Privacy Information Notice

Pursuant to art. 13 of European Regulation 679/2016 (GDPR)

USCO S.p.A. – VAT ID No.: 01893120368 – with registered office in Modena (MO), Via delle Nazioni no. 65, in the person of the interim legal representative, as Controller of the data processing (hereinafter “Controller”), wishes to inform you that, pursuant to art. 13 of EU Regulation no. 679/2016, it needs to process the personal data you provided when signing the Agreement and/or Sales Order for the supply of goods or when receiving the goods, in compliance with current regulations.

1. Purpose of the Processing and Categories of Data Processed

The Controller processes personal identification data collected during the signing of Agreements/Sales Orders (including via e-commerce) or upon receipt of goods (e.g., transport documents, CMR).

  • Data types: Personal details (name, surname, tax code, ID of legal representative), contact information (phone, email), and financial information (bank details).

  • Third-party data: Data of the client company provided to facilitate shipment or fulfill contractual obligations.

  • Minors: The Controller does not knowingly collect data from persons under 18 years of age.

2. Purpose, Legal Basis, and Consequences of Failure to Communicate Data

Your data are processed for the following purposes:

A. Contractual Necessity To perform preliminary activities and fulfill contractual obligations (shipment, billing, credit recovery, etc.).

  • Legal Basis: Performance of a contract.

  • Consequence: Providing data is mandatory; failure to do so prevents the establishment of the relationship.

B. Legal Requirements To fulfill legal, accounting, fiscal, and administrative obligations.

  • Legal Basis: Compliance with legal obligations.

  • Consequence: Mandatory by law.

C. Legitimate Interest For credit risk protection (reliability checks), internal/external audits, and administrative purposes within the USCO Group.

  • Legal Basis: Legitimate interest of the Controller.

D. Direct Marketing Market research, customer satisfaction analysis, and sending promotional materials.

  • D.1. Via conventional systems (mail, operator calls).

  • D.2. Via automated systems (email, SMS, automated calls).

  • Legal Basis: Optional Consent. You may revoke consent at any time.

E. Profiling Analysis of consumption choices to provide “tailored” services.

  • Legal Basis: Optional Consent.

3. Methods of Data Processing

Processing includes collection, recording, storage, retrieval, disclosure, and erasure. Data may be processed via paper means or electronic/automated systems, ensuring transparency and protection of your rights.

4. Data Storage Period

Data is retained for the time necessary to fulfill the purposes mentioned, satisfy legitimate business interests, or comply with legal obligations.

5. Categories of Personal Data Recipients

Data may be disclosed to:

  • Authorized personnel: Employees and collaborators of the Controller.

  • Group Companies: Parent, subsidiaries, or affiliates of USCO S.p.A.

  • Third-party providers: Banks, legal firms, IT providers, auditors, and transport agencies acting as Data Processors.

  • Public Authorities: Police or judicial bodies where required by law.

6. Data Transfer

Data is stored within the European Union. Transfers outside the EU/EEA will only occur if the destination country guarantees adequate protection or through standard contractual clauses approved by the European Commission.

7. Rights of the Data Subject

Pursuant to Articles 15-21 of the GDPR, you have the right to:

  • Access: Confirm if your data is being processed and receive a copy.

  • Information: Know the source, purposes, and recipients of your data.

  • Rectification: Update or correct inaccurate data.

  • Erasure (Right to be forgotten): Request deletion of data processed in violation of the law.

  • Objection: Oppose processing for legitimate reasons or for marketing purposes.

  • Portability: Receive your data in a structured format.

  • Withdraw Consent: At any time, without affecting the lawfulness of processing based on consent before its withdrawal.

  • Complaint: Lodge a complaint with the Garante Privacy.

8. How to Exercise Your Rights

To exercise your rights, please contact the Controller:

  • Registered Mail: USCO S.p.A., Via delle Nazioni no. 65, 41122 Modena (MO), Italy.

  • Email: privacy@usco.it

The deadline for a reply is one month (extendable to three months for complex cases). The exercise of these rights is generally free.

9. Controller and Data Processors

The Controller is USCO S.p.A. An updated list of Data Processors is available at the Controller’s main office.