Subject: Information on personal data processing referred to in regulation UE 679/2016
According to the Artt. 13-14 of the new EU regulation 679/2016 laying down provisions for the protection of persons and other parties with respect to the processing of personal data, we wish to inform you that the personal data you provide will be treated in compliance with the above-mentioned legislation regarding the protection and management of personal data processing.
The purpose of this information sheet is to describe how to treat the personal data of users of the activities provided by WCS World Certification Standards Ltd. This statement is made to those who require services from WCS World Certification Standards LTD, the third party certification body.
Controller
The controller of the treatment data is World Certification Standards Ltd – WCS Ltd – represented in the person of Valerio Zizzi as legal representative with Legal office in Athens (GR), Kanigos street No 33 and legal headquarters in Bolzano (TN) 39100, Via Galileo Galilei, 2/E
Purpose of the treatment
WCS World Certification Standards LTD carries out the processing of personal data with the following purposes:
– In relation to the contractual requirements established between the parties and the consequent fulfilment of the legal and contractual obligations arising from the same;
– For managerial, organizational, statistical, administrative and accounting purposes;
– For monitoring the performance of Auditors/Inspectors for the purpose of maintaining and improving qualification in accordance with the relevant requirements contained in ISO 19011 and as required by ISO/IEC 17021 and by ISO 17020
– To achieve effective management of business relations;
– For the fulfilment of fiscal and civil obligations and any other fulfilment of law;
– For ritual communications, pursuant to law or arising from contractual obligations.
– For audits with accreditation bodies that view customer practices certified or inspected by WCS
– For audit / inspection with accreditation bodies at customer sites
Scope of communication and dissemination
The writer declares that the data collected will never be disseminated and will not be subject to communication to third parties except for those necessary that may involve the transfer of data to public bodies, accreditation bodies and agencies or other entities for compliance with Law’s obligations The communications and spreads carried out in execution of legal obligations, the data may be communicated to other companies and or professional figures working in collaboration with the company WCS LTD
• Our sales network, authorized partners, credit institutions, debt collection companies and credit insurance companies, business information companies, outsourcing companies such as auditing, consulting firms, suppliers appointees (e.g. computer scientists), clients, Labor consultants and chartered accountants, law firms, professionals and consultants, supervisory bodies, public bodies/authorities, competent bodies and organizations/entities entitled by law; auditor ed expert technical
• ESYD (accreditation bodies)
• IAF/EA, World Associations of accreditation bodies, which can view the practices of accreditation bodies
WCS WORLD CERTIFICATION STANDARDS LTD declares that it does not transfer data to third countries except for requests by authorities listed as above within European Union (UE)
Methods of treatment and preservation
The treatment will be performed in an automated and/or manual form, in accordance with the provisions of art. 32 GDPR 2016/679 in the field of security measures, by specially appointed persons and in compliance with the provisions of art. 29 GDPR 2016/679.
The data processing will be carried out with the following safety precautions and procedures
• The data will be processed in written form and/or on magnetic, electronic, telematics support
• Making use of electronic computers, with access selected and authorized only to authorized personnel/persons;
• The accuracy of the recorded data will be checked by any authorized person;
• The security of data processed on computer support will be managed through a system of passwords and the programming of the “back-up” that periodically make the backup copy of all the data processed;
• The confidentiality of the paper documentation is ensured by the custody of the documents in special archives with access controlled and authorized only to authorized persons.
We point out that, in compliance with the principles of lawfulness, limitation of purpose and minimization of data, according to art. 5 GDPR 2016/679 Your personal data will be retained for the period of time necessary for the attainment of the purposes for which they are collected and processed.
Specifically, the same data will be kept for the duration of the contract. At the end of this period, the company will store all the data for a period of ten years, as required by applicable law, and then proceed to the definitive cancellation of the data processed by all the archives.
The data collected will be used by the company WORLD CERTIFICATION STANDARDS LTD for the complete and correct execution of the contract; They may be rendered and knowable to third parties for the protection of Rights, as well as in compliance with the obligations under the law or regulations and on request by the competent authorities.
Existence of an automated decision-making process, including profiling
The company WCS LTD does not adopt any automated decision-making process relating to natural persons, including the profiling referred to in article 22 (1) and (4) of Regulation (EU) no 2016/679.
Rights of data subjects
In order to fulfil the obligations laid down in the regulation in question, WCS WORLD CERTIFICATION STANDARDS LTD, recalls the rights of the persons concerned:
– Access: The person concerned has the right to obtain confirmation that a data processing is in progress concerning him and the access to the same
– Purpose: To obtain the particulars of the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period
– Limitation: The person concerned is entitled to the limitation of the treatment, i.e. to require conservation only if the treatment is unlawful, if it has contested the accuracy of the data, if it has exercised the right of opposition; – Oppose an automated decision- making process relating to individuals, including profiling
– Oblivion: Revoke the consent at any time without prejudice to the lawfulness of the treatment based on consent prior to revocation of the person concerned; You have the right to obtain the cancellation of the data concerning it within 15 working days if they are no longer necessary for the purposes, if they are treated illicitly, if it is direct marketing;
– Correction: The person concerned has the right to obtain the correction of inaccurate personal data and the integration of incomplete data concerning it within 15 working days;
– Complaint: The person concerned has the right to submit a complaint to the authority guaranteeing any alleged infringement;
– Portability: Only at the request of the person concerned and/or in order to fulfil legal obligations, correct conclusion and/or contracts, and/or the provision of the services and/or benefits requested by the customer, obtain the portable data, i.e. receive them from a holder of the treatment, in a structured format, of common and readable use, and transmit them to another holder of the treatment without impediments.
The data collected will be used by WCS World Certification Standards LTD for the complete and correct execution of the contract; They may be rendered and knowable to third parties for the protection of rights, as well as in compliance with the obligations under the law or regulations and on request by the competent authorities. The data will be processed for the duration of the contractual relationship and also thereafter for the fulfilment of legal obligations and for administrative purposes that will be necessary for the conclusion and/or execution of the contracts.
How to exercice your rights
You may exercise your rights with a written request sent to WCS WORLD CERTIFICATION STANDARDS LTD, the postal address of the registered office (Athens (GR), Kanigos street No 33) or the e-mail address: info@wcsltd.eu
It is highlighted that any refusal to supply the requested data make impossible for WCS WORLD CERTIFICATION STANDARDS LTD to provide the required activities.
Atene, 12/06/2024
………………………………………………………..
CEO ZIZZI VALERIO WORLD CERTIFICATION STANDARDS LTD
