Information document Art. 13 Reg. EU 2016/679 - GDPR - Policy on the processing of personal data collected from the data subject/user - and Art. 130 - Unwanted communications Decree Law 196/2003 contracting party
In compliance with the General Data Protection Regulation (EU) 2016/679, we provide the necessary information regarding the processing of the personal data provided. The information is not valid for other websites that may be consulted through links on the sites of the domain of the Data Controller, which is not to be considered in any way liable for third party websites. This policy is provided pursuant to Art. 13 of Reg. EU 2016/679 (European Regulation for the protection of personal data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, on cookies, the Measure of the Personal Data Protection Authority of 08.05.2014 on cookies and EDPB Guidelines 05/2020 on consent based on the GDPR, adopted on 04.05.2020.
The Data Controller is Fcm srl with registered office in via D.A Buratelli, n. 45, 61032 Fano (PU), VAT No.: 02494070416 in the person of the legal representative pro tempore. The contact email of the Data Controller is email@example.com.
DATA SUBJECT TO PROCESSING
For the purposes of this policy, personal data (Art. 4 GDPR) means any piece of information relating to an identified or identifiable natural person (the “Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors characteristic to the physical, physiological, genetic, mental, economic, cultural or social identity;
During their normal operation, computer systems and software procedures used to operate this website acquire certain personal data, the transmission of which is implicit in the use of internet communication protocols. This information is not collected to be associated with identified Data Subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This data category includes IP addresses or domain names of the computers used by users to connect to the Website, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server response status (successful, error, etc.) and other parameters pertaining to the user's operating system and IT environment.
Data provided voluntarily
The optional and voluntary sending of personal data (e.g. sending email messages to the addresses indicated on this site or filling out data collection forms on this site) involves the collection and processing by the Data Controller of the data voluntarily provided by users/contractors necessary to respond to requests, as well as any other personal data included in the communication.
PURPOSES OF THE PROCESSING AND LEGAL BASIS
Handling contact requests through the appropriate page of the Website.
The legal basis on which the processing is based is the need to comply with pre-contractual and contractual obligations to which you are a party, in addition to the need to comply with legal obligations.
The provision of data for this purpose is optional. However, in the absence of such provision, it will not be possible for the Data Controller to process your contact requests.
DATA RECIPIENTS OR CATEGORIES OF RECIPIENTS
The Data is not subject to dissemination.
The personal data provided will be communicated to recipients that will process the data as Data Processors (Art. 28 of Reg. EU 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (Art. 29 of Reg. EU 2016/679), or to parties performing the role of independent Data Controllers. Specifically, the data will be communicated to: parties which provide services for the management of the information system used by FCM srl and the telecommunications networks (including email and platforms); firms or companies in the context of assistance and consultancy relationships; and social media platforms.
DATA RETENTION PERIOD
The Data Controller undertakes to delete from its systems your data provided in relation to requests sent through the Website by 24 months from the date of the provision of data;
In any case, the Data Controller undertakes to provide the processing of the Data according to the principles of appropriateness and minimisation, verifying annually the need for storage for a period of time not exceeding what is necessary to achieve the purposes for which the Data was collected and processed.
The Data Controller may retain the Data in order to comply with regulatory obligations, or to ascertain, exercise or defend its rights in court.
Once the purposes for which the Data has been collected and processed have been achieved, the Data Controller will take the appropriate measures to make them anonymous, so as to prevent your identification, in any case without prejudice to the possibility of continuing to use the Data anonymously.
RIGHTS OF THE DATA SUBJECT REGARDING PROCESSING
In relation to the aforementioned processing of Data, you can exercise, at any time, by email to firstname.lastname@example.org, the following rights, under the conditions and within the limits set out in Art. 12 and 13 of the GDPR:
Right of access (Art. 15 GDPR); Right to rectify inaccurate data and supplement incomplete data (Art. 16 GDPR); Right to delete Data (Art. 17 GDPR); Right to limitation of processing (Art. 18 GDPR); Right to object to the processing carried out pursuant to Art. 6 1) e) or f) GDPR;
The User also has the right to lodge a complaint with the Personal Data Protection Authority and/or other competent supervisory authorities (Art. 77 GDPR).
Furthermore, if the data processing is based on consent or contract and is carried out with automated tools, you are entitled to receive the Data in a structured, commonly used and automatic device-readable format, as well as, if technically feasible, to transmit the same to another Data Controller without impediments pursuant to Art. 20 GDPR.
You have the right to withdraw your consent for marketing purposes at any time.
Your preference to be contacted for marketing purposes solely by traditional methods will remain unaffected when expressing your opposition exclusively to receiving communications through automated methods.
NATURE OF THE PROVISION AND REFUSAL
With the exception of navigation data, which are necessary in order to allow navigation of the Website, users/contractors are free to provide their personal data and failure to provide the same may only result in the impossibility of obtaining the information or services requested and provided through this Website.