Privacy Policy - contact form and profiling

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Foss Marai S.r.l. with registered office in Via Prade no. 12, hamlet of Guia, Valdobbiadene (TV), in its capacity as Data Controller (hereinafter “Data Controller”), issues this information notice to the Data Subject in accordance with the European and Italian regulations on the protection of personal data.

This information notice supplements the navigation policy of the website by illustrating to the User how the Data Controller will specifically process the data entered in this contact form: we therefore invite the User to read our privacy policy.

Legal basis and purpose of the processing

The Data Controller processes the personal data for the following purposes:

1)    to respond to requests made through this form, for example, to obtain information on its products or services (including the sending of brochures, catalogues and/or other company information), to obtain a quote, etc.: in this case, consent is not required because the processing is necessary to respond to such requests;

2)    to send newsletters by email containing information on its products or services, as well as promotions or invitations to events in which it will participate (“Newsletter”): in the context of this form, we do not collect consent because the processing is necessary to respond to the data subject’s request to obtain our communication service;

3)    to analyse the behaviour, habits and propensity to consume of data subjects, in order to meet their specific needs and improve the products and services provided by the Data Controller, also by sending personalised commercial communications (“Profiling”). For this purpose, express consent is required, which is collected through a specific request for the installation of cookies.

Data retention period

The Data Controller intends to process the data according to the following time criteria:

ü if information or a quote is requested, the data will be processed for the time necessary to provide a reply, without prejudice to further retention for the time needed to settle (however reached) any disputes that may arise;

ü for the purpose referred to in point 2), the data will be processed until the termination of the Newsletter service or the request to unsubscribe, whichever comes first;

ü for the purpose referred to in point 3), the data will be processed for the 12 months following their registration, it being understood that the Data Subject may withdraw consent at any time.

In any case, this is without prejudice to further retention for the time needed to settle (however reached) any disputes that may arise.

Nature of data provision and consequences of refusal to provide data

The provision of data for the purposes referred to in point 1) is necessary and therefore any refusal to provide said data in whole or in part may make it impossible for the Data Controller to pursue the aforementioned purposes. The provision of data for further purposes is optional: failing this, the Data Controller will not be able to carry out the corresponding activities, but will still be entitled to pursue the purposes referred to in point 1).

Categories of recipients

The Data Controller shall not disclose the data, but aims to communicate them to internal figures authorised to process them in order to perform their respective tasks, and also to companies of the Group, commercial agents, credit institutions, credit insurance companies, credit recovery companies, commercial information companies, factoring companies, consultants, associations and/or business organisations professionals or service companies, as well as public and private bodies, also following inspections and audits.

Should these recipients process data on behalf of the Data Controller, they will be appointed as Data Processors with a specific contract or other legal document.

Transfer of data to a third country and/or international organisation

In order to send the newsletter, the Company uses the Mailchimp platform, whose servers are located in the United States of America. Please note that the company must refer to standard contractual clauses to legitimise this transfer.

Rights of Data Subjects

Data Subjects shall have the right to request the Data Controller to access their personal data and to rectify any inaccuracies, to erase them or limit their processing if the conditions are met, to object to their processing for legitimate interests pursued by the Data Controller, as well as obtain the portability of personal data only if they have been processed by automated means based on consent or on a contract. The Data Subject also has the right to withdraw the consent given for the required processing purposes, without this affecting the lawfulness of the processing carried out until the moment of withdrawal.

Data Subjects can exercise their rights by completing the form available here and sending it to the Data Controller at the email address: privacy@fossmarai.it. The Data Subject also has the right to lodge a complaint with the competent Supervisory Authority, i.e. the Italian Data Protection Authority (www.garanteprivacy.it).