NOTICE ON THE PROCESSING OF PERSONAL DATA (Art. 13 of EU Regulation 2016/679 – GDPR) DAPAM s.r.l. - Via Ponte d'Uscio, 2/c Borno (BS)
1. Data Controller
The Data Controller is DAPAM S.R.L. (hereinafter also referred to as the “Company” or the “Controller”),
Tax ID and VAT No. 01760180982, with registered office in Borno (BS) at Via Porta d’Uscio 2/C, and
operational headquarters in Darfo Boario Terme (BS), Via Fausto Cadei 40, telephone 0364.529172, email:
dapam@dapam.it, certified email (PEC): dapam@pec.dapam.it, in the person of its current legal representative.
2. Types of data processed
The Data Controller processes personal identification and contact data (e.g., first name, last name, address, phone number, email), as well as administrative, tax, and banking data necessary for the performance of the contractual relationship.
3. Purposes of processing and legal basis
Personal data is processed for the following purposes:
a) Performance of contractual or pre-contractual obligations
Management of the contractual relationship
Provision of transportation services
Support and operational communications
Legal basis: Art. 6(1)(b) GDPR
b) Compliance with legal obligations
Tax, accounting, and administrative obligations
Compliance with public authorities
Legal basis: Art. 6(1)(c) GDPR
c) Protection of the Data Controller’s rights
Potential dispute resolution
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
4. Methods of processing
Data processing is carried out using both paper-based and electronic means, in compliance with the principles of lawfulness, fairness, and transparency set forth in the GDPR, and by implementing appropriate security measures in accordance with Article 32 of the GDPR.
No automated decision-making processes or profiling activities are carried out pursuant to Article 22 of the GDPR.
5. Provision of Data
The provision of data is mandatory for the purposes indicated above. Failure to provide such data will make it impossible to establish or continue the contractual relationship.
6. Disclosure of Data
Personal data may be disclosed to third parties, designated as Data Processors where necessary, including:
Professional firms (accountants, tax consultants)
Banks and financial institutions
Law firms
Public administrations and competent authorities
Authorized employees and collaborators
The data will not be disclosed.
7. Transfer of data outside the EU
Personal data is not transferred to third countries outside the European Economic Area.
8. Data retention period
Data will be retained for the time necessary to achieve the purposes indicated above and, in particular:
Contractual data: for the entire duration of the relationship
Administrative and tax data: up to 10 years from the termination of the relationship, in accordance with legal obligations
9. Rights of the data subject
The data subject may exercise at any time the rights provided for in Articles 15–22 of the GDPR including:
Access to personal data
Rectification or erasure of data
Restriction of processing
Objection to processing
Data portability
Requests may be sent to the following email address: dapam@dapam.it
10. Right to lodge a complaint
The data subject has the right to lodge a complaint with the Data Protection Authority if they believe that the processing violates applicable law.
11. Updates
This policy may be subject to changes and updates. We therefore encourage you to review it periodically.
(Updated on 05/11/2026)
