FASSA S.r.l., with registered office in via Lazzaris 3, Spresiano (TV), and FASSA UK LIMITED, established and registered in England and Wales under registration number 08870971 and with registered office in Business Centre, Alexandra Way, Ashchurch, Tewkesbury GL20 8TD, United Kingdom (hereinafter “Joint Controllers”), issue this statement in compliance with European and Italian regulations on the protection of personal data.

You can acquaint yourself with the main contents of the agreement pursuant to Article 26 of the GDPR between FASSA S.r.l. and FASSA UK LIMITED by e-mailing us at data.protection@fassabortolo.com.

Purposes and legal basis of processing

The Joint Controllers will process your personal data for the following purposes:

1. to respond to requests forwarded via this form, for example in order to obtain information on the Joint Controllers’ products or services (hereinafter “Service purposes”).
2. to use your contact details (e-mail address and landline and mobile phone number) to carry out opinion polls and satisfaction surveys, send commercial messages containing information on the Joint Controllers’ products or services, as well as promotion or invitations to events in which the Joint Controllers will participate (hereinafter, “Promotional purposes of the Joint Controllers”).
3. to disclose your e-mail address and phone number to third parties for them to carry out marketing activities in their own interest (hereinafter, “Promotional purposes of third parties”).

The legal basis for the purposes of personal data processing is given below.

Service purposes	Legitimate interest
Promotional purposes of the Joint Controllers	Express consent of the Data Subject which can be withdrawn at any time
Promotional purposes of third parties	Consent

 

Data storage period

Data shall be stored for the time necessary to fulfil legal obligations. If there are no legal requirements, the Joint Controllers shall keep the data for a period of time that is consistent with the purposes indicated above and the consents given. In particular, data shall be processed according to the following time criteria:

Service purposes	For the time strictly necessary in order to pursue the Service purposes
Promotional purposes of the Joint Controllers	Up to 24 months since the last communication
Promotional purposes of third parties	Up to 24 months since the last communication

 

Providing your data and the consequences of refusing to provide your data

Providing your data for Service purposes is necessary. Failure to provide your data will make it impossible for the Controller to provide you, the Data Subject, with the requested information.

Providing your data for the Promotional purposes of the Joint Controllers is optional.Any refusal to provide your data and give your consent will make it impossible for the Joint Controllers to use your data to carry out opinion polls and satisfaction surveys, send commercial messages containing information on the Joint Controllers’ products or services, as well as promotion or invitations to events in which the Joint Controllers will participate.

Providing your data for the Promotional purposes of third parties is optional.Any refusal to provide the data and to give consent shall make it impossible for the Joint Controllers to disclose your data to third parties for them to carry out marketing activities in their own interest.

 

Categories of recipients

The Controller will not disseminate the data, but intends to disclose them to internal personnel authorised to process them on the basis of their respective duties, as well as to Group companies, consultancy firms, and public and private bodies, also as a result of inspections and audits.

These recipients, where they process data on behalf of the Controller, will be appointed as data processors under an appropriate contract or other legal document.

 

Transfer of data to a third country and/or international organisation

For specific needs associated with the pursuit of the purposes specified above, some of your personal data may be transferred to non-EU countries and/or organisations. On a case-by-case basis, grounds for the lawful transfer of personal data may be:

• the existence of adequacy decisions issued by the EU Commission for certain countries that guarantee the same level of protection for the transferred data as that guaranteed in the European Union;
• the need to fulfil the obligations relating to the employment relationship, or the need to fulfil the commitments, including contractual commitments, undertaken by our Company in your interest and on your behalf or, lastly, to pursue the legitimate interests of our Company.

 

Rights of data subjects

You have the right to request the Joint Controllers for access to your personal data and to rectify them if they are inaccurate, delete them or restrict processing where there are grounds to do so, to object to their processing for legitimate interests pursued by the Joint Controllers, and to obtain portability of the data you personally provide only if subject to automated processing based on your consent or on a contract. You also have the right to withdraw the consent given for the processing purposes that require it without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you can write to the Joint Controllers at the following address: data.protection@fassabortolo.com. You also have the right to lodge a complaint with the competent authority.