Privacy Policy
Information on the processing of personal data (Art. 13 GDPR).
Data Controller
Purpose of Processing
Personal data (identification, banking, contact details) are collected exclusively for:
- Management of expense reimbursement requests;
- Mandatory administrative, accounting, and tax compliance;
- Management of platform security and access.
Legal Basis
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, as well as for compliance with a legal obligation to which the controller is subject.
Data Retention
Data will be retained for the time necessary to achieve the purposes for which they were collected and subsequently for the terms required by tax and civil law (e.g., 10 years).
Data Subject Rights
The user has the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability.
MimmaTech • info@followupmanagement.it