PRIVACY POLICY

PRIVACY POLICY

We inform you, pursuant to Legislative Decree n. 196/2003 (Privacy Code) and in accordance with European Regulation (EU) no. 679/2016 (General Regulations on Protection of Personal Persons – GDPR), on the processing of personal data and related rights

1. The Data Controller

The Data Controller is: Fratelli Re S.p.A. - S.S. 33 of the Sempione, 51 - 20017 Rho (MI), IT

2. Categories of personal data processed

Your personal data, provided by you directly, will be processed as part of the processing of personal data.
Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (Article 4 paragraph 1 No. 1 of the GDPR).

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not used to be associated with identified individuals, but which by their very nature could allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to this site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user's computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could also be used to ascertain responsibility in case of hypothetical computer crimes against the site.

3. Purposes of data processing

3.1
The purposes related to the contractual relationship, where existing, involve the processing of registration of the registry in the company management, administrative / accounting such as management of accounting and treasury, as well as billing (for example, the verification and registration of invoices), in compliance with the requirements of current legislation

3.2
Marketing purposes include:
1. sending commercial / promotional communications through automated contact methods (e-mails) and traditional methods (telephone calls with operators and traditional mail) on the Company's products / services;
2.development of customer satisfaction, market surveys, profiling and statistical analysis;

 4.        Legal basis for data processing

The legal basis of the processing of personal data for the purposes referred to in paragraph 3.1 is your commercial agreement in order to allow the execution and management of the services.

The legal basis of the processing for the purposes referred to in paragraph 3.2 is your specific consent.

The provision of your personal data for the aforementioned purpose is optional and failure to provide it will result in only the inability to send advertising and promotional messages and to perform profiling and market research. However, the execution and management of the services agreed in the contractual context remains unaffected.

We also point out that if you have given consent to authorize to pursue the purposes referred to in paragraph 3.2, you will still be free at any time to revoke your consent and / or to oppose the processing of data for the aforementioned purposes, by sending a written communication to that effect to the addresses better specified in paragraph 9 "Rights of the interested party - complaint to the supervisory authority" that follows.

With particular regard to the exercise of the right to object for the aforementioned purposes, we inform you that if you exercise it, it will cover all the electronic, automated and traditional methods of contact, without prejudice to your right to exercise your right to oppose only some contact channels. For example by contacting the data controller at the addresses specified in the paragraph "Rights of the data subject - complaint to the supervisory authority" that follows, you may object only to sending promotional communications by automated methods (contact via e-mail, sms, mms, etc.) and therefore consent only to receiving communications using traditional methods (paper mail or telephone contact with an operator).

Following receipt of this request for revocation and / or opposition, Fratelli re SpA will proceed promptly to execute the request and update the database.

4. Methods of data processing

The processing of your data will be done by manual, computerized and telematic tools, and paper.

5. Recipients of personal data

The data can be communicated to external subjects operating as data controllers, for example, authorities and supervisory and control boards and subjects, public or private, entitled to request data. The data may be processed, on behalf of the data controller, by external parties designated as data processors, who carry out specific activities on behalf of the data controller, for example, accounting, tax and insurance, correspondence mailing, management of receipts and payments, etc.

6. Subjects authorized to treatment

The data may be processed by the employees of the company, departments responsible for pursuing the aforementioned purposes, who have been expressly authorized to process and who have received adequate operating instructions.

7. Transfer of non-EU personal data

Your Data will not be transferred outside the European space.

8. Time of retention of personal data

With regard to the processing purposes referred to in paragraph 3.1, the duration is 10 years after the end of the contract. In the case of judicial litigation, for the entire duration of the same, until the exhaustion of the terms of practicability of the appeals.

For treatments about the purposes referred to in point 3.2, the duration is 5 years.

Once the terms have elapsed, the data will be destroyed or made anonymous, consistent with the technical procedures for cancellation and backup.

9. Rights of the interested party - complaint to the supervisory authority.

By contacting the data controller by e-mail at the address servizioclienti@apexcleaning.it the interested party can ask the company for access to the data concerning him / her, their deletion, the correction of inaccurate data, the integration of incomplete data, the deletion of data , the limitation of treatment in the cases provided for by art. 18 of the GDPR, as well as to oppose the processing carried out for legitimate interest by the owner.

If the data processing is based on a consent or a contract and is carried out using automated tools, the data is entitled to receive data in a structured format that is commonly and automatically readable by an automatic device. without impediments.

The data subject has the right to lodge a complaint with the competent supervisory authority in the Member State in which he or she normally resides or work, or of the state in which the alleged violation has occurred.

The interested party has the right to revoke the consent given at any time for the marketing purposes and to oppose the processing of data for the same purposes. The interested party has the possibility to prefer to be contacted for the aforementioned purpose exclusively through traditional methods of expressing his opposition only to receiving communications through automated methods.

Release date: 25 maggio 2018