Privacy Policy

The Data Controller processes personal identification data (for example: name, surname, company name, address, telephone number, e-mail address, bank and payment details, tax code) – (hereinafter, “personal data” or even “data”) communicated by you (online, in person, by telephone, by email or by any lawful means) for the purposes described below.

Your personal data are processed:

The personal data you provide will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with adequate technical, organizational and security measures provided for by the GDPR.

Within the limits relevant to the processing purposes indicated, your data may be disclosed to employees and collaborators of the Data Controller; to the Controller’s network of agents; to associated companies; affiliates and subsidiaries; to business partners; to parent company; to factoring companies; to credit institutions; to credit recovery companies; to credit insurance companies; to professionals and consultants; to companies operating in the transport sector; to our subcontractors or subcontractors if engaged in the execution of activities related to our contractual relationships; to persons specifically appointed and / or authorized by the Data Controller who provide it with data processing services, consultancy, financial statements certifications, or who in any case carry out activities that are instrumental, complementary and functional to that of the Data Controller in execution of activities relating to the existing contractual relationship; and also “to all the subjects to whom the communication is due by reason of legal obligations.

Without the need for express consent (Article 6 letter b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in point 1 to Supervisory Bodies, Judicial Authorities, to insurance companies for the performance. of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes. These subjects will process the data in their capacity as independent data controllers. Your information will not be disseminated.

Personal data are stored on servers located in Italy, within the European Union.
The collected data will not be transferred to non-EU countries.

The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“conservation limitation principle”, Article 5, GDPR) or on the basis of the deadlines set by law.

The Data Controller will therefore process the personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes referred to in point 1 above and for no more than 5 years from the collection of data for the purposes referred to in point 2 above.

In the case of personal data contained in curriculum vitae, such data will be processed for a period not exceeding 12 months.

The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

The provision of data for the purposes referred to in point 1 above is mandatory. In their absence, we will not be able to guarantee the fulfillment of the provisions of point 1.

The provision of data for the purposes referred to in point 2 above is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided.

In your capacity as an interested party, you have the rights referred to in art. 15 GDPR and precisely the rights of:

1. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
2. obtain the indication: i) of the origin of the personal data; ii) the purposes and methods of the processing; iii) the logic applied in case of treatment carried out with the aid of electronic instruments; iv) the identity of the owner, manager and the representative appointed pursuant to art. 3, paragraph 1, GDPR; v) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents;
3. obtain: i) updating, rectification or, when interested, integration of data; ii) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; iii) the attestation that the operations referred to in letters i) and ii) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment it proves impossible or involves the use of means that are manifestly disproportionate to the protected right;
4. object, in whole or in part: i) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; ii) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in point ii) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the interested party to exercise the right of opposition also only partially. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication.

Where applicable, it also has the rights referred to in Articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.