Dear Customer/Supplier,
Pursuant to Art. 13 EU Regulation No. 2016/679 (hereinafter, ‘GDPR’), we inform you that the processing of the data you provide will be carried out using methods and procedures aimed at ensuring that the processing of personal data is carried out in compliance with the fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality and security, personal identity and the right to protection of personal data. We remind you that processing means any operation or set of operations, performed with or without the help of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction (Art. 4 GDPR).

.

1) Object of processing and legal basis.
The data are processed by Fonderia Metalli Centrifugati srl. in accordance with art. 6 GDPR for the implementation of email marketing campaigns and the sending of commercial communications. The data refer to contacts relating to those who interact with Fonderia Metalli Centrifugati srl;

2) Data source.
The data is collected from the person concerned by filling in paper forms. Data may also be collected by means of, telematic tools and/or business applications.

3) Modalities and data processing.
Processing is carried out by means of the operations indicated in Article 4 GDPR:
- raccolta dei dati presso l’interessato, tramite compilazione di modulistica cartacea mediante strumenti telematics and/or company applications;
- recording and processing in computerised and paper form;
The data will be processed using instruments that guarantee their confidentiality, integrity and availability. The processing shall be carried out on paper and by means of computerised and/or automated systems and will include all the operations or set of operations provided for in Article 4 of the GDPR and necessary for the processing in question, including communication to the persons in charge of the processing itself.
All data are protected through the use of antivirus, firewall and password protection.

4) Data retention times (DATA RETENTION).
The Data Controller will process personal data for the time necessary to fulfil the above-mentioned purposes and in any case for no longer than 10 years from the termination of the contractual relationship. After this period, the data will be destroyed or made anonymous.

5) Rights of the data subject
According to the provisions of the GDPR, the data subject has the following rights vis-à-vis the Data Controller:
- obtain confirmation as to whether or not personal data relating to him are being processed and, if so, to if so, to obtain access to the personal data (Right of Access Art. 15);
- to obtain the rectification of inaccurate personal data concerning him/her without undue delay (Right of Rectification Art. 16);
- obtain the erasure of personal data concerning him/her without undue delay and the controller the controller is obliged to delete the personal data without undue delay, if certain conditions (Right to be forgotten Art. 17);
- obtain the restriction of processing in certain cases (Right to restriction of processing Article 18);
- receive in a structured, commonly used and machine-readable format the personal data provided to him/her and the right to transmit such data to another data controller, without prevented by the controller to whom he has provided it, in certain cases (Right to portability of data Art. 20);
- object at any time, on grounds relating to his particular situation, to the processing of personal data concerning him/her (Right to object art. 21);
- receive without undue delay notice of the personal data breach suffered by the data controller of the processing (Art. 34);
- revoke the consent given at any time (Conditions for consent art. 7).

The data subject also has the right to lodge a complaint with the Data Protection Authority.

6) Data Controller
Company: Fonderia Metalli Centrifugati srl
P. IVA:00304580061
Address: Tito Carbone, 58
City: 15050 – Carbonara Scrivia (AL)
Tel/Fax: +39 0131 892101
E-mail: info@fmc.al.it
The list of persons responsible for and authorised to process data can be consulted at the Controller's premises.