The information below is intended for natural persons, including professionals, sole proprietors and representatives/officers of companies, bodies, associations and foundations, hereinafter referred to as 'Data Subjects'.
Identity and contact details of the Data Controller
Falmec S.p.A., hereinafter also referred to as 'Falmec' or 'Data Controller', with registered office in via dell'Artigianato 42 - 31029 - Vittorio Veneto (TV), which can be contacted at the email address info@falmec.com , at PEC certified email falmecspa@legalmail.it or at the telephone number 04385025.
- Purposes and legal bases
- A. Management of the contractual phase: personal data are processed for all needs related to the management of the contractual relationship in all its phases (e.g. management of appointments, organisation of logistics and fulfilment of regulatory obligations incumbent on the Data Controller)
- B. Legal defence: the Data Controller may need to process personal data for the management of legal or out-of-court disputes and litigation.
Purpose | Legal basis (common data) | Legal basis (special data) |
|---|---|---|
A
|
Legitimate interest of the Data Controller in properly conducting business dealings in compliance with applicable law. Execution of the contract. Fulfilment of legal obligations.
|
Legitimate interest of the Data Controller in ascertaining, exercising or defending a right.
|
B
|
Fulfilment of labour law obligations.
|
Establishing, exercising or defending a right.
|
Storage period
Purpose | Storage time |
|---|---|
A
|
10 years after termination of the contract.
|
B
|
10 years after the final resolution of a dispute.
|
Nature of the provision of data and consequences in the event of refusal
Purpose | Nature | Consequences |
|---|---|---|
A
|
Necessary
|
Inability to start or continue the business relationship.
|
B
|
Necessary
|
Inability to manage litigation.
|
Scope of disclosure
The data are processed by authorised internal staff for specific tasks and are disclosed externally according to the following rules
Purpose | Categories of external recipients |
|---|---|
A
|
Credit institutions, external consultants, parties to which disclosure is mandatory by law, business partners (customers/suppliers).
|
B
|
Law firms; judicial authorities.
|
Since the data are also processed using IT devices, they may also be visible to persons servicing/maintaining such systems.
Transfer of the data to a third country or international organisation
The Data Controller does not transfer personal data outside the European Economic Area.
Rights of the data subjects
The person the personal data refer to has the following rights:
- Access: it is possible to find out whether one's personal data is being processed and if so, to access them and request a copy.
- Correction: it is possible to request that one's personal data be updated, corrected (if inaccurate) and incomplete data be completed.
- Erasure: it is possible to obtain the erasure of one’s personal data if certain conditions are met (for more information contact the Data Controller).
- Restriction: it is possible to request that the data be flagged so as to limit their processing in the future under certain conditions (for more information contact the Data Controller).
- Objection: it is possible to object to the processing of one’s personal data on grounds relating to one’s particular situation, where the processing is based on legitimate interest or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
- Portability: it is possible to receive the personal data provided to the Data Controller in a structured format and to transmit them to another controller if the processing is based on consent or contract and is carried out by automated means.
- Withdrawal of consent: it is possible to withdraw consent for the purposes for which it was requested, without prejudice to the lawfulness of the processing performed up to that point.
The concrete rights that can be exercised with respect to the processing performed are:
Purpose | Right exercised |
|
|
|
|
|
|
|---|---|---|---|---|---|---|---|
Access
|
Correction
|
Erasure
|
Restriction
|
Objection
|
Portability
|
Withdrawal of consent
| |
X
|
X
|
X
|
X
|
X
|
X
| ||
X
|
X
|
X
|
X
|
X
|
To exercise the aforementioned rights, please complete the form available at https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: privacy@falmec.com.
It is possible to lodge a complaint with a supervisory authority. For Italy contact the Italian Personal Data Protection Authority (www.garanteprivacy.it).