Notification Suppliers

Notification issued pursuant to Article 13 of European Regulation 679/2016 (GDPR) on the following processing of personal data: Suppliers and their employees

Dear Supplier,
We inform you that, pursuant to Article 13 of EU Regulation 679/2016, the personal data collected will be processed by our company in order to manage the relationship and the legal and contractual obligations that arise from this.
For the purposes of the aforementioned Regulation:
a)  EEIG Traforo del Monte Bianco is the ‘Data Controller’;
b)  If you are an natural person (or sole trader or professional person), you are the 'data subject', and your data will be processed as indicated below; You also have the rights that we set out below.
c)  If you are a legal person (company, organisation, etc.) you are NOT the 'data subject', your data is NOT Personal Data and the legislation in question does NOT apply to the processing thereof.
d)  In any case, any administrators/representatives/employees/partners/officials affiliated with you - whose personal data is incidentally provided or communicated during contact with the Data Controller on your behalf - are 'data subjects', and their data will be processed as indicated below; these parties also have the rights described below. As such, you are required to disclose this information to the data subjects in question.
Data Controller and DPO. The Data Controller is EEIG Traforo del Monte Bianco - Piazzale Sud del Traforo del Monte Bianco 11013 COURMAYEUR AO (Italia), tel. +39 0165 890411 fax +39 0165 890419, e-mail geie-tmb@tunnelmb.com. The Data Protection Officer (DPO) can be contacted via email, at the address dpo@tunnelmb.com, or by telephone at +39 0165 0165890411.
Purposes, legal basis and retention period. The processing will take place for the following purposes, legal bases and retention period:
 
Purposes: Management of the contract and of the relevant tax obligations. Possible legal protection (judicial or extra-judicial) of their rights and sharing for internal administrative purposes with the two concessionary companies associated with the Data Controller, as well as with the Società Italiana per il Traforo Autostradale del Fréjus per Azioni (SITAF S.p.A.) e la Société Française du Tunnel Routier du Fréjus (SFTRF), with which the road access agreement exists for invoicing purposes.
Legal basis: Execution of a contract or of pre-contractual activities, fulfilment of the legal obligations and the legitimate interests of the Data Controller and of third parties.
Retention period or criteria: For a period of time not greater than that required to fulfil the purposes of the contract and the retention obligations provided for by the relevant legislation on this issue. In the event of a dispute, they shall be kept for the period necessary for the dispute (e.g. the duration of legal proceedings)
 
Recipients or Categories of recipients. Your personal data will be processed by the Data Controller and persons strictly authorised by it. Data will not be communicated outside the structures of the Data Controller, except for:

  • any external Data Processors with whom a contract has been established pursuant to Article 28 of the GDPR;

  • the two concessionary companies (Società Italiana per Azioni per il Traforo del Monte Bianco and Société de Gestion du Tunnel du Mont Blanc SGTMB);

  • Banks or other independent Data Controllers, whose processing is necessary for the management of the contract;

  • Public Authorities, including Judicial Authorities.


The data will not be disseminated.
Nature of the data conferral and consequences of refusal to confer the data. The communication of the data is mandatory: Failure to provide the data (or the provision of insufficient data) will render it impossible for the Data Controller to fulfil the contractual and legal obligations.
Right to lodge a complaint with the Supervisory Authority. You have the right to lodge a complaint with the Supervisory Authority (For Italy: Garante per la protezione dei dati personali www.garanteprivacy.it and for France: CNIL Commission Nationale de l'Informatique et des Libertés www.cnil.fr/fr).
 
Rights of Data Subjects. You may exercise your rights at any time to access personal data, correct or cancel them, limit processing, opposition and portability, for the purposes and within the limits as set out in Articles 15-21 of the European Regulation 679/2016 by sending an email request to the address dpo@tunnelmb.com
We use cookies to ensure you get the best experience on our website. By using this website, you accept terms and conditions in full.