This document (“Information”) is intended to provide you with information regarding the processing of information, as specified below, that will be provided by you or otherwise available at our facility and that will be processed by the same and/or by other subjects identified for the purposes indicated below. The Information, in particular, is provided pursuant to EU Regulation no. 679/2016 (“GDPR”) and subsequent national adaptation provisions (jointly with the GDPR hereinafter “Applicable Regulations”).
1. Identity and contact details of the Data Controller
The data controller, pursuant to articles 4 and 24 of EU Reg. 2016/679, is FARAONE INDUSTRIE spa, with registered office in C.da Salino Via San Giovanni, 20 - 64018 TORTORETO (TE), VAT number 00732060678, Tel. (0861) 772245, email: info@faraone.com, in the person of the legal representative pro-tempore.
2. Contact details of the Data Protection Officer (so-called “RPD-DPO”)
The Data Controller does not carry out activities that require the designation of the figure of the Data Protection Officer.
3. Purposes and legal basis for processing
The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to art. 6 f) (legitimate interest) EU Reg. 2016/679 for the following purposes:
Purpose
data collection (by filling in forms) for sending newsletters or promotional communications in general via email
Legal basis for processing
Your consent
Data processing is also based on Article 6, paragraph 1, letter f): (recital 47) taking into account the reasonable expectations of the data subject… at the time and in the context of the collection of personal data, when the data subject can reasonably expect that processing will take place for this purpose.
4. Recipients and categories of recipients
The personal data provided will be communicated to recipients, who will process the data as data controllers (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (art. 29 of EU Reg. 2016/679), for the purposes listed above in point 3. Specifically, the data will be communicated to:
a) subjects who provide services for the management of the information system and communication networks including e-mail, newsletters and website management;
b) firms or companies in the context of assistance and consultancy relationships;
c) authorities competent for fulfilling legal obligations and/or provisions of public bodies, upon request.
The subjects belonging to the aforementioned categories perform the function of Data Processor, or operate in complete autonomy as separate Data Controllers. The list of Data Processors is available at the headquarters of the Data Controller.
5. Transfer of data abroad
The data will not be transferred outside the European Union.
6. Data retention period (determination criteria)
In compliance with the provisions of art. 5 paragraph 1 letter e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of the interested parties for a period of time not exceeding the achievement of the purposes for which the personal data are processed. Below is a table containing the indications of the retention times (or the criteria for determining) of Personal Data:
Purpose Retention times
data collection (by filling in forms) for sending newsletters or promotional communications in general via email until revoked by the interested party, without prejudice to the possibility for the interested party to modify and/or revoke their will at any time
8. Methods of data processing
The processing of Personal Data will be carried out using manual, computerized or telematic tools, suitable to guarantee their security and confidentiality and will be carried out by personnel duly trained in compliance with the Applicable Regulations. There is no automated decision-making process.
9. Rights that are recognized to you
We inform you that you may exercise the rights recognized by the Applicable Regulations including, by way of example, the right: a) to access your Personal Data and know their origin, the purposes and purposes of the processing, the data of the subjects to whom they are communicated, the data retention period or the criteria useful to determine it (art.15); b) to request rectification (art.16); c) cancellation (“oblivion”), if no longer necessary, incomplete, erroneous or collected in violation of the law (art.17); d) to request that the processing be limited to a part of the information concerning you (art.18); e) to the extent that it is technically possible, to receive in a structured format or to transmit to you or to third parties indicated by you the information concerning you (so-called "portability") or that which has been voluntarily provided by you (art. 20); f) to oppose their processing based on legitimate interest (art. 21); g) as well as to withdraw your consent at any time, in the event that this constitutes the basis of the processing (the withdrawal of consent does not affect the lawfulness of the processing based on the consent carried out before the withdrawal itself).
The aforementioned rights may be exercised by means of a written request addressed without formalities to the Data Controller at the contacts indicated in point 1.
The Data Controller must proceed in this sense without delay and, in any case, at the latest within one month of receiving the request. The deadline may be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you and inform you of the reasons for the extension within one month of receiving your request.
We remind you that, if the response to your requests has not been satisfactory in your opinion, you may contact and lodge a complaint with the Personal Data Protection Authority (http://www.garanteprivacy.it/) in the manner provided for by the Applicable Regulations.
Revision May 2018
ENGLISH
ITALIANO
FRANÇAIS
DEUTSCH
RUSSIAN
ESPAÑOL
POLSKI