FIM INDUSTRIE MECCANICHE

Privacy Policy

We protect your information as we protect your data

Requirement

Your privacy is important to FIM INDUSTRIE MECCANICHE S.r.l. UNIPERSONALE.

FIM INDUSTRIE MECCANICHE S.r.l. UNIPERSONALE (hereinafter referred to as FIM), with registered office in Via Cerreto n.2 61012 Gradara (PU), has drafted, in a simple and understandable way, this document, concerning the use of your personal data, how and why we collect them and how we manage them.

Please note that the use of personal data is to be understood as any operation or set of operations, carried out with or without the aid of electronic devices, concerning the collection, recording, organization, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if not recorded in a database.

This policy applies when you visit our website or our social media channels; when you subscribe to our newsletter; request our support; or if you are a customer, supplier, partner, consultant or any other person who has a business relationship with FIM.

The information and data you provide will be treated in accordance with applicable laws and regulations (including, but not limited to, the General Data Protection Regulation (GDPR), EU Regulation 2016/679).

The use of data by FIM will be based on the principles of correctness, lawfulness, transparency, accuracy, integrity, confidentiality, limitation of purposes and storage and minimization of data.

THE LEGAL BASES FOR OUR TREATMENT OF YOUR PERSONAL DATA

FIM bases the treatment of your personal data on different legal bases:

  • your consent (only when necessary or permitted by law). In this case, you will still have the right to withdraw your consent;
  • the requirement to establish a contractual rapport and fulfill the obligations arising from it;
  • the need to comply with applicable laws and to establish, exercise or defend against legal action;
  • the need to pursue its legitimate interests: ensuring that networks and information are secure, preventing or inquiring into
  • presumed or effective violations of the law, of commercial contracts or cases of non-compliance with its corporate principles;
  • the demand to respond to your requests;
  • any other legal basis permitted by applicable law.

WHAT KIND OF PERSONAL DATA WE USE, FOR WHAT PURPOSES AND FOR HOW LONG WE KEEP IT

a) Customer data
In order to allow the use of the services provided for in the contractual agreements and to comply with the tax obligations and the regulations in force, FIM will collect the following data relating to customers: Name – Surname – Company name (in case of subject other than private) – Tax code – VAT number (in case of subject other than private) – Address – City – Cap – Province – Telephone numbers – Email addresses. These data will be kept for the purposes of providing services, as well as for promotional activities and for a period of 10 years from the termination of the contractual relationship. For tax purposes and other obligations under the law, the same data will be kept for 10 years, unless the law does not allow a longer conservation period, also because of the accrual of the prescription of any rights claimed by third parties.

b) Customer and Supplier data
In order to ensure the proper performance of the employment relationship, we need the contact details of the relevant persons working within the supplier company (such as names, surnames, telephone numbers and e-mail addresses). We also need all the data necessary to issue the invoice, as well as the bank details necessary to pay for the services purchased (if it is part of the contractual agreements concluded). For the above purposes, the data will be kept for a period of 2 years from the termination of the contractual relationship. For fiscal purposes and for other legal obligations, the data will be kept for 10 years, unless the law does not allow a longer conservation period, also because of the expiry of the prescription of any rights claimed by third parties.

c) Data of third parties provided by the interested party
It may happen that you provide the data of third parties to request services on behalf of third parties or to differentiate the billing contacts (in case it is your customer who makes the payment directly for the service). In this case, you will be the sole owner of the treatment of such data with obligations and responsibilities under the law. These data will be kept exclusively for tax purposes (invoicing) for a period of 10 years and for a period of 6 months from the termination of the service to which they refer, unless the law does not require or allow a longer conservation period.

d) Data treatment resulting from the connection with social media
You can register on the FIM website even if you have a Facebook profile. In this case, Facebook will automatically provide FIM with some of your personal data. These subjects will automatically provide FIM with some of your personal data. These data will be kept for the purposes of providing services, as well as for promotional activities and for a period of one year from the termination of the contractual relationship. Unless a major is not imposed by order of the authority.

e) Cookies
Access to the site www.meccanicafim.it may involve the sending, by our servers to the user’s computer, so-called “cookies”, ie files that allow you to obtain information on the pages visited in order to speed up the use of various services. The use of cookies is limited to the duration of the single session and does not allow in any way the acquisition of personal data identifying the user. The acquired data will not be stored but will be deleted when the browser is closed. You can choose at any time to disable cookies by simply changing the settings of your browser, but please note that deactivation of cookies may slow down or prevent access to certain sections of the site. You can find more information in the Cookie information on the site.

