Privacy Policy

PRIVACY POLICY

Privacy Policy for Customer and Supplier

 INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA UNDER THE 

GENERAL DATA PROTECTION REGULATION (GDPR)

This Policy reflects SCC Worldwide Limited’s commitment to comply with required standards governing the security of sensitive and confidential information.

This Policy ensures the protection of confidential and sensitive information stored in whatever format, including that stored or transmitted electronically:

• It details the methods of collection and the purpose of its use.
• It describes the processing of personal data carried out by SCC Worldwide Limited.
• It confirms the rights guaranteed to the data subjects by the current privacy legislation.

SCC Worldwide limited may collect, use, access and process personal data for the

purpose of entering into a contractual relationship with its customer or supplier at 

the commencement of that relationship, during the performance of the contract up 

to its conclusion, for the purpose of the correct performance of said contract.

The following data may be collected:

• Information on the customer/supplier: for example, name and surname, place and date of birth.

• Contact details of customer/supplier: telephone number, mobile phone number, e-mail address, residential address, home/office address, first name/surname and contact of the customer’s or supplier’s employee or contact persons:
• Identification details: identification numbers issued by government agencies (for example, VAT number):
• Financial information: account number and bank account details and other financial information.

The collection and processing of personal data is carried out for the following purposes:

1. To fulfil pre contractual/contractual obligations.  The processing of the personal data is performed in order to carry out the preliminary and consequent activities related to the management of the contractual relationship, as well as those instrumental and functional to its performance;
2. To comply with obligations required by law including accounting and tax obligations;
3. Purposes related to the good performance of company activities – in compliance with current regulations, company policies, the quality system, and the protection, before a court of law, of the assets and the relevant rights and interests of SCC Worldwide Ltd.
4. To performing due diligence process to potential investors and, therefore, the communication of the necessary data – excluding sensitive date – to these subjects.

Legal basis of the processing are:

• The execution of pre-contractual of contractual measures.
• Compliance with legal obligations:
• The pursuit of a legitimate interest of SCC Worldwide Limited.

The processing for the above-mentioned purposes is performed with both automated and non-automated, means, in compliance with obligations of confidentiality and security relevant and applicable rules and regulations.

The data is processed at the registered office of SCC Worldwide Limited, Lynthorne House, InterCity Way, Leeds LS13 4LX, West Yorkshire, England.

The data is also processed by professionals and/or companies in charge of carrying out technical, development, management and administrative/accounting activities, as well as activities related to the provision of the service.

With regard to the possible transfer of data to third countries, the processing will take place according to one of the means allowed by current law.

Personal data will not be disseminated and, where necessary for the pursuit of the aforementioned purposes, it may be communicated by SCC Worldwide Limited to:

• subjects entitled to access the data by virtue of a provision of law,       regulation or community legislation, or based on a provision of the Judicial Authority or other public Authorities within the limits set by applicable rules or regulations:

• subjects authorised to access data necessary for the performance of activities auxiliary to the contractual relationship
• SCC Worldwide Limited data may only be processed by authorised and instructed employees and collaborators.

SCC Worldwide Limited may also engage data processors pursuant to art. 28 of the Regulation, such as external companies to which the management and maintenance of IT systems are entrusted; for activities functional to the activities of SCC Worldwide Limited.

Personal data processed for the purposes indicated above, may be kept for the time necessary to fulfil contractual obligations; to fulfil all legal obligations or according to the terms prescribed by law, regulation or community legislation.  Once this deadline has elapsed, personal data shall be securely erased or anonymised unless further processing (for a limited period) is required for the purposes of complying with retention periods established by commercial and tax law.

The data subject has the right to ask at any time, to access his or her personal data; to have them rectified or erased; to object to the processing. The data subject has the right to request the restriction of the processing, as well as to withdraw consent at any time; to receive the personal data concerning him or her which he or she has provided, in a commonly used and readable format; to lodge a complaint with the competent supervisory authority, if he or she considers that the processing of his or her data is not in compliance with the applicable legislation.

The data subject has the right to object to the processing of his or her personal data, by attaching the reasons justifying the objection;  SCC Worldwide Limited has the right to evaluate the request, and deny the objection if it demonstrates compelling legitimate grounds for the processing which override the interest, rights and freedoms of the data subject.

To exercise the aforementioned rights, or direct any queries, the requests must be addressed in writing by e-mail to dpo@sccuk.net