Privacy Policy

FLAMOR SRL, located in San Pietro Mosezzo(No) at Via Biandrate 80 (hereinafter, “Data Controller”), in its capacity as data processor, informs you pursuant to Art. 13 Legislative Decree no. 196 of 30.6.2003 (hereinafter, “Privacy Code”) and Art. 13 EU Regulation no. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the following ways and for the following purposes:

1. Object of Treatment

The Controller processes personal, identification data (e.g. first name, last name, company name, address, telephone number, e-mail, bank and payment references)- hereinafter, “personal data” or also “data” communicated by you in connection with the conclusion of contracts for products/services provided by Flamor Srl.

2. Purpose of processing

Your personal data shall be processed without your express consent for the following Service Purposes: A) 1) personal data shall be processed primarily exclusively for purposes strictly related and instrumental to the performance of contractual obligations 2) for the input into computer and paper systems of the records of customer and supplier companies of products and services 3) to execute the contractual relationship established therein including related or ancillary activities or the provision of related services requested 4) to fulfil the obligations provided for by civil and/or tax laws 5) to fulfil the obligations provided for by sector regulations; 6) for the management of the Company’s website; 7) for relations with the press and information media in general; 8) for relations with entities, institutions and public administrations B) With your express consent for the following Marketing Purposes 1) to send you by e-mail, post and/or sms and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Owner and detection of the degree of satisfaction on the quality of services; 2) to send you by e-mail, post and/or sms and/or telephone contacts commercial and/or promotional communications of third parties.

3. Treatment modalities

The processing of your personal data is carried out by means of the operations indicated in Art. 4 Privacy Code and Art. 4 n. 2) GDPR and precisely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subject to both paper and electronic and/or automated processing. The Controller will process your personal data for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes and for no longer than 2 years from the collection of the data for the Marketing Purposes.

4. Data Access

A) and 2.B): – to employees and collaborators of the Data Controller, in their capacity as designated and/or internal data processors and/or system administrators; – to third party companies or others performing outsourcing activities on behalf of the Data Controller, in their capacity as designated/external data processors.

5. Data Communication

Without the need for express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes set out in art. A to third party companies or others who carry out activities in outsourcing on behalf of the Data Controller, in their capacity as designated/external data processors, as well as to those subjects to whom communication is compulsory by law for the fulfilment of the aforementioned purposes. These subjects will process the data in their capacity as autonomous data controllers. Your data will not be disseminated.

6. Data Transfer

Personal data are stored on internal paper and computer media. It is in any case understood that the Data Controller, should it become necessary, shall have the right to move the servers also to a location other than the company headquarters.

7. Rights of the person involved

In your position as data subject, you have the rights under Art. 7 Privacy Code and Art. 15 GDPR and specifically the rights to: i. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and its communication in intelligible form; ii. Obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identity of the data controller, data processors and the representative designated pursuant to Art. 5, paragraph 2 of the Privacy Code and Art. 3, paragraph 1 of the GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of the data in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing; iii. obtain: a) the updating, rectification or, where interested therein, the integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including those the conservation of which is not necessary in relation to the purposes for which the data were collected or subsequently processed c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected; iv. to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for the performance of market or commercial communication surveys, by automated calling systems without the intervention of an operator, by e-mail and/or by traditional marketing methods by telephone and/or by post. It should be noted that the data subject’s right to object, as set out in point b) above, for direct marketing purposes by automated means extends to traditional marketing methods and that, in any event, the data subject’s right to object may also be exercised in 4 part only. Therefore, the data subject may decide to receive only communications by traditional means or only automated communications or neither. Where applicable, he/she also has the rights set out in Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the Data Protection Authority.

8. How to exercise rights

You may exercise your rights at any time by sending: – a registered letter with acknowledgement of receipt to FLAMOR SRL, located in San Pietro Mosezzo(No) at Via Biandrate 80 and to the email address monica@flamor.com

9. Owner, manager and persons in charge

The Data Controller is FLAMOR SRL, located in San Pietro Mosezzo(No) at Via Biandrate 80. The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.