{"id":8372,"date":"2026-03-18T16:02:46","date_gmt":"2026-03-18T14:02:46","guid":{"rendered":"https:\/\/staging.labware.it\/?post_type=legal&p=8372"},"modified":"2026-03-18T16:07:23","modified_gmt":"2026-03-18T14:07:23","slug":"informativa-fornitori","status":"publish","type":"legal","link":"https:\/\/staging.labware.it\/en\/legal\/informativa-fornitori\/","title":{"rendered":"Information on the processing of personal data of suppliers"},"content":{"rendered":"

SUPPLIER DISCLOSURE<\/strong><\/p>\n

Pursuant to Articles 13 and 14 of EU Regulation 2016\/679 \u2013 GDPR<\/p>\n

Labware SpA, with headquarters at Via Enzo Ferrari, 3 \u2013 Zona Ind.le A, 62012 Civitanova Marche (MC), Tax ID and VAT No. 01424730438, in its capacity as Data Controller, hereby provides the privacy notice pursuant to Articles 13\u201314 of EU Regulation 2016\/679 \u2014 the General Data Protection Regulation (GDPR), hereinafter also referred to simply as \u201cGDPR.\u201d.<\/p>\n

 <\/p>\n

1. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER<\/strong><\/p>\n

Labware SpA hereby notifies you that, for the purposes of establishing and managing our relationship, it is the data controller of your data classified as personal data pursuant to EU Regulation 2016\/679.<\/p>\n

For any information regarding the processing of personal data, including the list of data processors<\/p>\n

If you have any questions regarding the entities that process data, please contact the Data Controller via:<\/p>\n

Mailing Address: Via Enzo Ferrari, 3 \u2013 Industrial Zone A, 62012 Civitanova Marche (MC), Italy Email:\u00a0\u00a0 privacy@staging.labware.it<\/a><\/p>\n

 <\/p>\n

2. CATEGORIES OF PERSONAL DATA<\/strong><\/p>\n

The Personal Data that are processed by the Data Controller include, but are not limited to: first name, last name, social security number, VAT number, residential address, place of work location, telephone number, mailing address, bank details, etc.<\/p>\n

 <\/p>\n

3. PURPOSE OF PROCESSING<\/strong><\/p>\n

Personal data, are processed by the Data Controller for the following purposes:<\/p>\n

(a) Execution of contracts<\/strong><\/p>\n

The provision of Personal Data is necessary to fulfill contractual and pre-contractual obligations.<\/p>\n

(b) Administrative and management purposes and for compliance with national regulatory requirements and <\/strong>community<\/strong><\/p>\n

The processing of Personal Data to comply with regulatory requirements is mandatory, for example, when it is prescribed by anti-money laundering, tax, accounting, anti-corruption regulations or by orders and requests of the Supervisory and Control Authority, to which the Controller is subject;<\/p>\n

(c) Holder's defense<\/strong><\/p>\n

The processing of Personal Data is necessary to pursue a legitimate interest of the Data Controller, i.e.: to establish, exercise or defend a right in court or whenever judicial authorities exercise their jurisdictional functions;<\/p>\n

 <\/p>\n

4. LEGAL BASIS.<\/strong><\/p>\n

The legal basis for the processing of personal data for the purposes referred to in point 3(a) above is the fulfillment of precontractual and contractual obligations arising from legal relationships established and\/or to be established with you (Article 6(1)(b) of the GDPR).<\/p>\n

The legal basis for the processing of personal data for the purposes referred to in point 3(b) above is compliance with a legal obligation to which the Data Controller is subject (Article 6(1)(c) of the GDPR), while for the purposes referred to in point 3 (c) above, it is the pursuit of the Data Controller\u2019s legitimate interests (Article 6(1)(f) of the GDPR).<\/p>\n

5. RECIPIENTS<\/strong><\/p>\n

Without prejudice to disclosures made in compliance with legal and contractual obligations, all data collected and processed may be shared, exclusively for the purposes specified above, with the following categories of authorized persons and\/or internal and external data processors identified in writing and who have been provided with specific written instructions regarding data processing: Authorized internal personnel\u2014employees and contractors of the Data Controller, in their capacity as persons authorized to process personal data, who have committed to confidentiality or are subject to an adequate legal obligation of confidentiality; Processors \u2013 individuals, companies, professional firms, or other third parties with whom the Data Controller maintains relationships necessary for the conduct of its business for the purposes indicated above or as required by law, who have been entrusted with a specific mandate and for the time necessary to achieve the purposes for which the data were collected, and who typically act as Data Processors for Labware SpA. By way of example, the Data Controller may need to disclose data to the following categories: entities providing professional consulting and tax, legal, and judicial assistance services; entities providing IT system management services; Third-Party Recipients \u2013 Judicial or supervisory authorities, government agencies, public bodies, and organizations (by way of example and without limitation: the Italian Revenue Agency, law enforcement agencies, judicial authorities, local governments, ministries, and their collaborators\/auxiliaries), insurance companies, and banks.<\/p>\n

6. STORAGE AND TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY<\/strong><\/p>\n

Your Personal Data is stored on servers within the European Union. In any case, it is understood that the Data Controller, if it becomes necessary, for technical or operational reasons, will have the right to transfer Personal Data to countries outside the European Union for which there are \u201cadequacy\u201d decisions of the European Commission, i.e. on the basis of appropriate safeguards or specific derogations provided for in the Regulations.<\/p>\n

7. PROCESSING METHODS AND STORAGE TIME OF PERSONAL DATA<\/strong><\/p>\n

The processing of Personal Data will take place, in compliance with the provisions of the GDPR, by means of paper, computer and telematic tools, with logics strictly related to the purposes for which the personal data have been collected and, in any case, in such a way as to ensure their security and confidentiality in accordance with the provisions of Article 32 GDPR. All of the aforementioned data and others constituting your employment status will be retained even after the termination of the employment relationship for the fulfillment of all possible obligations related to or arising from the termination of the employment relationship itself for the next ten years from the date of their acquisition. More information regarding the period of retention of personal data and the criteria used to determine this period may be requested by writing to the Data Controller.<\/p>\n

 <\/p>\n

8. RIGHTS OF THE DATA SUBJECT<\/strong><\/p>\n

In connection with the processing operations described in this policy statement, as a data subject you may, under the conditions set forth in the GDPR, exercise the rights enshrined in Articles 15 to 21 of the GDPR and in particular the following rights:<\/p>\n