Informative ex art. 13 and 14 of EU Regulation 679/2016 and consent to the processing of personal data of the data subject regarding the information and updating activity by sending newsletters by Fresia Alluminio S.p.A.

Under the terms of art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on data protection (hereinafter "Regulation" or "GDPR"), in relation to the processing of your personal data Fresia Alluminio S.p.A. (hereinafter referred to as "FRESIA ALLUMINIO" or "Holder"), whose identity and contact details are listed below, 

We inform you

of the following.

1. Identity and contact details of the controller.

Data controller pursuant to Art. 4 and 24 of the Regulation is Fresia Alluminio S.p.A., in the person of the legal representative pro tempore, with registered office in Volpiano (TO) - via Venezia n. 35/A, fiscal code and VAT number 02674950015, PEC fresialluminio@pec.it.

You can contact the Data Controller by writing to the address above or by sending an e-mail to the following e-mail address: privacy@fresialluminio.it.

2. Contact details of the data protection officer.

The figure of the DPO (Data Protection Officer) is not currently foreseen.

3. Purpose of the processing for which the data are intended and legal basis of the processing.

The personal data provided by you to the undersigned Data Controller will be processed exclusively for the purposes of sending periodical, to the e-mail address to you referable and free of charge, informative newsletters and updates by Fresia Alluminio, related to commercial news and products.

Within the aforementioned purpose, the processing is carried out in fulfillment of a specific request from you and, therefore, the legal basis of the processing for the aforementioned purposes is art. 6, paragraph 1, point a) of the Regulation ("the interested party has expressed consent to the processing of their personal data for one or more specific purposes"), and then your express consent granted by choice made with your registration.

The undersigned Data Controller specifies that for the purposes stated above, it does not acquire data that fall within the scope of the particular categories of personal data referred to in art. 9 of the Regulation (in particular, personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, data relating to the person’s health or sexual life or sexual orientation). Where this is the case, the Data Controller will contact you for your specific consent pursuant to art. 9, paragraph 2, letter a) of the Regulation ("the data subject has given his explicit consent to the processing of such personal data for one or more specific purposes").

4. Methods of data processing.

In relation to the aforementioned purposes, the processing of your personal data will be carried out using computer, telematic and manual tools for the mere realization of the purposes themselves and, in any case, in order to ensure its security and confidentiality through the use, by the Owner, of appropriate technical, technological and organizational measures in relation to the requirements of art. 32 of the Regulation.

5. Any recipients and any categories of recipients of personal data.

The processing of the personal data provided by you will be carried out through subjects expressly and specifically designated by the Data Controller who operate as data processors (art. 28 of the Regulation) or as authorized persons (art. 29 of the Regulation) i.e., as subjects expressly designated to the processing of data in the terms provided for by the Regulation and national legislation to comply with the provisions of the GDPR. The data provided by you may be processed by the Data Controller directly and also communicated to trusted companies or external professionals whose collaboration the Data Controller benefits or which may benefit in the future, but always and only for the purposes indicated in this information.

The personal data of the interested party are not subject to dissemination, or the Owner will not disclose or make available in any way to indeterminate subjects or other than those indicated above.

6. Transfer of personal data to a third country or international organisation.

No personal data of the interested party will be transferred to a third country outside the European Union or to International Organisations.

7. Conservation period of personal data.

Without prejudice to the powers referred to in point 8 below) ("Rights of the interested party"), the personal data subject to processing will be stored in compliance with the provisions of art. 5, paragraph 1, lett. e), the Regulation in a form that allows the identification of data subjects for a period not exceeding the achievement of the purposes indicated above for which personal data are processed. Personal data shall be stored according to the following criteria: (a) for the time strictly necessary to achieve the purposes inherent in the implementation of the free service for which they are processed; (b) for the time strictly necessary for the fulfilment of legal obligations, regulations or provisions issued by Supervisory and Control Bodies.

At the end of the conservation period, your data will be deleted, or made anonymous.

8. Rights of the interested party.

Pursuant to art. 15 and ss. of the Regulation, you have the right to ask the Data Controller: 

1. access to your personal data;
2. the rectification or cancellation of the same or the restriction of the processing concerning you;
3. opposition to the processing;
4. the portability of data in the terms referred to in art. 20 of the Regulation;
5. if the processing is based on Article 6, paragraph 1, letter a) or Article 9, paragraph 2, letter a) of the Regulation, the withdrawal of consent at any time without affecting the lawfulness of the processing based on the consent given before the revocation.

Without prejudice to any other administrative or judicial remedy, a data subject who considers that the processing concerning him or her infringes the GDPR shall have the right to lodge a complaint with a supervisory authority, in the Member State of his or her habitual residence, where works or the place where the alleged infringement occurred pursuant to art. 77 of the Regulation (the Italian supervisory authority is the Guarantor for the protection of personal data).

To exercise the above rights, the interested party may contact the Data Controller at the contact details indicated in point 1 of this statement.

9. Existence of automated decision-making, including profiling.

Pursuant to art. 13, paragraph 2, letter f) of the Regulation, we inform you that the personal data collected will not be subject to automated decision-making processes (including the profiling referred to in art. 22, paragraphs 1 and 4 of the Regulation) by Fresia Alluminio.

10. Processing of personal data for a purpose other than that for which they were collected.

If the Data Controller intends to further process the personal data for a purpose other than that for which they were collected, prior to such further processing, he will provide you with information about this different purpose and any other relevant information referred to in Arts. 13 and 14, paragraphs 2 and 3 of the Regulation and will require the provision of further specific consent.