The Organization as Data Controller (hereinafter: "Owner"), pursuant to EU Regulation 679/2016 (hereinafter: "Regulation") - considers privacy and protection of personal data the main objective of their business.

We therefore invite you, before communicating any personal data to the Owner, to read this Privacy Policy carefully because it contains important information on the protection of your personal data.

This Privacy Policy

means surrender for the site (from now on: "Site"); they are an integral part of the Site and the services we offer; is made pursuant to article 13 of the Regulation, to those who interact with the web services of the Site, either by simple consultation or through the use of specific services made available through the Site (eg contact form) The owner can be contacted at:

This document has been prepared pursuant to art. 13 of the EU Regulation 2016/679 (hereinafter: "Regulation") in order to allow you to know our privacy policy, to understand how your personal information is handled when you use our site and, if necessary, to provide a consent to the processing of your personal data expressed and aware. The information and data provided by you or otherwise acquired in the use of the services of Supplai srl will be processed in compliance with the provisions of the Regulation and the confidentiality obligations that inspire the activity of Supplai srl.

According to the rules of the Regulations, the treatments carried out by Supplai srl will be based on the principles of lawfulness, correctness, transparency, purpose limitation and conservation, data minimization, accuracy, integrity and confidentiality.

Data Controller and Data Protection Officer "DPO" The owner of the treatments carried out through the Site is Supplai srl, Via Fondazza, 53 - 40125, Bologna (BO), reachable at

Personal data subject to processing

Following browsing the Site, we inform you that Supplai srl will process your personal data which may consist of an identifier such as your name, an identification number, an online identifier or one or more elements characteristic of your physical, economic identity. cultural or social suitable to make the interested subject identified or identifiable (hereinafter only "Personal Data").

The Personal Data processed through the Site are as follows:
Contact details such as name, surname, email and telephone.
Special data may be processed by you freely provided in the "request information" form.

Nvigation Data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used only to obtain anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and / or abuses. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or third parties: except for this eventuality, the data on web contacts do not persist for more than seven days.

Special categories of personal data

In the use of the "Contacts" section of the Website, there may be a transfer of your Personal Data falling within the category of special categories of Personal Data pursuant to art. 9 of the Regulation, verbatim the "[...] data suitable to reveal the racial or ethnic origin, the political opinions, the religious or philosophical convictions, or the union membership, as well as to treat genetic data, biometric data intended to identify in a univocal way a natural person, data relating to health or sexual life or sexual orientation of the person ". We invite you to communicate such data only where strictly necessary. Indeed, we remind you that in the event of the transmission of special categories of Personal Data, but in the absence of specific consent to process such data (which in any case obviously allows you to send a curriculum vitae), Supplai srl cannot be held responsible to no title, nor can it receive disputes of any kind, since in this case the treatment will be allowed as having as object the data clearly made public by the interested party, in compliance with the art. 9 (1) (e) of the Regulation. However, we specify the importance, as already mentioned above, of expressing explicit consent to the processing of special categories of Personal Data, where it decides to share such information.

Data provided voluntarily by the interested party

In the use of some Website Services, the processing of Personal Data by third parties that you have sent to Supplai srl may occur. With respect to these hypotheses, you act as an independent data controller, assuming all legal obligations and responsibilities. In this sense, it confers on the point the widest indemnity with respect to any dispute, claim, claim for compensation for treatment damage, etc. that should reach Supplai srl from third parties whose Personal Data have been processed through your use of the functions of the Site in violation of the rules on the protection of personal data applicable. In any case, should it provide or otherwise process Personal Data of third parties in the use of the Site, it guarantees from now - assuming all related responsibilities - that this particular processing hypothesis is based on an appropriate legal basis pursuant to art. . 6 of the Regulation that legitimates the processing of the information in question.

Purpose of the processing

The treatment we intend to carry out, following your specific consent where necessary, has the following purposes:

Allow the provision of the Service requested by you respond to requests for assistance or information; fulfill any legal, accounting and tax obligations.

Legal basis and mandatory or optional nature of the processing

The legal basis for the processing of Personal Data for the purposes referred to in section 3 (a-b) is art. 6 (1) (b) of the Regulations as the processing is necessary for the provision of the Services or for the verification of requests from the interested party. The provision of Personal Data for these purposes is optional but failure to provide such data would make it impossible to activate the Services provided by the Site. The purpose of section 3c represents a legitimate processing of Personal Data pursuant to art. 6 (1) (c) of the Regulation. Once the Personal Data has been provided, processing is indeed necessary to fulfill a legal obligation to which Supplai srl is subject.

Recipients of personal data 

Your Personal Data may be shared, for the purposes referred to in section 3 above, with:

to. subjects that typically act as data processors pursuant to art. 28 of the Regulation that is: i) persons, companies or professional offices that provide assistance and consultancy services to Supplai srl in accounting, administrative, legal, tax, financial and credit recovery matters relating to the provision of Services; ii) subjects with whom it is necessary to interact in order to provide the Services (for example hosting providers) iii) or subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks); (collectively "Recipients"); the list of data processors who process data may be requested from the Data Controller.
b. subjects, bodies or authorities, autonomous data controllers, to whom it is mandatory to communicate your Personal Data by law or by orders of the authorities;
c. persons authorized by Supplai srl to process Personal Data pursuant to art. 29 of the Regulations necessary to carry out activities strictly related to the provision of Services, which are committed to confidentiality or have an adequate legal obligation of confidentiality (eg employees of Supplai srl).

Data retention

The Personal Data processed for the purposes referred to in section 3 (a-b) will be kept for the time strictly necessary to achieve those same purposes in compliance with the principles of minimization and limitation of conservation pursuant to art. 5.1.e) of the Regulations. In any case, the Data Controller will process the Personal Data for the time necessary to fulfill contractual and legal obligations.

More information about the data retention period and the criteria used to determine this period can be requested by writing to the Owner.

Rights of interested parties

Pursuant to articles 15 and following of the Rules, you have the right to request at any time, access to your Personal Data, the correction or cancellation of the same, the limitation of the treatment in the cases provided for by art. 18 of the Regulation, to obtain in a structured format, commonly used and readable by automatic device, the data concerning it, in the cases provided for by art. 20 of the Regulation. At any time, you can revoke pursuant to art. 7 of the Regulation the consent given; to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR (Guarantor for the Protection of Personal Data) pursuant to art. 77 of the Regulation, if it considers that the processing of your data is contrary to the legislation in force.

You can make a request for opposition to the processing of your data pursuant to Article 21 of the GDPR in which to give evidence of the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted in the case of the existence of legitimate and binding reasons to proceed to the treatment that prevails over your interests, rights and freedoms.

Requests should be sent in writing to the Owner.


This privacy policy has been in force since March 8, 2019. Supplai srl reserves the right to modify or simply update the content, in part or completely, also due to changes in the applicable legislation. Supplai srl will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. Supplai srl therefore invites you to regularly visit this section to become aware of the most recent and updated version of the privacy policy in order to be always updated on the data collected and on the use made of it by Supplai srl.


See example of contents usable for the implementation of the Cookie Policy page.