Privacy Policy

Version: 2 - Policy date: 30/08/2018

INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA ACCORDING TO EU REGULATION NR. 679/2016

Data Handling Owner

Company: FERREMI LUCA SRL
Address: VIA NAZIONALE 13
25074 LAVENONE (BS)
Phone: + 39 0365 823811
Legal email: ferremiluca@pec.it

Data Protection Manager

Mr. FERREMI LUCA
Reference Person’s Phone Nr. at Data Owner
+ 39 0365 823811
Reference Person’s Email at Data Owner
info@flplast.com

Aims of data processing:

Your personal information, freely communicated and acquired for the purpose of the activity carried out by the data handling owner, shall be processed in a lawful and correct manner for the following purposes:

  • contractual;
  • accounting and tax;

The data processed (which may be of common, identifying, particular or judicial nature) are up-to-date, relevant, complete and not excessive in relation to the purposes listed above and for which they are collected and subsequently processed.

Data processed Aims of data processing
Full name, address, fiscal data and/or other personal identification detail;

Contact details (phone nr, e-mail etc.);

Bank details;

Economic, commercial, financial and insurance activities. 		Supplier / Customer management
Conclusion of the contract and related obligations
Fulfillment of tax and accounting obligations
Privacy obligations foreseen by the GDPR 679/2016
Orders and supplies history

Data processing method:

The data will be processed, in compliance with the necessary security and confidentiality, through the following procedures: data collection from the data subject, recording of data for specific, explicit and legitimate purposes, and used in further processing operations in terms compatible with these purposes.

Your data will be processed electronically and / or in paper format.

Legal Basis for Processing:

Legal basis for processing of your personal data is necessary to fulfil contractual requirements.

Nature of the provision of data and consequences of a refusal to respond:

The nature of the provision of data is mandatory so as to allow the data owner to provide the professional services requested.

Communication of data to third parties:

Your personal data will be processed by the data owner, by any data processors appointed by him and by any persons, strictly authorized, entrusted to do the processing. Your data may be disclosed as a result of inspections or controls (if required), to all inspection bodies responsible for verifications and controls concerning the regularity of legal obligations.

Your data may also be disclosed to external companies / professional service firms that provide work assistance and consultancy, to the staff of the data owner, in charge of accounting, administrative, fiscal, tax and financial matters, or to public administrations for the performance of the institution functions within the limits established by law or regulations.

Time of conservation:

The data owner will process your data for the time necessary to fulfill the aforementioned purposes. Subsequently, such data will be kept for the period of time required by the provisions in force concerning tax and civil laws.

Existence of an automated decision-making process:

There is no automated decision-making process.

Data security:

The data owner has taken appropriate security measures to protect your data against the risk of loss, misuse or alteration.

Intention of the owner in the processing of personal data:

The data owner will not transfer your personal data (except for the above mentioned purposes) to a third country outside the EU or to an international organization.

Data Subject Rights:

The person concerned has the right to:

  1. request access to his/her personal data (art. 15) and their communication in an intelligible form;
  2. obtain the indication of the origin of personal data, of the purposes and methods of the processing, of the logic applied in case of treatment carried out with the aid of electronic tools, of the identification details of the data owner, of the data processing manager and of the representative designated according to art. 5, paragraph 2, of the Privacy Code and art. 3, paragraph 1, GDPR, of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative, assigned managers or staff in the territory of the State;
  3. obtain the correction (art. 16), the integration, the deletion of data (art. 17), the transformation into anonymous form or the blocking of the data processed in violation of the law, including those which do not need to be stored in relation to the purposes for which the data were collected or subsequently processed;
  4. oppose in whole or in part for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of collection; object to the processing of personal data concerning him/her for the purpose of sending advertising material or direct sales or for the carrying out market research or commercial communication, in addition to the right to data portability. The person concerned, if he/she deems it appropriate, has the right to lodge a complaint with a supervisory authority.

How to exercise rights:

The person concerned may, at any time, exercise his/her rights laid down by art. 15 of EU Regulation 2016/679 - Right to access personal data.

The exercise of rights can be performed by writing to the e-mail address:ferremiluca@pec.it

The complete text of the EU 2016/679 Regulation is available on the website: www.garanteprivacy.it.