Fondinox > Personal data collection and processing through the website

Personal data collection and processing through the website

The regulation in force as for personal data processing, defined in compliance with what forecast by the European Regulation EU 2016/679 dating back to 27.04.2016 as for the subject personal data processing as well as for the free circulation of data, includes the direct provisions to confirm that the data processing is enforced in compliance with the subject fundamental rights and freedom mainly as for the protection of his/her personal data.

1. Processing goals

In compliance with the obligations imposed by the regulations in force, Fondinox S.p.A., is the PROCESS CONTROLLER (hereinafter controller) liable for the personal data processing as to:

Scopes:

  1. Contact with the user
    Through the contact form and filling his/her data, the User accepts that his/her data will be used to answer any information request, assistance, quotation or other User request.
    Collected personal data: Name and surname, Company and e-mail address
    Treatment foundations: Legitimate interest
  2. Management of the pipe inventory requests
    Through the request availability form in the section “pipe inventory”, the user filling his/her data information authorises its use to answer any forwarded request.
    Collected personal data: Name and surname, Company and e-mail address

Treatment foundations: Legitimate interest

2. Processing modes as well as data storage duration

The processing will be carried out with or without IT tools in accordance with the above law and in accordance with principles of fairness, lawfulness, transparency and protection of confidentiality and the people affected rights, in compliance with what forecast by the regulations in force.

Your data will be stored in compliance with what forecast by the regulations in force on the subject, for a time period no longer than what required to comply with the goals your data was collected for. Data will be stored for the strictly required period to manage it according to what hereinbefore specified, according to criteria based on the regulations in force, correctness and balance between the controller legitimate interest and the subject freedom, anyhow for no more than 5 years from his/her request. For both goals, data is freely supplemented by the User. No data provided, it will be impossible to process any data or information request.

3. People authorised to carry out your data processing – Data communication and spreading

Your collected personal data is processed by the authorised subjects requiring to be informed to carry out their activities and by possible external subjects who can be co-controllers or data processors as well. The Customer authorises the controller to use data processors to process his/her data as for the supply, procurement and additional activity connected to the Services. The processors will only be entitled to access limited data required to carry out their activities. What is more they are required to process any personal data in compliance with the present privacy information and in compliance with the regulations in force in terms of data processing. The controller reserves itself the right to transfer your personal data to a third country according to the suitability decisions by the European commission, that is according to the guarantee forecast by the regulations in force, duly committing not to spread data. When formalising the present information, the controller confirms that data is located within data centre in the EU Union.

4. Data treatment controller

The data treatment controller is Fondinox S.p.A. whose registered office is in SERGNANO (CR),  Via Marconi, 42/48 in compliance with the European Regulation n. 679/2016 as for personal data protection.

For any requirement, forward a communication to the following email address: fondinox@fondinox.com

5. Subject’s rights

The subject can exercise his/her rights according to articles 15 to 22 of the European regulation n° 679/2016 as for Data protection among which:

  • Confirmation that your personal data is being processed and therefore if required ask for its access (Right to access art. 15).
  • The rectification of the incorrect personal data or the supplement of incomplete data (Right to rectification, art. 16)
  • The removal of data if there is one of the reasons forecast by the Regulation (“Right to erasure (‘right to be forgotten’), art. 17)
  • Restriction of processing if there is one of the reasons forecast by the Regulation  (“Right to restriction of processing”, art. 18)
  • The data subject shall have the right to receive the personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller (Right to data portability, art. 20).
  • You are entitled to cancel your data processing consent any time, without affecting the treatment lawfulness based on the consent provided before the cancellation or opposition in any time to any processing for marketing goal.