POLICIES RELATED TO PROCESSING OF PERSONAL DATA
Privacy Policy related to commercial relation
According to legislative decree196/2003 (“Privacy Code”) and to regulation EU 2016/679 (the “GDPR”), we would like to inform you that your personal data will be collected and processed as follows.
1. Sources, forms and purposes of processing personal data
Fuzzi Srl. (“Fuzzi” or the “Data Controller”) will process personal data using both paper and electronic storage systems, also collecting them from third parties ensuring privacy and security.
Personal data will be processed for the aims of:
a) fulfilling the obligations arising from this agreement and for administrative and accounting purposes;
b) fulfilling obligations arising from current laws, regulations and European laws when it is applicable, or executing decisions given by competent authorities;
c) carrying out statistical market studies, without the possibility of obtaining the personal identity of the interested parties;
d) performing security checks in case of access to the business complex.
Legal basis of the processing of personal data
The legal basis of processing personal data for purposes related to paragraph 1(a) is Article 6 par.1 lett. (b) of the GDPR which states that: (…)processing personal data is necessary for the performance of an agreement to which the interested person is a party thereto or in order to take steps at the request of the same prior to entering into an agreement);
The legal basis of processing personal data for purposes related to paragraph 1(b) and 1(d) is the art. 6 par.1 lett. (c) of the GDPR which states: (…) processing personal data is necessary in order to allow the controller to comply to legal obligation to which it is subject);
The processing of personal data according to paragraph 1(c) is not performed on personal data and, therefore, could be performed without limitations.
Mandatory or optional nature of the provision of data
The supply of your personal data for the purposes explained in paragraph 1(a) is not mandatory. However, the same is essential for the performance of this agreement. For this reason, we inform you that the failure, if any, to provide certain personal data could lead to the impossibility for Fuzzi to perform all the activities provided in this agreement.
The supply of your personal data for the purposes explained in paragraph1 (b) and (d) is mandatory in order to comply with the obligations provided by laws.
Persons to which the personal data may be disclosed
According to the Fuzzi’s activity and exclusively for the purposes aforementioned and only for the period strictly necessary, personal data may be disclosed to:
persons which typically act as processors according to art.29 of the Privacy Code and to art. 28 of the GDPR, namely: i) persons, companies or professional firms which provide assistance and advice to the Fuzzi for accounting, administrative, legal, tax and financial matters; ii) persons delegated to carry out technical maintenance activities; iii) credit institution, insurance companies and/or brokers;
persons, institutions or authorities to whom it is mandatory to disclose such data in accordance with laws or orders of any authority;
persons authorized by the Data Controller, pursuant to art. 30 of the Privacy Code and art. 29 of the Regulation, to process personal data for carrying out their service activities, provided that such persons are committed to confidentiality obligations as the consequence of contractual obligations or by application of law;
A complete list of the persons responsible for the processing of the personal data is available upon written request addressed to the Data Controller.
Rights of the interested person
Pursuant to art. 7 of Privacy Code and to Chapter three of the Regulation, you have the right, at any time, to obtain confirmation as to whether or not personal data concerning you exists as well as the knowledge of the content and the origin of such data, to verify its accuracy or request it to be integrated, updated, or corrected; you have the right to request that such data are processed deleted, transformed into anonymous form or blocked, as well as to oppose the processing of such data, in any case, for legitimate reasons.
Starting from May 25, 2018, you have also the right to access your personal data, to object to the processing of the same, to request the limitation of the processing in all the cases granted by art. 18 of the GDPR, if technically possible, and also the right to obtain the data in a structured format pursuant to art. 20 of the GDPR. The above rights could be exercised by sending a written request to Fuzzi. The Data Controller will reply without delay.
In any case you always have the right to lodge a complaint with the Data Protection Authority, according to art. 77 of the GDPR, if you consider that the processing of your personal data is in breach of the current legislation.
Keeping of the personal data
Personal data relating to the purposes of paragraph 1(a), will be kept for the time strictly necessary to achieve those same purposes. In any case, since such data are being processed in order to supply services, the Data Controller will keep the personal data for the period of time required and admitted by Italian law to protect its own interests (Art. 2946 c.c. and ss.).
Personal data relating to the purposes of paragraph 1(b) and 1 (d) will be kept until the expiration of the time required by the relevant law provision.
Information about the Data Controller.
The Data Controller is Fuzzi Srl., with registered office in Ippocastani Street, 388, 47842 San Giovanni in Marignano (RN) – Italy.
In order to exercise your rights, or for any request relative to the data processing, you can send an email at: privacy@fuzzi.it