HOW WE HANDLE YOUR DATA FOR PROMOTIONAL PURPOSES

FIM may send you marketing communications about its services, products, promotions or events via email, telephone and other parties’ social networks. These communications may also be customized according to your preferences (expressly indicated by you or inferred from visits to the FIM website or according to the links you click). Before starting any marketing activity and if required by applicable laws, we will ask you to give us your consent, which you can withdraw by sending a request PEC email to meccanicafim@messaggipec.it. Even if you withdraw your consent to receive marketing communications, you may still receive other types of communications (e.g. important technical or administrative notices).

WHO IS THE HOLDER OF THE PERSONAL DATA TREATMENT

The owner of the treatments carried out through the site is FIM with headquarter in Via Cerreto n.2 61012 Gradara (PU) can be contacted at the following email info@meccanicafim.it.

The appointed data controller can be contacted at the following address PEC pecektos@pec.it for all information relating to the processing of personal data and to provide a list of all managers involved in the management.

WHO THE RECIPIENTS OF THE PERSONAL DATA ARE

The recipients of the personal data collected are:

  • people, companies and professional firms that provide accounting, administrative, tax or legal consultancy services to FIM;
  • subjects with whom FIM interacts for the purposes of providing services;
  • entities providing services related to the collection of payments (e.g. bank transfer, credit card);
  • any entities carrying out maintenance activities;
  • other institutions or authorities to which, for reasons or legal obligations, it is necessary to communicate your personal data;
  • persons authorized by FIM to carry out activities necessary for the provision of services (with legal obligation of confidentiality).
  • The complete list of data controllers can be requested by sending a PEC email to pecektos@pec.it.

WHAT RIGHTS YOU CAN APPLY

As a person concerned, you may exercise your rights under Articles 16 to 22 of EU Regulation 679/16:

Article 16 – Right of correction
You have the right to obtain from the data controller the correction of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the completion of incomplete personal data, including by providing an additional statement.

Article 17 – Right to cancellation
You have the right to obtain from the data controller the removal of your personal data without undue delay and the data controller is obliged to remove your personal data without undue delay if one of the following reasons is given:

  • personal data are no longer necessary for the purposes for which they were collected or otherwise processed; 4.5.2016 EN Official Journal of the European Union L 119/43
  • withdraws the consent on which the treatment is based in accordance with Article 6(1)(a) or Article 9(2)(a) and if there is no other legal reason for the treatment;
  • you oppose treatment under Article 21(1) and there are no overriding legitimate reasons to proceed with the treatment, or you oppose treatment under Article 21(2);
  • personal data have been treated unlawfully;
  • personal data must be erased in order to comply with a legal obligation under Union law or the law of the Member State to which the controller is subject;
  • personal data have been collected in relation to the supply of information society services as referred to in Article 8(1).

The data controller, if he has made personal data public and is obliged, in accordance with paragraph 1, to delete them, taking into account available technology and implementation costs, shall take reasonable steps, including technical measures, to inform the data controllers that they are handling personal data of your request to delete any link, copy or reproduction of your personal data.

Paragraphs 1 and 2 shall not apply to the extent that treatment is necessary:

for the exercise of the right to freedom of expression and information;

for the establishment, exercise or defense of a right in court.

Article 18 – Right to limiting treatment
You have the right to obtain from the data controller the limitation of the treatment when one of the following situations occurs:

you contest the accuracy of the personal data, for the period needed by the data controller to check the accuracy of such personal data;

the processing is unlawful and you oppose the deletion of personal data instead asking that it must be limited in use;

although the data controller no longer needs it for the purposes of treatment, your personal data are necessary to establish, exercise or defend a right in court;

you have opposed treatment in accordance with Article 21(1) pending verification of whether the legitimate reasons of the controller override those of the data subject.

