This document (“Information”) intends to provide you with information regarding the processing of information, as specified below, which will be provided by you or in any case available at our facility and which will be processed by the same and/or by other subjects identified for the purposes indicated below. The Information, in particular, is provided pursuant to EU Regulation no. 679/2016 (“GDPR”) and subsequent national adaptation provisions (jointly with the GDPR hereinafter “Applicable Regulations”).
1. Identity and contact details of the Data Controller
The data controller, pursuant to articles 4 and 24 of EU Reg. 2016/679, is FARAONE INDUSTRIE spa, with registered office in C.da Salino Via San Giovanni, 20 - 64018 TORTORETO (TE), VAT number 00732060678, Tel. (0861) 772245, email: info@faraone.com, in the person of the legal representative pro-tempore (hereinafter “Data Controller”).
2. Contact details of the Data Protection Officer (so-called “RPD-DPO”)
The Data Controller does not carry out activities that require the designation of the figure of the Data Protection Officer.
3. Purpose and legal basis of the processing
The Personal Data collected will be processed for the purposes and on the basis of the legal bases listed below:
| Purpose | Legal basis of processing |
| point 3, letter a): for the management of your contractual relationship or to execute pre-contractual measures (such as, for example, the request for information or a quote). In this case, you are free to provide your Personal Data, however failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request. | the processing is necessary in relation to the execution of a contract to which you are a party and is necessary to fulfill a legal obligation to which you are subject. subject the Owner |
| point 3, letter b): subject to your specific consent, revocable at any time, to send you promotional communications relating to the Owner and communications relating to events organized by the Owner (hereinafter "marketing purposes") | your consent |
4. Categories of personal data processed
Within the limits of the purposes and methods described in this Policy, information that can be considered as "Personal Data" may be processed, which includes your personal details, your contact details (such as, for example, mobile number, e-mail address, etc.).
5. Recipients and categories of recipients
Personal data will not be disclosed, i.e. they will not be made known to unspecified subjects. They may instead be communicated to well-defined subjects, in full compliance with legal requirements, for purposes strictly related to those previously indicated. Any access to your personal data is limited to subjects authorised by the Data Controller. Communication to the identified recipients, only if involved and functional, is linked to the achievement of the purposes referred to in the previous point 3, therefore the personal data collected and processed may be:
a) used anonymously for statistical purposes;
b) made available to the Data Controller's collaborators, in their capacity as of Managers or persons authorised to process personal data;
c) communicated to third parties, whether natural or legal, Public Administrations, professionals, law enforcement agencies, government bodies, regulatory bodies, courts or other public authorities authorised by law;
d) subjects who provide services for the management of the information system and communication networks including email, newsletters and website management;
e) studies or companies in the context of assistance and consultancy relationships;
f) if necessary, transferred to another Data Controller in accordance with the provisions of the GDPR, also with regard to the right to data portability.
The information may also be communicated whenever communication may be necessary to comply with requests from the Judicial or Public Security Authorities. The data collected will not be disclosed under any circumstances.
The list of Data Processors is available at the Data Controller's headquarters.
6. Transfer of data abroad
The data will not be transferred outside the European Union.
7. Data retention period (determination criteria)
Below is a table containing the indications of the retention times (or the determination criteria) of the Personal Data:
| Purpose | Retention times |
| point 3, letter a): contract management | For the entire duration of the relationship and subsequently for 10 years (ordinary limitation period). |
| point 3, letter b): marketing purposes | Until revoked by the interested party, without prejudice to the possibility for the interested party to modify and/or revoke their will at any time |
8. Methods of data processing
The processing of Personal Data will be carried out using manual, computerized or telematic tools, suitable to guarantee their security and confidentiality and will be carried out by personnel duly trained in compliance with the Applicable Regulations. There is no automated decision-making process.
In addition to cases in which it is necessary to contact you for needs related to the management of your position, where you consent to the processing of your data for the purposes referred to in point 3, letter b), you may be contacted via e-mail, newsletter, text message, instant messaging systems or through any equivalent electronic tool or by paper mail or call via an operator to all the contact details provided. If you prefer to be contacted only at one or some of these addresses, you may make an express written request addressed informally to the Data Controller.
9. Rights that are recognized to you
We inform you that you may exercise the rights recognized by the Applicable Regulations including, by way of example, the right:
a) to access your Personal Data and know its origin, the purposes and aims of the processing, the data of the subjects to whom they are communicated, the data retention period or the criteria useful for determining it (art.15); b) to request rectification (art.16);
c) cancellation (“oblivion”), if no longer necessary (art.15); necessary, incomplete, erroneous or collected in violation of the law (art.17);
d) to request that the processing be limited to a part of the information concerning you (art.18);
e) to the extent that it is technically possible, to receive in a structured format or to transmit to you or to third parties indicated by you the information concerning you (so-called "portability") or that which has been voluntarily provided by you (art.20);
f) to oppose their processing based on legitimate interest (art. 21);
g) as well as to withdraw your consent at any time, in the event that this constitutes the basis of the processing (the withdrawal of consent does not affect the lawfulness of the processing based on the consent carried out before the withdrawal itself).
The aforementioned rights may be exercised by means of a written request made without formalities to the Data Controller at the contacts indicated in point 1.
The Data Controller must proceed in this direction without delay and, in any case, no later than one month after receiving the request. The deadline may be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you and inform you of the reasons for the extension within one month of receiving your request.
We remind you that, if the response to your requests has not been satisfactory in your opinion, you may contact and lodge a complaint with the Authority for the Protection of Personal Data (https://www.garanteprivacy.it/) in the manner provided for by the Applicable Regulations.
Review May 2018
ENGLISH
ITALIANO
FRANÇAIS
DEUTSCH
RUSSIAN
ESPAÑOL
POLSKI