The Customer acknowledges that the provisions of the Privacy Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, hereinafter referred to as ‘GDPR’) apply to the processing of personal data, i.e. data relating exclusively to natural persons, collected and processed by the Supplier for the purpose of entering into or executing the Contract, and hence do not apply to data relating to companies or associations. For the purposes of this Contract, the Supplier may process the personal data of (i) the Customer, if the Customer is a one-man business or a self-employed professional, and/or (ii) the representatives, officers, employees or co-workers of the Customer.
Pursuant to Article 13 of the GDPR, the Customer declares that he/she is aware that the personal data disclosed by him/her for the purpose of entering into and executing the Contract are collected and processed by the Supplier, in its capacity as Data Controller, exclusively for these purposes and in order to comply with regulatory, administrative and accounting requirements, using suitable methods and procedures (including computerized ones), through specially appointed in-house employees and external staff identified as data processors. With reference to the personal data processed for the purpose of entering into and executing this Contract, the Customer acknowledges that the natural person to which the data refer (‘data subject’) has the right of access, correction, restriction, erasure, portability and objection (Articles 15-22 of the GDPR), as well as the right of complaint to the European Data Protection Supervisor.
It is the Customer’s responsibility to ensure that the personal data of its representatives, officers, employees and co-workers, by way of example, that are disclosed to the Supplier for the purpose of entering into and executing the Contract are processed lawfully, and in particular to ensure that the data subjects are informed correctly and that they consent to the processing of their personal data by the Supplier for the above-mentioned purposes.