INFORMATIVA PRIVACY CLIENTI e FORNITORI

Information pursuant to Article 13 of Regulation (EU) 2016/679 ("GDPR") 

Dear Gentlemen, we would like to inform you that Regulation (EU) 2016/679 (the GDPR) provides for the protection of individuals regarding the processing of personal data. In accordance with the law indicated, this processing will be based on principles of accuracy, lawfulness, and transparency, protecting your privacy and your rights.  In accordance with Article 13 of the aforementioned Regulation, we therefore provide you the following information.

1. Personal data processed, source of data, purpose of data processing, legal basis of processing and data retention period

"Data" means those relating to individuals processed by Fresia Alluminio for the conclusion and execution of the contractual relationship with its customers/suppliers, such as those of the legal representative of the customer/supplier who signs the contract in the name and on behalf of the latter, of the employees/consultants of the customer/supplier involved in the activities referred to in the contract, possibly the Data of the companies of the customer/supplier group for which the latter signs the contract with the necessary powers of representation, and any other information necessary for the performance of the contract.

The source from which the Data comes is the customer/supplier. 

These Data will be processed for the purposes indicated below.

1. Management of the contractual/commercial relationship, such as: satisfaction of specific requests of the interested party before the conclusion of the contract; conclusion, modifications, execution of the contract; provision and management of related services (installation, activation, migration, maintenance and/or service activities); complaint management.

The legal basis for processing is: 

 - the execution of the contract, for the Data of the legal representative of the supplier/customer;  

- the legitimate interest in the Data of the employees/consultants of the supplier/customer involved in the activities covered by the contract.

Data retention period: contractual duration and, after termination, for a further 10 years. In case of judicial dispute, for its entire duration, until all appeal action terms have been exhausted.

2. Administrative - accounting, such as: invoicing; management of payments, delays and missed payments; management of data for organizational, administrative, financial, and internal accounting purposes functional to the aforementioned activities.

The legal basis for processing is the need to fulfil a legal obligation to which Fresia Alluminio is subject.

Data retention period: contractual duration and, after termination, for a further 10 years. In case of judicial dispute, for its entire duration, until all appeal action terms have been exhausted.

3. Fulfilment of obligations or exercise of rights under national or European Union law or collective agreements in accordance with national law, such as: fulfilment of obligations under Community and national law, in particular laws, regulations, including emergency and urgent measures for the protection of public order, the detection and prosecution of criminal offences.

The legal basis for processing is the need to fulfil a legal obligation to which the controller is subject.

Data retention period: contractual duration and, after termination, for a further 10 years. In case of judicial dispute, for its entire duration, until all appeal action terms have been exhausted.

4. Out-of-court debt recovery (in the case of customers), such as: protection and eventual recovery of the credit, directly or through third parties (credit recovery agencies/ companies) to which, for this purpose only, will be communicated.

The legal basis for processing is the legitimate interest.

Data retention period: contractual duration and, after termination, for a further 10 years. In case of judicial dispute, for its entire duration, until all appeal action terms have been exhausted.

5. Where necessary, to establish, exercise and/or defend rights in court

The legal basis for processing is the legitimate interest.

Data retention period: contractual duration and, after termination, for a further 10 years. In case of judicial dispute, for its entire duration, until all appeal action terms have been exhausted.

6. Registration on website www.fresialluminio.it and www.fresialluminio.com

In case the customer requests it, his/her Personal Data will be processed for the attribution of identification codes necessary to allow registration to the site and use the services reserved to registered users. The identification codes assigned to the customer are necessary to access the reserved area of the site and use the services reserved to registered users.

The legal basis for processing is the execution of the contract to which the data subject is a party.

Data retention period: until the data subject requests to unsubscribe from the service.

7. Safety, according to Legislative Decree no. 81/2008

With particular reference to the identification data freely provided by the guest/ visitor at our offices (first name, last name, entity or company), the processing has the exclusive purpose of ensuring compliance with the company security procedures formally applied, also in accordance with the current legal provisions (e.g. annotation in the visitors' register/database, temporary recognition badge assignment, application of legal obligations in the field of occupational safety).

The legal basis of the processing: need to fulfil legal obligations to which the controller is subject.

Data retention period: Data will be kept for the period provided by law.

After the storage terms indicated above, the Data will be destroyed or anonymized, compatible with the technical procedures of cancellation and backup.

2. Scope of communication, subjects authorized to the treatment & transfer of the Data in countries not belonging to the European Union

The Data may be communicated to external parties operating as data controllers, for example, authorities and supervisory and control bodies and in public or private entities, entitled to request the Data (e.g., banks and credit institutions; public administrations and other public authorities).

The Data may be processed on behalf of the Data Controller by external parties designated as data processors, who carry out specific activities on behalf of the Data Controller.

The Data may be processed by employees of the company responsible for the pursuit of the purposes indicated above, who have been expressly authorized for the processing and who have received appropriate operating instructions.

As a rule, no personal data of the person concerned will be transferred to a third country outside the European Union or to International Organizations. If this will be necessary for the realization of the object of the contract already in place with the owner and, more generally, the purposes referred to in the present policy, the holder undertakes to ensure that any transfer is carried out in accordance with the provisions of art. 45 (on the basis of a decision of adequacy of the Commission) and 46 (on the basis of the existence of adequate guarantees), if applicable, in any event pursuant to art. 49 of the Rules of Procedure.

3. Provision of Data

The provision of Data by the customer/provider is optional; however, any refusal to provide such Data may result in the failure or partial execution of the contract/service.

4. Data controller

The Data Controller is FRESIA ALLUMINIO S.p.A., with headquarter office in Volpiano (TO), via Venezia n. 35/A, tax code and VAT number 02674950015 fax number 011.2250290, telephone number 011.2250211, e-mail privacy@fresialluminio.it, PEC (Certified Email Address) fresialluminio@pec.it.

5. Rights of the data subject

By contacting the Privacy Office via e-mail at privacy@fresialluminio.it, the interested party can ask Fresia Alluminio for access to Data concerning him/her, their deletion, the correction of inaccurate Data, the integration of incomplete Data, the deletion of Data, the restriction of processing in the cases provided for by art. 18 GDPR, and to oppose, for reasons relating to a particular situation, the processing carried out for the legitimate interest of the controller.

The data subject, in addition, in case the processing is based on consent or contract, and it is carried out with automated tools has the right to receive the Data in a structured format, commonly used and readable by automatic device, and, if technically possible, to transmit them to another holder without impediments.

The data subject has the right to lodge a complaint with the competent supervisory authority in the Member State in which he or she usually resides or in the State in which the alleged violation occurred.

6. Changes to the privacy policy

The Owner reserves the right to make changes, at any time, to this Privacy Policy, giving appropriate notice to users of the site. To view any changes made, the user is invited to regularly consult this policy information, in which is indicated the last update.