EDiM S.p.A. a socio unico, with legal office in Villasanta (MB) via Saragat n. 1, acting as Data Controller (hereinafter also, the “Company”), wishes to inform you, pursuant to Articles 13 and 14 of the EU Regulation No. 679/2016 (GDPR), about the purpose and manner of the processing of your personal data for the performance of the contractual relations with the Company and for the performance of the relevant pre-contractual measures.

1. SOURCE OF PERSONAL DATA

For purposes described in the following paragraphs, the Company will process the personal data you provide in the context of the performance of the business relationship or of the relevant pre-contractual measures.
In addition, and in order to carry out preliminary contractual checks, the Company may receive data relating to your economic and financial situation from external suppliers who professionally provide services of exchange of commercial information pursuant to art. 134 of the T.U.L.P.S. and D.M. 269/2010, and that process your personal data as autonomous data controllers.

2. PURPOSES OF PROCESSING

Your data will be processed for the following purposes:

i. performance of the contractual relationship or of the relevant pre-contracted measures;

ii. performance of preliminary checks on your financial solidity, solvency and reliability;

iii. claims management, debt collection or litigation;

iv. fulfillment of related legal obligations including taxing or accounting obligations.

3. LEGAL BASIS AND NATURE OF PROVISION OF DATA

Processing for the purpose described in the previous paragraph (i) is necessary for the execution of the contract of which you are part, under art. 6 paragraph 1 lett. b) of the GDPR.
Processing for the purposes referred to in the previous points (ii) and (iii) are carried out on the basis of the legitimate interest of the Company acting as Data Controller, under art. 6 paragraph 1 lett. f) of GDPR.
Processing for the purpose referred to in the previous paragraph (iv) is necessary in order to comply with the legal obligations to which the Company is subject, under art. 6 paragraph 1 lett. c).
The provision of your data is optional, but necessary for the performance of the contractual relationship with you. In addition, your data may be processed – save your objection – for the purpose of sending e-mail communications in relation to the Data Controller’s products/services.

4. DATA COMMUNICATION

Your personal data will not be disclosed. They will be communicated to third parties only for the performance of the contractual relationship (where these third parties do not act as Data Processors on behalf of EDiM S.p.A. a socio unico) and for the fulfillment of legal obligations.

5. MODALITIES OF PROCESSING

Personal data is processed in paper and/or automated format and can be processed in order to take decisions based on automated processing. In such cases, however, there will always be a human intervention in the evaluation process.

6. RETENTION PERIODS

Your personal data will be stored for the duration of the contractual relationship and the related services (such as warranty, warranty extension) plus any additional period required by the law in relation to the product.

7. TRANSFERS OUTSIDE THE EUROPEAN UNION

Personal data is processed and stored at the Data Controller’s office and in any other place where the parties involved in the processing are located.
For the purposes described above, there will be no transfers of personal data outside the European Economic Area.

8. DATA CONTROLLER

The Data Controller is EDiM S.p.A. a socio unico, based in Villasanta (MB), via Saragat n. 1. In relation to this activity, the Data Controller uses service providers that have been duly appointed as Data Processors. The full list of Data Processors is available, writing to the following e-mail address: info@edim-it.com.

9. DATA SUBJECTS RIGHTS

You may, at all times and free of charge, request the Data Controller to exercise the rights provided by art. 15 and ss. of the GDPR, including the right to:

• receive confirmation of the existence of your personal data, understand the purpose of the processing or their scope of circulation and access your personal data;
• update, modify and/or correct your personal data;
• request deletion, transformation in anonymous form, blocking of data unlawfully processed or request limitation of processing;
• where applicable, object to the processing of your personal data carried out on the basis of the Data Controller’s legitimate interests. In particular, according to art. 22 of the GDPR and in relation to decisions based solely on automated processing having legal effects, you have the right to request from the Data Controller the human intervention in the process, to express your opinion or to challenge the decision;
• receive a copy of the data you provided and request that this data is transmitted to another data controller;
• revoke previous consents, effective for the future.

To get full clarity on the operations we have reported above and to exercise your rights guaranteed to you by Articles 15 et seq. of the GDPR, in particular to obtain the deletion, the anonymization, the restriction of processing in violation of law, the update, or the rectification, or the supplementing of you data, to object to the processing, and to obtain the up-to-date list of the Data Processors, as well as to report personal data breaches, you can use the following link: https://request.privacy-bosch.com.

For any communication need regarding the processing of your personal data, you may contact the Data Privacy Officer (DPO) at the following e-mail address: DPO@bosch.com.

Should you find that your rights have been violated, you may appeal to the competent authority in accordance with Article 77 GDPR, without prejudice to the possibility of appealing directly to the judicial authority.

Edition 3.2 valid from September 2023