Business Relationship Notice

Pursuant to art.13 of EU Regulation 2016/679
General Data Protection Regulation

Dear Mr/Mrs/Mrs.

below we provide a description of the essential characteristics of the processing of your Personal Data by Trueblue S.p.a., having its registered office in Viale del Lavoro 33, 37135 Verona - Italy, Tax Code and VAT number 03258370232, acting as Data Controller (hereinafter "Trueblue", the "Data Controller" or the "Company"). The processing will be regulated by EU Regulation 2016/679, General Data Protection Regulation (hereinafter the "Regulation") and Legislative Decree no. 196 of June 30, 2003, as amended. (hereinafter the "Code"). Personal data means “any information relating to an identified or identifiable natural person”; processing means "any operation or set of operations, which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction". Your personal data will be processed for the management of the contractual relationship - regardless of the type and in all its phases - and consequently for the fulfillment and exercise of the related and mutual obligations and rights. With simple request to the references below, you may exercise the rights provided for by the Regulation, including obtaining confirmation and communication of the data concerning you.  For further details we refer you to the detailed information below.

In accordance with Article 13 of EU Regulation 2016/679, General Data Protection Regulation (the "Regulation"), we provide you with the following information on the processing of your personal data.

1) Identity and contact details of the Data Controller:

The Data Controller of Personal Data is Trueblue S.p.a., located in Viale del Lavoro 33, 37135 Verona – Italy, F.C. and VAT no. 03258370232, tel. +39 045 92 00 901, fax +39 045 92 00 950, e-mail info@truebluecorp.com.

2) Data Protection Officer (DPO):

The Data Protection Officer appointed by the Company pursuant to art. 37 of the Regulation can be contacted at the following e-mail address dpo@truebluecorp.com

3) Purpose and legal foundation for the processing of personal data:

Your personal data will be processed, by automated and non-automated means, in accordance with the Regulation, for the following purposes:

a. To fulfill the obligations of law, regulation, Community legislation, including tax or accounting (e.g. billing, bookkeeping and accounting records), relating to business relationship with you in progress;

b. To exercise the contractual obligations and to exercise the rights deriving from the business relationship with you in progress (including possible payments of fees, exchange of information and maintenance of the business relationship).

The information and personal data acquired for the purposes described above in points a) and b) is required, and the failure to provide data may prevent Trueblue from allowing to manage business relationship.

The processing of your personal data for the purposes and in the manner described in this statement, can be done without your consent, pursuant to art. 6, paragraph 1, letter b) and c) of the Regulation.

Among the personal data you provide for the above-mentioned purposes, there may be included contact data of persons who work for you as employees or independently (e.g. name, surname, company e-mail address, telephone). The Data Controller undertakes not to process such data for purposes other than those indicated above. Please do not indicate in any case data that refer to particularly intimate and private situations (eg. that refer to your health, religious orientation, etc..).

4) Recipients of your personal data

Your data will not be disseminated. In order to better manage business relationship with you, your data may be disclosed to personnel of the Sales, Marketing and Administrative Divisions and any professionals authorized to manage the the business relationship that meet the requirements of the Regulations, as well as companies that provide services instrumental to business activities (e.g. suppliers of platforms for managing commercial flow) and analysis (e.g. suppliers of dedicated software). In order to comply with legal obligations, regulations, EU legislation or contractual obligations, as well as to exercise rights in court, your personal data may be disclosed also to the following third parties (ex art. 4, point 10 of the Regulation): (i) credit institutions; (ii) professionals and consultants in legal, fiscal and accounting matters; (iii) insurance companies and insurance brokers; (iv) public authorities, public and administrative bodies, state and EU control bodies. Where necessary, Trueblue has appointed the recipients of your personal data as Data Processors pursuant to art. 28 of the Regulations. The names of all Data Processors may be requested by means of a communication to be sent to the following e-mail address: privacy@truebluecorp.com

5) Transfer outside of the European Union

In order to allow a correct and efficient management of the business relationship your personal data may be transferred to countries outside the European Economic Area, including the U.S.A., where some of our providers of services/software needed for those activities are located. Your data will be transferred in full compliance with the safeguards, measures and rights set forth by art. 46 of the GDPR. You may obtain additional information about the transfer of your data and the safeguards adopted to protect them by writing to privacy@truebluecorp.com

6) Methods of personal data processing

Your data will be processed electronically in compliance with current legislation and, in any case, in such a way as to ensure the security and confidentiality and prevent unauthorized disclosure or use, alteration or destruction.

7) Retention period of personal data:

For the purposes above specified, your personal data will be processed for the entire duration strictly necessary to manage the business relationship. Il criterio per determinare l’effettivo periodo di conservazione dei dati sarà rappresentato dal termine di prescrizione delle azioni derivanti dal rapporto con Lei intercorso. Ad ogni modo i Suoi dati personali non verranno conservati per un periodo superiore a 10 (dieci) anni dalla cessazione del rapporto commerciale, dopodiché i medesimi dati verranno distrutti o resi anonimi.

8) Rights under Articles 15 and following of the Regulation

By means of a notice to be sent to the e-mail address info@truebluecorp.com you may exercise your rights under Articles 15 et seq. of the Regulations, including, in summary, those of:

• Obtain confirmation whether or not personal data concerning you is being processed;
• Obtain access to your personal data and the information indicated in art. 15 of the Regulation;
• Obtain the correction of inaccurate personal data concerning you without undue delay or the integration of incomplete personal data;
• Obtain the deletion of personal data concerning you without undue delay;
• Obtain the limitation of the processing of personal data concerning you;
• Be informed of any rectification, deletion or restriction of processing carried out in relation to personal data concerning you;
• Receive personal data concerning you in a structured, commonly used and machine-readable format.

You can find the full list of rights of data subjects on www.garanteprivacy.it.

9) Complaint to the Data Protection Authority

We remind you that, if you believe that the treatment that concerns you violates the provisions of the Regulation, you can always submit a complaint to the Data Protection Authority for the protection of personal data (www.garanteprivacy.it), or to the Data Protection Authority of the country where you usually reside, work or the place where the alleged violation occurred.