PRIVACY POLICY

NOTICE PURSUANT TO ARTICLES 13 AND 14 OF REGULATION 2016/679/EU

Following the application of the new European Regulation no. 679/2016 for the protection of personal data – GDPR – FRALEN SRL, as the Data Controller, has simplified the general corporate privacy policy.

This is part of the Company’s commitment to guaranteeing transparency on how it processes data and keeps them safe. Hereafter general information will be provided on personal data, the contact details for the Data Controller, and the means of exercising rights. On this page, it is possible to find the individual detailed notices which can be downloaded.

What are personal data?

Personal data are information regarding a physical person, whether identified or identifiable. An identifiable physical person is an individual who can be identified directly or indirectly, through reference to information such as their name, identity document number, data on their location, online identification or one or more specific factors of the physical, physiological, genetic, mental, economic, cultural or social identity of the person. Data provided anonymously or in aggregate form which no longer enable the identification of a specific physical person, not even in combination with other information, are not considered personal data.

What is meant by processing?

Processing means any operation or set of operations, carried out with or without the help of automated processes and applied to personal data or collections of personal data, regarding their collection, registration, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blockage, communication, dissemination, cancellation and destruction.

Data Controller

The Data Controller is FRALEN SRL with its registered office in Via PAOLO EMILIO 7, 00195 Rome (RM). It is possible to exercise the rights of the data subjects and/or ask for clarification on the protection of personal data, by writing to  dpo@nardiroma.it

Legal purposes and bases

The legal foundation underpinning the processing, the methods, the data retention period and any other information envisaged by the new law, are clearly set out in detail in the specific notices by category of data subjects, which can be downloaded on this page.

What are your rights?

At any time and for free without any particular duties and formalities regarding your request, you may:

– obtain confirmation of the processing undertaken by the Controller;

– access your personal data and learn their origin (when the data are not obtained directly from you), the purposes and aims of the processing, the data of the subjects to whom the data are communicated, the retention period or the criteria useful to determine the period;

– withdraw consensus at any time, should this be the basis of processing. The withdrawal of consensus in any case does not prejudice the legality of the processing based on the consensus undertaken before its withdrawal;

– update or rectify your personal data so that they are always precise and accurate;

– cancel your personal data from data banks and/or archives, also of the Controller’s backup, should, among other things, they no longer be necessary for the purposes of the processing or if this is assumed to be illegal, and only if the conditions envisaged by the law exist; and, in any case, if the processing is not justified by another equally legitimate reason;

– limit the processing of your personal data in some circumstances, for example where you have challenged their accuracy, for the period necessary for the Controller to verify their accuracy;

– obtain their personal data, if received and/or in any case processed by the Controller with their consensus and/or if their processing takes place on the basis of a contract and with automated tools, in digital form also in order to transmit them to another Data Controller.

The Controller will proceed in this sense without delay and, in any case, at the latest within a month of receiving the request. The deadline can be extended by two months, if necessary, taking account of the complexity and number of the requests received by the Controller. In these cases the Controller, within a month of receiving the request, will inform you of the reasons for the extension. For any other information and in any case to send your request, you may write to dpo@nardiroma.it

How and when can you oppose the processing of your personal data?

For reasons relating to your particular situation, you can object at any time to the processing of your personal data if this is based on legitimate interest or if it occurs for marketing purposes (direct, research  and market surveys) and/or profiling by sending your request to dpo@nardiroma.it