In compliance with the provisions of EU Regulation 2016/679 (European General Data Protection Regulation) we provide the necessary information regarding the processing of personal data carried out through this website. The information must not be considered valid for other websites that may be consulted via links on the website of the controller's domain, which is not to be considered in any way responsible for third party websites. This is an information pursuant to art. 13 of the 2016/679 EU Regulation and is also inspired by the provisions of Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, on Cookies as well as to the provisions of the Italian Data Protection Authority dated 08.05.2014 regarding cookies.
DATA CONTROLLER is FONDITAL S.p.A., with registered office in Vobarno (BS) - Via Cerreto, 40, in the person of the legal representative pro-tempore, (hereinafter, the "Controller" or “Data Controller”). You may at any time contact the Data Controller at the following addresses: paper mail: FONDITAL S.p.A. Via Cerreto, 40, Vobarno (BS); email: firstname.lastname@example.org; contact area https://www.fondital.com/it/it/contacts.
The Controller may appoint other subjects, internal to the company, duly authorized and instructed to perform processing operations under the authority of the Data Controller, pursuant to Article 29 of EU Reg. 2016/679. Processing operations may also be carried out on behalf of the Data Controller by external parties duly appointed as Data Processors in compliance to art. 28 of the EU Reg. 2016/679. A complete and updated list of the Data Processors is available at the registered office of the Owner, to the contacts indicated above.
Personal data: any information on an identified or identifiable natural person (“data subject”). A person is considered identifiable if can be identified, directly or indirectly, through a specific reference like a name, identification number, geographical position, online identification or any specific characteristic element of his physical, physiological, genetic, psychic, economical, cultural or social identity (as an example, first name, last name, birth date, address, email address, telephone number etc).
Navigation data: IT systems and software procedures dedicated to operate this website acquire, during their regular functioning, some personal data which transmission is implicit in the use of communication protocols on the internet. Those information are not acquired to be associated to identified data subjects, but, by their very nature, said information may allow to identify the users through processing and association to data possessed by third parties. In this data category there are IP addresses and domain names of the computers used by the users to connect to the website, Uniform Resource Identifier addresses of the requested resources, time of the request, the methods used to submit the request to the server, dimensions of the file obtained as a reply, code numbers indicating the state of the server’s reply (fruition, error etc) and other parameters related to the Operating system and the computer environment of the user. The data are used solely to extract anonymous statistical information on the use of the website to monitor its normal functioning and get cancelled right after the processing.
The personal data of the user can be treated with additional methods and aims to related to maintenance of the website
Data deliberately provided by the user
The optional and deliberate submission of personal data (ex. Through emails to the email addresses listed on this website or by filling a registration form or a form to request catalogues, price lists and data sheets existing on this website) entails the acquisition and processing by the Data Controller of the deliberately provided users data including first and last name, address, telephone number, email address and any potential further data provided to receive access credentials to specific areas of the website (ex. Occupation) such as Sign in area, download area, events area. Moreover, specific summary information will be provided on this website concerning the user’s data processing (ex. “work with us” applications).
3. PURPOSE AND LEGAL BASIS OF DATA PROCESSING – MANDATORY OR OPTIONAL PROVISION
Personal data voluntarily provided will be processed in compliance with EU Reg. 2016/679 for the following purposes:
a) With reference to navigation data, obtaining anonymous statistical information on the use of the website and monitor its proper functioning.
b) Upon user request, sending the information / documents / services requested by the user by filling in the registration forms or forms for requesting catalogues / data sheets / price lists and / or contacts;
c) Upon user request, recruitment of personnel and evaluation of self-applications received by filling in data collection forms in the "Work with us" area or via email addresses available on the Website;
d) Execute the sale of Products through the Website (E-Shop), delivery, invoicing, related administrative and accounting activities and manage after-sales services (for example, refunds, repairs, etc.).
e) With reference to the e-mail address provided by the user in the context of the sale of a product or service, for direct marketing purposes - soft spam, aimed to directly sell products or services of the Data Controller similar to those already purchased by the customer / user.
f) Communicate information of a commercial nature, on products and events, also through our newsletter, i.e. allow you to participate in any satisfaction surveys and market research by sending material for the detection of the degree of satisfaction for the improvement of the Products.
