INFORMATION ON THE PROCESSING OF CUSTOMERS' PERSONAL DATA
Pursuant to Article 13 of the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”), we inform you how we collect, process, communicate and protect your data.
Data Controller: FITMAX SRL
Registered office:
Victory Square 1
42124 Reggio Emilia
CS € 50.000 iv
RI Reggio Emilia / VAT and Tax Code 02092530357
REA Reggio Emilia: n° 251193
Headquarters:
Via Fratelli Cervi 169/O
42124 Reggio Emilia
Tel. 0522/943564 - Fax 0522/946562
Email: info@fitmax.it
OBJECT OF THE TREATMENT
The Data Controller processes personal, identifying and non-sensitive data (in particular, name, surname, tax code, VAT number, email, telephone number, identity card, etc. – hereinafter, “personal data” or also “data”) communicated by you directly to our employees in the company, during registration on the website and/or when subscribing to the newsletter service offered by the Data Controller.
|
Purpose of the processing |
Legal basis for processing |
|
art. 6 paragraph 1, letter b GDPR |
|
archiving and storage of data, both electronic and paper communications regarding the business relationship |
art.6, paragraph 1, letter c GDPR |
|
For Marketing Purposes:
We inform you that if you are already our customer, we may send you commercial communications relating to services and products of the Data Controller similar to those you have already used, unless you disagree. |
art. 6, paragraph 1 letter a GDPR |
|
art. 6 paragraph 1, letter f GDPR |
TREATMENT METHODS
The processing of personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and specifically concern the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data are subjected to paper, electronic and/or automated processing.
DATA RETENTION PERIOD
The data will be processed for the time required by law. In the absence of specific limits, the data will be retained for the time necessary to achieve the purposes mentioned above. In particular:
- for the purposes related to the establishment and execution of the contractual relationship between you and the company, the data will be retained for the entire duration of the contract. After the termination of the contractual relationship for the ordinary limitation period, not exceeding 10 years. In the event of legal disputes for the entire duration of the same, until the terms for the exercise of appeal actions have expired.
- for Marketing Purposes until consent is revoked or 24 months from the provision of consent for purchase data only.
After the retention periods indicated above have elapsed, the data must be destroyed or made anonymous.
DATA ACCESSIBILITY
The data may be made accessible to employees of the company functions and collaborators of the Data Controller, in their capacity as persons in charge and/or internal managers of the processing for the purposes indicated above.
DATA COMMUNICATION
The Data Controller may communicate the data to Supervisory Bodies, Judicial Authorities and to all other subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes. The data may be processed, on behalf of the Data Controller, by external subjects designated as data controllers, who carry out specific activities on behalf of the Data Controller, for example, accounting, tax and insurance obligations, mailing, collection and payment management, etc. Your data will not be disclosed.
NATURE OF DATA PROVISION
The provision of data for purposes related to pre-contractual, contractual and tax obligations is mandatory. In their absence, we cannot guarantee you registration on the site or the aforementioned Services. The provision of data for marketing purposes is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the Services offered by the Data Controller. In any case, you will continue to be entitled to the Services for purposes related to contractual obligations.
RIGHTS OF THE INTERESTED PARTY
In your capacity as interested party, you have the rights set forth in art. 15 GDPR and specifically the rights to:
- obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
- obtain the indication: 2.a) of the origin of the personal data; 2.b) of the purposes and methods of processing; 2.c) of the identification details of the owner, managers and designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; 2.d) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or persons in charge;
- obtain: 3.a) the updating, rectification or, when interested, integration of the data; 3.b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; 3.c) certification that the operations referred to in letters 3.a) and 3.b) have been brought to the attention, also with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;
- to object, in whole or in part: 4-a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; 4-b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by email and/or through traditional marketing methods by telephone and/or paper mail
Where applicable, you also have the rights set out in Articles 16-21 of the GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.