LIMEA FISMA SPA, as the Data controller, located in Marcallo con Casone, Viale Einstein, 38/44, aims hereby to provide natural persons, who operate in the name and on behalf of clients, of suppliers, of partners and of other parties concerned in relationship activities, in pre-contractual and post activities of LIMEA FISMA SPA, with concise and transparent information in compliance with the Italian Law and EU’s Article 13 GDPR 679/16 – “General Data Protection Regulation”.
-
The data being processed
Personal data being processed consists of personal and contact details provided or received from the interested person on the following occasions:
- visits or phone calls or email;
- direct contacts obtained after participation in events, etc.;
- commercial information requests, submission of proposals;
- requests received through our website or through websites of clients, suppliers, partners or other parties;
- communications and transactions following the purchase order for the supply of goods or services (supplied/purchased).
-
Purposes of processing
Personal data of natural persons, who operate in the name and on behalf of clients, of suppliers, of partners and of other parties is processed for the following purposes:
- forward communications by various means of communication (phone, mobile phone, sms, email, fax, mail, etc.);
- formulate requests or process requests received;
- exchange information necessary for the performance of a contractual relationship, including pre- and post-contractual activities, which also comprise assistance;
- invoicing and any activity related to sales or service provision.
The interested party can refuse to provide his/her personal data to the Data controller. The provision of personal data is however necessary for a correct and efficient management of contractual relationship with clients, suppliers, partners and other parties involved in Data controller’s activities. Therefore a refusal to provide the data could compromise the contractual relationship itself or pre- and post-contractual activities in whole or in part.
-
Legal basis
The processing is necessary for the performance of a contract to which every subject is a party or for the performance of pre- or post-contractual measures adopted upon request of supplier, client, partner, other parties or LIMEA FISMA SPA. It is furthermore necessary for business interests.
-
Methods of processing
The data of the interested parties shall be processed using manual or automated instruments also through the input into the databases, registers and lists suitable for recording, management and transfer of the data, in the ways and within the limits necessary to reach the indicated purposes. In order to protect the data of natural persons, who operate in the name and on behalf of clients, of suppliers, of partners and of other parties, LIMEA FISMA has provided the appropriate security measures such as: firewall, antivirus, encrypted backups, access with smartphone or biometric systems. The data shall be processed only by the persons authorized to process the data inside LIMEA FISMA SPA, in regard to the purposes of processing.
-
Recipients of data
Personal data processed by the Data controller shall not be disclosed, i.e. shall not be communicated to unspecified parties, in any possible form, including that of their availability or simple consultation. On the other hand, the data can be communicated to the Data controller’s employees and to some external parties that collaborate with them, always in compliance with the indicated purposes. (i.e. payroll preparation). In particular, these are employees/collaborators, who on the grounds of their positions and work tasks carried out, have been authorized to process personal data within the limits of their competency and in accordance with the instructions given to them by the Data controller. Only if strictly necessary, the data can also be communicated to those parties who have to use it for specific purposes such as place our orders or process information and quotation requests or formulation of proposals. Either our technicians in charge or external consultants or technicians appointed by the enterprises that provide assistance for SW applications, for information networks and for connectivity could access the data. In the end, the data can be communicated to the parties authorized to access it pursuant to the statements of laws, regulations, European norms.
-
Transfer of personal data
The Data controller can’t transfer personal data to third countries or international organizations.
-
Conservation of personal data
The Data controller keeps and processes personal data for the period of time necessary to comply with the indicated purposes. Afterwards personal data will be stored, and not processed further, for 10 years in conformity with the relevant legislation.
-
Rights of the interested party
Pursuant to Arts. 15 – right of access, 16 – right to rectification, 17 – right to erasure, 18 – right to restriction of processing, 20 – right to data portability, 21- right to object, 22 – right to object to automated decision-making process of GDPR 679/16, the interested party exercises his/her rights by writing to the Data controller to the address indicated above or to the following email address: amministrazione@limefisma.it by specifying the object of the request, the right the interested party intends to exercise and by attaching a copy of identity document that certifies the legitimacy of the request.
-
Lodging a complaint
The interested party has the right to lodge a complaint with the supervisory authority of his/her home State. To get more information on the right to lodge a complaint you can visit this web page: Supervisory authority – Complain
