Skip to main content

Privacy statement


IWIS SRL headquartered in Italy at Via dell’Industria, 21 – 31029 Vittorio Veneto (TV), in its capacity as data controller (hereinafter “Controller”), hereby issues this Privacy Statement to the Supplier (hereinafter also referred to as “Data Subject” or “you”) in compliance with European and Italian data protection regulations.

Purposes and legal basis for processing
The Controller processes the Supplier’s personal data in order to adopt pre-contractual measures, meet contractual and regulatory obligations relating to the business dealing, as well as to pursue its legitimate interests and conduct supplier qualification and/or monitoring processes, to handle any disputes and, more generally speaking, to handle business dealings correctly.
The legal basis for processing is that processing is necessary to pursue the purposes set out above.

Data retention period
The Controller will keep the Supplier’s data for the duration of the business dealing and, subsequently, for the purpose of meeting any obligations relating to or arising out of the business dealing entered into, for the period prescribed by law and according to the time limit on the exercise of rights arising out of the business dealing, except where data must be held longer for the time it takes to settle (whatever the outcome) any disputes that may have arisen.

Nature of data supply and consequences of declining to supply said data
The supply of data is necessary and, consequently, should you decline to supply all or part of the data required, it may mean the Controller is unable to pursue the purposes set out above.

Categories of recipients
The Controller will not share the data indiscriminately, but does plan to disclose them to individuals in-house who are authorized to process data on the grounds of their respective duties, as well as to other companies within the Group, credit institutions, business associations and/or organizations, professionals or service companies, as well as to public and private bodies, which may be required following inspections and audits.
These recipients, where they are tasked with processing data on behalf of the Controller, shall be appointed as data processors with a relevant contract or other legal act.

Transfer of data to another country and/or international organization
Personal data will not be transferred to other non-EU countries or to international organizations.

Rights of data subjects
As the Data Subject, you are entitled to ask the Controller for access to your personal data and for their rectification if they are inaccurate, to have them erased, or restrict their processing, in certain specified situations, and to object to processing on the basis of the legitimate interests pursued by the Controller, as well as to obtain portability of the data personally supplied only where said data are subject to automated processing on the basis of your consent or a contract. As the Data Subject, you also have the right to withdraw your consent previously given for processing purposes requiring consent, which shall not affect the lawfulness of processing carried out up to the time of its withdrawal.
To exercise your rights, you can use the form accessed via the link and email it to: As the Data Subject, you also have the right to bring a claim before your competent data protection authority: in Italy, this is the Italian information commissioner’s office (“Garante”