Where treatment is limited in accordance with paragraph 1, such personal data shall, except for the purposes of storage, be treated only with your consent or for the establishment, exercise or defense of a right in court or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3.

If you have obtained a restriction on treatment in accordance with paragraph 1, you are informed by the data controller before this restriction is lifted.

Art. 19 – Right to obtain notification from the data controller in cases of correction or cancellation of personal data.
The controller shall inform each recipient to whom the personal data have been transmitted of any corrections or deletions or limitations to the treatment carried out pursuant to Articles 16, 17(1) and 18, unless this proves impossible or involves a disproportionate effort. The controller shall inform you of such recipients if you so request.


Article 20 – Right to portability
You have the right to receive in a structured, commonly used and machine-readable format personal data about you provided to a data controller and you have the right to pass such data on to another data controller without obstacles from the data controller to whom you have provided them, if:

  • the treatment is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b);
  • the processing is carried out by automated systems
  • In pursuing your data portability rights under paragraph 1, you have the right to obtain direct transmission of personal data from one data controller to another, if technically possible.
  • The right referred to in paragraph 1 of this Article shall be exercised without prejudice to Article 17.
  • The right referred to in paragraph 1 shall not affect the rights and freedoms of others.

Article 21 – Right of opposition
You have the right to object at any time, on matters relating to your particular situation, to the processing of your personal data pursuant to Article 6(1)(e) or (f), including profiling on the grounds of those provisions. The data controller shall refrain from further handling personal data unless he or she demonstrates that there are legitimate reasons for the handling which take precedence over your interests, rights and freedoms or for the establishment, exercise or defense of a right in a court of law. Where personal data are treated for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such purposes, including profiling to the extent that it relates to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be treated for those purposes. 4.5.2016 EN Official Journal of the European Union L 119/45 4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to your attention and shall be presented clearly and separately from any other information at the latest at the time of the first communication with you. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications. Where personal data are used for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89(1), you shall, for reasons related to your particular situation, have the right to object to the use of personal data concerning you, unless such use is necessary for the performance of a task carried out in the public interest.

Article 22 – Right to refuse the automated process
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which significantly affects you in a similar way. Paragraph 1 shall not apply where the decision:

  • is necessary for the purpose of concluding or performing a contract between you and a data controller;
  • is authorized by the law of the Union or of the Member State to which the data controller is subject, which shall also specify appropriate measures to protect your rights, freedoms and legitimate interests;
  • based on your explicit consent.
  • In the cases referred to in paragraph 2(a) and (c), the data controller shall implement appropriate measures to protect your rights, freedoms and legitimate interests, at least the right to obtain reasonable human intervention from the data controller, to express his views and to contest the decision.
  • The decisions referred to in paragraph 2 shall not be based on the special categories of personal data referred to in Article 9(1), unless Article 9(2)(a) or (g) applies and adequate measures are in place to protect your rights, freedoms and legitimate interests.

In this sense you can have access to your data for:

– Verify its truthfulness

– Modify them in case they become inaccurate

– Supplement them also with a supplementary declaration

– Request cancellation

– Limit the treatment

– Opposites to treatment

The data controller is obliged to respond without unjustified reason.

DATA DELETION

FIM in compliance with the corresponding right of access to the person concerned, has set up procedures for which you can request the cancellation without undue delay of your personal data or the limitation of the treatment of personal data concerning you for the following reasons:–

  • Because the data are no longer necessary for the purposes for which they were collected
  • Because you withdrew your consent
  • Because you oppose the treatment
  • Because the data is being treated unlawfully.

You can exert the above rights by writing to the PEC email pecektos@pec.it

CHANGES TO THE PRIVACY POLICY

This privacy policy is valid since May 22, 2018 and FIM may modify or update its content.

You will be informed of such circumstances and the changes will be effective as soon as they are posted on our website www.meccanicafim.it.

Please visit the Privacy section to check the current version.

FIM