PRIVACY POLICY - Privacy statement pursuant to Art. 13 of EU Regulation no. 2016/679 (GDPR).

In compliance with the provisions of EU Regulation 2016/679 (European General Data Protection Regulation) we provide the necessary information regarding the processing of personal data carried out through this website. The information must not be considered valid for other websites that may be consulted via links on the website of the controller's domain, which is not to be considered in any way responsible for third party websites.

1. DATA CONTROLLER is FONDITAL S.p.A., with registered office in Vobarno (BS) - Via Cerreto, 40, in the person of the legal representative pro-tempore, (hereinafter, the "Controller" or “Data Controller”).

Data Controller contact information: Phone number 0365 878 31; e-mail: privacy@fondital.it;

The Controller may appoint other subjects, internal to the company, duly authorized and instructed to perform processing operations under the authority of the Data Controller, pursuant to Article 29 of EU Reg. 2016/679.

Processing operations may also be carried out on behalf of the Data Controller by external parties duly appointed as Data Processors in compliance to art. 28 of the EU Reg. 2016/679. A complete and updated list of the Data Processors is available at the registered office of the Owner, to the contacts indicated above.

2.PROCESSED DATA

Personal data: any information on an identified or identifiable natural person (“data subject”); a person is considered identifiable if can be identified, directly or indirectly, through a specific reference like a name, identification number, geographical position, online identification, or any specific characteristic element of his physical, physiological, genetic, psychic, economic, cultural or social identity (C26, C27, C30 GDPR).

Navigation data

IT systems and software procedures dedicated to operating this website acquire, during their regular functioning, some personal data which transmission is implicit in the use of communication protocols on the internet. These information are not acquired to be associated to identified data subjects, but, by their very nature, said information may allow to identify the users through processing and association to data possessed by third parties. In this data category there are IP addresses and domain names of the computers used by the users to connect to the website, Uniform Resource Identifier addresses of the requested resources, time of the request, the methods used to submit the request to the server, dimensions of the file obtained as a reply, code numbers indicating the state of the server’s reply (fruition, error etc) and other parameters related to the Operating system and the computer environment of the user. The data are used solely to extract anonymous statistical information on the use of the website to monitor its normal functioning and get cancelled right after the processing.

Maintenance

The personal data of the user can be treated with additional methods and aims related to the maintenance of the website.

Data deliberately provided by the user

The optional and deliberate submission of personal data (ex. Through emails to the email addresses listed on this website or by filling a registration form or a form to request catalogues, price lists and data sheets existing on this website) entails the acquisition and processing by the Data Controller of the deliberately provided users data including first and last name, address, telephone number, email address and any potential further data provided to receive access credentials to specific areas of the website (ex. Occupation) such as Sign in area, download area, events area. Moreover, specific summary information will be provided on this website concerning the user’s data processing (ex. “work with us” applications), including “Contact Us” area.

Information about the processing of personal data carried out through social media platforms

Regarding the processing of personal data carried out by the managers of the Social Media platforms used by the Controller, please refer to the information provided by them through their respective privacy policies. The Owner processes the personal data provided by users through the dedicated pages of Social Media platforms, to manage interactions with users (comments, public posts, etc.) and in compliance with the current regulations.

Cookies
For further information on the cookies used by this website, see the Cookie Policy

3. PURPOSE AND LEGAL BASIS OF DATA PROCESSING – MANDATORY OR OPTIONAL PROVISION

Personal data voluntarily provided will be processed in compliance with EU Reg. 2016/679 for the following purposes:

a) With reference to navigation data, obtaining anonymous statistical information on the use of the website and monitor its proper functioning.

  • The legal basis on which the processing is based is the legitimate interest of the Data Controller.
  • The provision of data is necessary for browsing the website.

b) Upon user request, sending the information / documents / services requested by the user by filling in the registration forms.

  • The legal basis on which the processing is based is the need to execute pre-contractual and contractual obligations to which you are a party, in addition to the need of fulfilling legal obligations.
  • The provision of your data for this purpose is optional. However, in the absence of this provision, it will not be possible for Fondital S.p.A. to process the requests sent through the Website.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

The personal data provided may be communicated to:

- service providers for the management of the information system used by the Data Controller and telecommunications networks (including e-mail, the web platform, the website, sending newsletters).