4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided may be disclosed to:
- service providers for the management of the information system used by the Data Controller and telecommunications networks (including e-mail, the web platform, the website, sending newsletters);
- agencies, firms or companies in the context of assistance and consultancy relationships for the purposes described above;
- service providers in relation to user orders via the e-commerce area;
- competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request.
The subjects belonging to the aforementioned categories perform the function of Data Processors or operate in total autonomy as separate Data Controllers. The list of Data Processors is constantly updated and available at the headquarters of the Data Controller and at the contacts listed above.
5. DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES
The personal data provided will not be disclosed and will not be transferred to non-EU countries.
In case of need to transfer data to third countries, the Data Controller undertakes to:
Make sure that the country to which the data will be sent guarantees an adequate level of protection, as required by article 45 of the GDPR; or
Use the standard contractual data protection clauses approved by the European Commission for the transfer of personal information outside the EEA pursuant to Article 46.2 GDPR.
The user can obtain information about the guarantees provided by the Data Controller for the transfer of data by contacting the Data Controller at the contacts listed above.
6. DATA RETENTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD
The processing will be carried out in an automated and manual way, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed.
In compliance with the provisions of art. 5 paragraph 1 letter. e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows identification of the users for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
The retention time of the personal data provided depends on the purpose of the processing carried out:
purposes related to technical navigation data for the proper functioning of the website: storage only for the relative session, at the end of which the data are deleted;
purposes of responding to the request for information / documents / contacts (12 months);
for the execution of the sale, after-sales activities and for administrative / accounting / financial purposes relating to the supply of a good / service (10 years);
data collection for personnel recruitment (24 months);
direct marketing or promotional communications (24 months).
7. RIGHTS OF THE INTERESTED PARTIES
You can assert your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21, 22 of Regulation (EU) 2016/679, towards the Data Controller, by e-mail to the address: email@example.com; you have the right, at any time, to obtain from the Data Controller access to your personal data and request information relating to the purposes, the categories of personal data processed, the recipients to whom the personal data will be communicated, with particular reference to recipients in third countries, the retention period of personal data or, where this is not possible, the criteria for its definition; the existence of an automated decision-making process, including profiling. You have the right to rectify, delete your personal data or limit their processing. If the processing is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a), you have the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on consent given before revocation. You have the right to be informed of the existence of adequate guarantees relating to the transfer of your data to a third country or to an international organization pursuant to Article 46 of Regulation (EU) 2016/679. You have the right to the portability of your personal data; in this case, the Data Controller will provide you with your personal data, in a structured format, commonly used and readable by automatic device, and the right to transmit such data to another Data Controller. Furthermore, you have the right to oppose at any time, for reasons related to your particular situation, the processing of your personal data pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for these purposes, including profiling to the extent that it is connected to such direct marketing. You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects your person. Without prejudice to any other administrative or judicial appeal, in the event that you believe that the processing of your personal data violates the Regulation (EU) 2016/679, you have the right to lodge a complaint with the Privacy Guarantor (https://www.garanteprivacy.it), or to take appropriate judicial offices.
The Website and the Products offered therein by Fondital S.p.A. are in no way intended for minors under the age of 18, therefore the Data Controller does not carry out any collection and / or processing of personal data referring to minors. In the event that personal data relating to minors are entered on the Website, Fondital S.p.A. will cancel them.
Last update: 17th December 2020
n. Reg. Imprese: 01963300171 - EORI/P. IVA: IT00667490981 - R.E.A. BS - 280789 - Capitale sociale: € 60.000.000 i.v. “Soggetta all’attività di direzione e coordinamento ex art. 2497 bis C.C. da parte di SILMAR GROUP S.p.A. - Cod. Fisc. 02075160172”