INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO AND BY EFFECT OF ARTICLE 13 OF EUROPEAN LEGISLATIVE DECREE 2016/679 (GDPR)
Fbt Elettronica S.p.A., registered address at No. 1 of Via Paolo Soprani , 62019 Recanati (Province of Macerata) – Italy, in their capacity as Personal Data Controller, hereby advise, pursuant to Article 13 of EU Regulation 2016/679 (hereinafter the “GDPR”), that they will process the data of Users (hereinafter “User” and/or “Users”) collected through their web site fbt.it (hereinafter also the “Site”), in the manner and for the aims indicated below.
This information is provided only for the site fbt.it, not for any other web sites that may be consulted by the User by means of links, over which Fbt elettronica S.p.A. cannot exercise any control, nor can they have access to the personal data of Users visiting said other web sites. The owners of the aforesaid sites will, therefore, remain the only and sole controllers and supervisors of the processing of their users’ personal data, while Fbt Elettronica S.p.A. will not be connected in any way to such activity, and will not be subject to any liability, prejudice or cost arising out of any non-fulfilment or incorrect fulfilment thereof. It is therefore advised that you should read carefully the privacy policies and the terms and conditions relating to use of said web sites before providing any of your personal data or agreeing to the processing thereof.
1.SUBJECT-MATTER BEING PROCESSED
The Controller processes personal identification data (e.g. name/name and surname, taxpayer number, VATID number, address, telephone number, e-mail address, bank references – hereinafter, Personal Data) notified at the time of entering into the contract with the Controller, as well as of performance under the contract
2.AIMS OF THE PROCESSING
Paso process the following types of personal data provided by the Users of the Site at the time of consulting the site and/or registering with it, in particular:
a) Data obtained while a User is navigating the Site
During the course of their normal use, the navigation data, the IT systems and the software procedures for operating this web site acquire some personal data, transmission of which is implicit in use of the Internet communication protocols. They consist of information that is not collected in order to be associated with identified parties, but that due to its very nature could, by being processed and associated with data held by third parties, enable the Users to be identified. This category of data includes:
- the IP addresses or domain names of the computers of Users linking up to the site;
- the URI (Uniform Resource Identifier) addresses of the resources requested;
- the time of the request;
- the method used when submitting the request to the server;
- the size of the file obtained in reply;
- the numerical code indicating the status of the reply from the server (successful, error, etc.) and other parameters relating to the operating system and to the User’s IT environment.
These data are collected by means of technical cookies. For further information on the navigation data, Users should consult the Information Memo on the Cookies of the Site.
These data are used solely for the purpose of acquiring anonymous statistical information on use of the site and for checking its correct operation, and they are deleted immediately after being processed. These data could, however, be used to establish liabilities in the event of possible computer-related crimes damaging the site.
b) Data supplied voluntarily by the User
The optional, explicit and voluntary forwarding of e-mail messages to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, which is necessary for answering the requests, as well as any other personal data included in the notification forwarded.
3. NATURE OF THE PROVISION OF THE DATA
Provision of the data as referred to in this information memo is compulsory with regard to the data referred to in point a) of Article 1 and for the aims referred to in point a) of Article 2. Refusal to provide said data could make it impossible to provide the services.
Provision of the data referred to under point b) or Article 1, on the other hand, is optional. It is therefore possible to decide not to provide any data or to refuse later to allow processing of data already supplied for the aims referred to under point b) of Article 2.
4. MANNER AND LENGHT OF PROCESSING
The processing of Personal Data is carried out by means of the activities indicated under point 2) of Article 4 of the GDPR, that is to say, precisely, collection, recording, organisation, storage, consultation, handling, amendment, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of the data.
The Personal Data undergo processing both in printed form and using electronic and/or automated procedures and may be saved on servers /clouds managed by a third-party supplier located in Italy/Europe.
The Controller will process the Personal Data for the time strictly necessary for fulfilling the aims for which they were collected and in any case for not more than 30 days for the Service-related Aims and not more than 3 years after collection of the data for the Marketing Aims.
5. ACCESS TO THE DATA
The data may be made available solely for the aims referred to above, to the following parties:
- to Fbt Elettronica’s employees and staff members, in their capacities as persons in charge of and/or in-house supervisors of the processing and/or system administrators;
- to third-party companies or other parties (indicatively only, advisory associations or firms providing Fbt Elettronica S.p.A. with services and activities of assistance and consultancy, with reference particularly but not only to services of management of the information systems and of telecommunications networks and providers.
6. NOTIFICATION OF THE DATA
Even without the express consent of the User, in accordance with points b) and c) of Article 6 of the GDPR, Fbt Elettronica S.p.A. may, in their capacity as independent Data Controllers, notify the User’s data for the Service-related aims referred to under point a) of Article 2 to supervisory bodies, to Legal Authorities and to any and all other parties to whom notification is compulsory according to the law for fulfilling said aims. The Users’ data will not be circulated.
7. TRANSFERRING OF THE DATA
The management and storage of the data will take place on servers located inside the European Union and belonging to Fbt Elettronica S.p.A. and/or third-party companies in charge of the processing. The data will not be transferred outside the European Union.
8. RIGHTS OF THE PARTY CONCERNED
In your capacity as the party concerned, you may exercise the rights referred to in Articles 15, 16,17 18, 19, 20 and 21 of the GDPR, and specifically the rights:
a) to obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and notification thereof in an intelligible form;
b) to obtain an indication of the origin of the personal data, of the aims for which and of the manner in which they were processed, of the logic applied in the event of processing with the aid of electronic instruments, of the ID details of the Data Controllers, of the Data Supervisors and of the DPOs (Data Protection Officers), of the parties or categories of parties to whom the personal data may be notified or to whose knowledge they may come;
c) to have the data brought up to date, corrected or supplemented;
d) to arrange for deletion of the data that are not required for compulsory fulfilments and that it is not necessary to keep in connection with the purposes for which the data were collected or subsequently processed;
e) when possible, to obtain limiting of the processing of the data and to oppose their processing;
f) if compatible, to request portability of the data;
g) to submit a complaint to the Personal Data Protection Authority, following the procedures and the indications published on the official website of said Authority (it).
Any corrections or cancellations or limits to processing made or introduced at the request of the party concerned – unless this is found to be impossible or to imply a disproportionate effort – will be notified by Fbt Elettronica S.p.A. to each of the recipients to whom the Personal Data were sent. If required by the party concerned, Fbt Elettronica S.p.A. may inform the latter of said recipients.
9. HOW TO EXERCISE THE RIGHTS
The User may, at any time, exercise their rights by sending an e-mail message to the following address: firstname.lastname@example.org.
Exercising of such rights is not subject to any formal constraints and is free of charge.
10. CONTROLLER, SUPERVISOR AND PERSONS IN CHARGE
The Controller of the data processing is Fbt Elettronica S.p.A., registered address at No. 1 of Via Paolo Soprani in Recanati (province of Macerata) 62019 – ITALY.
An up-to-date list of the Data Supervisors and of the persons in charge of processing is held at the Data Controller’s registered address and may be requested by you by sending an e-mail message to the following address: email@example.com