- agencies, firms, or companies in the context of assistance and consultancy relationships for the purposes described above.

- service providers in relation to user orders via the e-commerce area.

- competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request.

The subjects belonging to the above-mentioned categories perform the function of Data Processors or operate in total autonomy as separate Data Controllers. The list of Data Processors is constantly updated and available at the headquarters of the Data Controller and at the contacts listed above.

5. DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES

The personal data provided will not be disclosed and will not be transferred to non-EU countries.

  • In case of need to transfer data to third countries, the Data Controller undertakes to:
  • Make sure that the country to which the data will be sent guarantees an adequate level of protection, as required by article 45 of the GDPR; or
    Use the standard contractual data protection clauses approved by the European Commission for the transfer of personal information outside the EEA according to Article 46.2 GDPR.

The user can obtain information about the guarantees provided by the Data Controller for the transfer of data by contacting the Data Controller at the contacts listed above.

6. DATA RETENTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD

The processing will be carried out in an automated and manual way, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed.

In compliance with the provisions of art. 5 paragraph 1 letter. e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows identification of the users for a period of time not exceeding the achievement of the purposes for which the personal data are processed.

The retention time of the personal data provided depends on the purpose of the processing carried out:

a) purposes related to technical navigation data for the proper functioning of the website: storage only for the relative session, at the end of which the data are deleted.

b) purposes of responding to the request for information / documents / contacts (12 months);
 

7. RIGHTS OF THE INTERESTED PARTIES

You can assert your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21, 22 of Regulation (EU) 2016/679, towards the Data Controller, by e-mail to the address: privacy@fondital.it; you have the right, at any time, to obtain from the Data Controller access to your personal data and request information relating to the purposes, the categories of personal data processed, the recipients to whom the personal data will be communicated, with particular reference to recipients in third countries, the retention period of personal data or, where this is not possible, the criteria for its definition; the existence of an automated decision-making process, including profiling. You have the right to rectify, delete your personal data or limit their processing. If the processing is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a), you have the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on consent given before revocation. You have the right to be informed of the existence of adequate guarantees relating to the transfer of your data to a third country or to an international organization pursuant to Article 46 of Regulation (EU) 2016/679. You have the right to the portability of your personal data; in this case, the Data Controller will provide you with your personal data, in a structured format, commonly used and readable by automatic device, and the right to transmit such data to another Data Controller. Furthermore, you have the right to oppose at any time, for reasons related to your specific situation, the processing of your personal data pursuant to Article 6, paragraph 1, letters e) or f). You have the right not to be subjected to a decision purely based on automated processing, including profiling, which produces legal effects or similarly significantly affects your person. Without limiting any other administrative or judicial action, in the event that you consider that the processing of your personal data violates Regulation (EU) 2016/679, you have the right to submit a complaint to the Privacy Guarantor (https://www.garanteprivacy.it ), or to take appropriate legal action.

8. MINORS

The Website and the Products offered therein by Fondital S.p.A. are in no way intended for minors under the age of 18, therefore the Data Controller does not carry out any collection and / or processing of personal data referring to minors. In case personal data relating to minors are entered on the Website, Fondital S.p.A. will cancel them.

9. CHANGES TO THE PRIVACY POLICY

The Data Controller reserves the right to modify, update, add or remove parts of this privacy policy at its discretion and at any time. The user is required to periodically check for any changes. To facilitate this verification, the policy will contain an indication of the last update. The use of the site after the publication of the changes will constitute acceptance of them.

Updating date: 20th June 2023



Last update : 7/13/2023 3:27:34 PM

Information

n. Reg. Imprese: 01963300171 - EORI/P. IVA: IT00667490981 - R.E.A. BS - 280789 - Capitale sociale: € 60.000.000 i.v. “Soggetta all’attività di direzione e coordinamento ex art. 2497 bis C.C. da parte di SILMAR GROUP S.p.A. - Cod. Fisc. 02075160172”