<\/b>, acting as the Data Controller, with its registered office at Novara 258, 27038 Robbio (PV) <\/b>Tax Code 02109430153 <\/b>and VAT No. 02109430153<\/b>, tel. 0384 689211<\/b>, email: hr@brivio.it<\/b><\/a>, hereby informs you that, pursuant to Article 13 of EU Regulation 2016\/679 (hereinafter the \u201cRegulation\u201d), the personal data you have provided to us will be processed in accordance with European and national data protection legislation. The processing of your personal data will be based on the principles of fairness, lawfulness, transparency, purpose and storage limitation, data minimisation, accuracy, integrity, confidentiality and accountability, safeguarding your privacy and your rights.<\/p>\n

– Purposes and legal bases for processing<\/strong><\/b><\/p>\n

The personal data collected will be processed exclusively for the following purposes:<\/p>\n

    \n
  1. management of commercial relationships and the provision of goods or services;<\/li>\n
  2. management of negotiations and pre-contractual obligations, as well as the performance of the contract and management of the customer relationship;<\/li>\n
  3. compliance with legal, tax, administrative and accounting obligations;<\/li>\n
  4. protection of the Data Controller\u2019s rights, including the management of disputes, breaches of contract, formal notices, settlements, debt recovery, credit protection and arbitration.<\/li>\n<\/ol>\n

     <\/p>\n

    For the purposes set out above, the processing of personal data is carried out in accordance with the conditions of lawfulness laid down in EU Regulation 2016\/679 and, in particular, pursuant to Article 6(1), point (b)<\/strong><\/b> for the performance of the contract or pre-contractual measures, Article 6(1)(c) for compliance with legal obligations, and Article 6(1)(f)<\/b> for the pursuit of the Data Controller\u2019s legitimate interests relating to the management of commercial relationships and the protection of its rights.<\/p>\n

    – Nature of the provision of data<\/strong><\/b><\/p>\n

    The provision of personal data is necessary for the purposes set out above; therefore, failure to provide such data, or the provision of incomplete or inaccurate data, may make it impossible, in whole or in part, to establish or manage the contractual relationship between the Data Controller and the data subject.<\/p>\n

    – Methods of data processing<\/strong><\/b><\/p>\n

    Personal data are processed using IT and paper-based methods by internal staff expressly authorised by the Data Controller and, where necessary, by third parties appointed as data processors pursuant to Article 28 of the Regulation; processing is carried out in accordance with the principles of lawfulness, fairness and transparency and in a manner that ensures the security and confidentiality of the data. The Data Controller implements appropriate technical and organisational measures to protect personal data against the risk of loss, unauthorised access, unlawful use or alteration, in accordance with the provisions of Article 32 of the Regulation and applicable legislation.<\/p>\n

    – Scope of data disclosure and transfer<\/strong><\/b><\/p>\n

    Personal data may be processed by internal staff expressly authorised by the Data Controller, such as employees and contractors, and may be disclosed to third parties engaged by the Data Controller for the purposes set out above, such as tax advisers and accountants, legal advisers, banks and financial institutions, public authorities and government bodies, IT and management service providers (IT) and other parties, including technical or professional bodies, involved in the management of the contractual relationship; these parties process the data in their capacity as data processors pursuant to Article 28 of the Regulation or, where applicable, as independent data controllers, in accordance with the instructions provided by the Data Controller and limited to what is necessary for the performance of the tasks entrusted to them. Personal data are not disclosed and are not transferred outside the European Economic Area.<\/p>\n

    – Retention of processed data<\/b><\/p>\n

    Personal data is retained for the time strictly necessary to fulfil the purposes set out above and, in any event, in compliance with applicable legal obligations; in particular, data relating to the contractual relationship, including administrative, tax, accounting and payment data, is retained for a period of 10 years from the termination of the relationship, subject to any further regulatory obligations or the need to protect the Data Controller\u2019s rights. Data relating to prospective customers is retained for a maximum period of 24 months from the date of collection; in the event of a dispute, the data will be retained for the entire duration of the dispute and until the time limits for bringing legal challenges have expired. Once the retention period has elapsed, the data will be erased or anonymised, subject to technical backup and archiving procedures.<\/p>\n

    – Rights of the data subject<\/b><\/p>\n

    We inform you that, in relation to the processing of data, as a data subject, you may exercise the rights set out in Articles 15\u201322 of the GDPR 2016\/679, namely:<\/p>\n