Privacy

About the Company 3F Ingranaggi S.r.l., with its registered office at Via Terrenato 4, 36010 Carrè (VI), in its capacity as Data Controller (hereinafter referred to as the “Controller”), hereby informs you, pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter “GDPR”), that your personal data will be processed in the following manner and for the following purposes:

1. Subject of the Processing
The Controller processes personal and identification data (for example: name, surname, company name, address, telephone number, e-mail address, banking and payment details) — hereinafter referred to as “personal data” or simply “data” — provided by you in connection with the execution or negotiation of contracts for the Controller’s products and/or services.

2. Purpose of the Processing
Your personal data are processed:

• for the performance of a contractual relationship to which you are a party, or for the execution of pre-contractual measures adopted at your request;
• for the fulfilment of pre-contractual, contractual, and tax obligations arising from the relationship established with you;
• for the fulfilment of obligations established by law, regulation, EU legislation, or by an order of an Authority (for example, in matters related to anti-money laundering requirements);
• for the exercise of the Controller’s rights, such as the right to legal defence in court;

Please note that if you are already our customer, we may send you commercial communications regarding products or services of the Controller similar to those you have already purchased from our company under a previous commercial relationship, unless you object to such processing.

B) only subject to your specific and separate consent (pursuant to Article 7 of the GDPR), for the following marketing purposes:

• to send you, via email, post, SMS and/or telephone calls, newsletters, commercial communications and/or advertising material regarding products and services offered by the Controller.
• to send you, via email, post, SMS and/or telephone calls, commercial and/or promotional communications from third parties (e.g., business partners,
• insurance companies).

3. Modalità di trattamento
Il trattamento dei Suoi dati personali avviene per mezzo delle operazioni indicate all’art. 4 n. 2) GDPR e precisamente: raccolta, registrazione, organizzazione, conservazione, consultazione, elaborazione, modificazione, selezione, estrazione, raffronto, utilizzo,
interconnessione, blocco, comunicazione, cancellazione e distruzione dei dati. I Suoi dati personali sono sottoposti a trattamento sia cartaceo che elettronico e/o automatizzato.

The Controller will process personal data for the time necessary to fulfil the purposes described above and, in any case, for no longer than 10 years after the termination of the relationship for the purposes indicated, and for no longer than 3 years from the collection of the data for marketing purposes.

4. Accesso ai dati
I Suoi dati potranno essere resi accessibili per le finalità di cui all’art. 2.A) e 2.B):

• to employees and collaborators of the Controller, both in Italy and abroad, in their capacity as authorized persons and/or internal data processing representatives and/or system administrators;
• to third-party companies or other entities (by way of example, credit institutions, professional firms, consultants, insurance companies providing insurance services, etc.) that carry out outsourcing activities on behalf of the Controller, in their capacity as external data processors.

5. Data Disclosure
Without the need for your express consent (pursuant to Article 6, letters (b) and (c) of the GDPR), the Controller may disclose your data for the purposes referred to in Article 2.A) to supervisory bodies, judicial authorities, insurance companies providing insurance services, as well as to those entities to whom the disclosure of data is required by law for the fulfilment of the aforementioned purposes. Such entities will process the data in their capacity as independent data controllers.
Your personal data will not be disseminated.

6. Data Transfer
Personal data are stored on servers located in Carrè/Vicenza (Italy), within the European Union. It is understood, however, that the Controller, if necessary, shall have the right to move the servers outside the EU. In such cases, the Controller hereby ensures that any transfer of data outside the EU will take place in compliance with the applicable legal provisions and subject to the adoption of the Standard Contractual Clauses approved by the European Commission.

7. Nature of Data Provision and Consequences of Failure to Provide Data
The provision of data for the purposes referred to in Article 2.A) is mandatory. In the absence of such data, we will not be able to guarantee the performance of the contract referred to in Article 2.A).
The provision of data for the purposes referred to in Article 2.B) is optional. You may therefore choose not to provide any data or to withdraw your consent to the processing of data already provided. In this case, you will no longer receive newsletters, commercial communications, or advertising material related to the products and services offered by the Controller.
You will, however, continue to be entitled to the products and services referred to in Article 2.A).

8. Rights of the Data Subject
In your capacity as a data subject, you enjoy the rights set forth in Article 15 of the GDPR, namely the rights of:

i. to obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, and to receive such data in an intelligible form;

ii. to obtain information regarding:
a) the origin of the personal data;
b) the purposes and methods of the processing;
c) the logic applied in case of processing carried out with the aid of electronic means;
d) the identification details of the Controller, the processors, and the representative designated pursuant to Article 3(1) of the GDPR;
e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative within the territory of the State, processors, or authorized persons.

iii. to obtain:
a) the updating, rectification, or, where interested, integration of the data;
b) the erasure, anonymization, or blocking of data processed in violation of the law, including those whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) have been notified, also as regards their content, to those to whom the data have been communicated or disseminated, except in cases where such fulfilment proves impossible or involves the use of means manifestly disproportionate to the right being protected.

iv. opporsi, in tutto o in parte: a) per motivi legittimi al trattamento dei dati personali che La riguardano, ancorché pertinenti allo scopo della raccolta; b) al trattamento di dati personali che La riguardano a fini di invio di materiale pubblicitario o di vendita
diretta o per il compimento di ricerche di mercato o di comunicazione commerciale, mediante e-mail e/o mediante modalità di marketing tradizionali mediante telefono e/o posta cartacea.

Where applicable, you also have the rights set forth in Articles 16–21 of the GDPR (right to rectification, right to erasure or “right to be forgotten,” right to restriction of processing, right to data portability, and right to object), as well as the right to lodge a complaint with the competent Supervisory Authority.

9. Methods to Exercise Your Rights
You may at any time exercise your rights by sending:

• a registered letter with return receipt to the Controller’s registered office address;
• an email to privacy@3fingranaggi.com.

10. Data Controller, Processors, and Authorized Persons
The Data Controller is 3F Ingranaggi S.r.l., with its registered office at Via Terrenato 4, 36010 Carrè (VI), Italy. Contact details are available on the company website at www.3fingranaggi.com.
The updated list of data processors and authorized persons involved in the processing of personal data is kept at the registered office of the Data Controller.