CLIENTS PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

ART. 13 “EU REGULATION ON THE PROTECTION OF PERSONAL DATA – GDPR” (REG. EU 2016/679)

With this document, we wish to provide you with some information concerning the processing of your personal data.

Purposes of data processing

We will collect and process the data in order to:

  1. carry out the operations required by regulatory obligations concerning the contract being signed;
  2. carry out the operations connected and instrumental to the acquisition of information preliminary to the conclusion of the contract;
  3. manage the relationship with the client and the handling of accounting, orders, invoicing and any disputes;
  4. archive documents as required by current legislation;
  5. carry out promotional and commercial activities, within the limits of any consent provided and in compliance with current legislation.

Methods of data processing

We will comply with the principles of fairness, lawfulness and transparency, we will protect the confidentiality and rights of data subjects and we will use suitable tools to guarantee its security. We will process the data relating to data subjects with manual, IT and electronic tools, with logic strictly related to the purposes indicated.

Categories of data processed and legal basis

Personal identification data

In order to pursue the purposes indicated above, we will process the personal identification data (first and last name, company role, e-mail and/or direct telephone number) of the client as a natural person, or of the employees of the client as a legal entity, who will be indicated by the client themselves to carry out the activity of service delivery and project management.

For the purposes referred to in points 1), 2), 3), it is not necessary to obtain consent for the processing, as the processing is necessary to fulfil the obligations arising from the contract and the related pre-contractual activities.

For the purpose referred to in point 4), the processing is necessary to fulfil a legal obligation to which the data controller is subject.

For the purpose referred to in point 5), specific consent for the processing must be obtained. We remind you that it is possible to withdraw the consent given here at any time, by means of a written communication to the addresses indicated below. This does not affect the lawfulness of processing based on the consent given before its withdrawal.

We invite you to promptly communicate any changes to the data so that they are always up to date in our archives.

Mandatory or optional nature of data provision, consequences of any refusal to respond

Providing the data indicated above is necessary to establish, execute and manage the contractual relationship correctly. Therefore, not providing the data makes it impossible to establish and execute the contract.

Not providing the data necessary for promotional activities will only result in the impossibility of sending you our informational and/or promotional material, but will not affect the execution of the contract.

Categories of subjects to whom personal data may be communicated or who may become aware of it as data processors or persons in charge; scope of dissemination of personal data

We inform you that, within the limits of the obligations, tasks or purposes indicated above:

  • personal data will be processed exclusively by employees and/or collaborators of the Company and by company consultants appointed for order management and administrative-accounting control of projects, quality system management and related activities, in compliance with the provisions of the law also with regard to the security measures for the protection and safeguarding of the data itself;
  • the data will in no way be disseminated, unless otherwise agreed in writing.

We may communicate and disseminate personal data in order to fulfil legal obligations.

Outside of this case, personal data may be communicated in Italy and/or abroad to:

  • professionals and consultants, consulting firms, factoring companies, credit institutions, debt collection companies, credit insurance companies, business information companies, companies operating in the transport sector;
  • public and private bodies, also following inspections or audits (for example the Financial Administration, Tax Police Bodies, Judicial Authorities, Social Security Institutions, Chamber of Commerce, etc.);
  • subjects who may access the data by law.

Transfer of data outside the European Economic Area

Personal data may be transferred to countries outside the European Economic Area exclusively for technical needs, in any case to subjects based in countries recognised as “adequate” by the European Commission, or with whom specific Standard Contractual Clauses are stipulated in accordance with the text approved by the European Commission.

Data retention period

The data provided will be kept in our archives for the following period of time:

  • for the purposes referred to in points 1), 2), 3) and 4): 10 years, as established by art. 2220 of the Italian Civil Code, without prejudice to any late payments of fees and/or disputes that justify its extension;
  • for the purpose referred to in point 5): 24 months.

Rights of the data subject

You may exercise the rights provided for by European Regulation No. 2016/679 at any time. Specifically, you have the right:

  • to access your personal data;
  • to obtain the rectification or deletion of the data, or the limitation of the processing concerning you;
  • to object to processing;
  • to data portability;
  • to withdraw consent, where applicable: as specified, the withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal;
  • to lodge a complaint with the supervisory authority. For Italy, the supervisory authority is the Garante per la protezione dei dati personali (Italian Data Protection Authority).

You may exercise your rights by sending a request via email to info@fortop.it

Identification details of the Data Controller, Data Processors and indication of how the updated list of data processors can be obtained

The Data Controller for the above-mentioned processing is the company Fortop S.r.l., with registered office in Milan, Corso Sempione no. 10, VAT no. 02001910500. These are our contacts:

  • Postal address: Via Pasquale Pardi, 9 – 56121 PISA
  • Tel: 050 893 7942
  • Fax: 050 893 7943
  • E-mail: info@fortop.it

The list of Data Processors, System Administrators and Credentials Custodians is available at the Company Management office.

Last updated