The Supplier acknowledges that the provisions of the Privacy Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of personal data, hereinafter referred to as ‘GDPR’) apply to the processing of personal data, i.e. data relating exclusively to natural persons, collected and processed by the Customer for the purpose of entering into or executing the Contract, and hence do not apply to data relating to companies or associations. For the purposes of this Contract, the Customer may process the personal data of (i) the Supplier, if the Customer is a one-man business or a self-employed professional, and/or (ii) the representatives, officers, employees or co-workers of the Supplier.
Pursuant to Article 13 of the GDPR, the Supplier declares that he/she is aware that the personal data disclosed by him/her for the purpose of entering into and executing the Contract are collected and processed by the Customer, in its capacity as Data Controller, exclusively for these purposes and in order to comply with regulatory, administrative and accounting requirements, using suitable methods and procedures (including computerized ones), through specially appointed in-house employees and external staff identified as data processors. With reference to the personal data processed for the purpose of entering into and executing this Contract, the Supplier acknowledges that the natural person to which the data refer (‘data subject’) has the right of access, correction, restriction, erasure, portability and objection (Articles 15-22 of the GDPR), as well as the right of complaint to the European Data Protection Supervisor.
It is the Supplier’s responsibility to ensure that the personal data of its representatives, officers, employees and co-workers, by way of example, that are disclosed to the Customer for the purpose of entering into and executing the Contract are processed lawfully, and in particular to ensure that the data subjects are informed correctly and that they consent to the processing of their personal data by the Customer for the above-mentioned purposes.