INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATING TO THE WEBSITE:
https://www.fmpartec.com/
FM Partec S.p.A., Company subject to the direction and coordination of Elesa S.p.A., provides the following information, in accordance with Articles 13 and 14 of EU Regulation 2016/679 (hereinafter "GDPR"), regarding the processing of your personal data when accessing the website: https://www.fmpartec.com/ (hereinafter "Website").
LINKS TO THIRD-PARTY WEBSITES
This website may include links to third-party websites, plug-ins, and applications. By clicking on those links or otherwise interacting with them, you may allow third parties to collect or share information about you.
FM Partec S.p.A. does not control third-party websites and is in no way responsible for the information contained in the privacy policies published on them.
Therefore, when you leave our website, we recommend that you review the privacy policy of any third-party website you visit.
- Data controller
The data controller is FM Partec S.p.A. (hereinafter "Controller" or "FM Partec") with registered office in Correggio (RE) - Italy, Via Europa 4 - 42015, V.A.T. number IT03067050355.
2. Type of data processed
Through the Website, the Data Controller collects the following categories of personal data:
- Navigation data: During normal operation, the IT systems and software procedures used to operate the Website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected for the purpose of identifying individual data subjects; however, due to its nature, it may, through processing and combination with data held by the Company or third parties, enable the identification of Website users..
This category of personal data includes IP addresses or domain names of computers used by users connecting to the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) etc.) and other parameters relating to the user's operating system and IT environment.
- Personal and contact details: surname, first name, email address, telephone number, address, information related to the user's login (username and password). With regard to the registration of your profile, information such as company, preferred language, VAT number, and tax code will also be collected.
- Data relating to requests for quotes: information relating to requests for quotes (company, address, telephone number, and selected products).
- Data on the user's geographical location: in order to provide the user with more accurate and useful services, the Data Controller may ask you to enter your address and postal code in order to send the purchased products, or simply the country in which you are located, if you wish to speak to a call center to request information.
Alternatively, and only with your prior explicit consent, your Internet browser software (“Browser”) may share your approximate geographic location with the Website, using information about nearby wireless access points and your device’s IP address.
In both cases, this optional use of personal data is an extremely valuable tool for providing you with even more useful FM Partec services. If you feel that sharing your approximate location via your browser is invasive, you can revoke your consent at any time by changing your browser settings (or your operating system settings) at . For more information, please read the privacy policy specific to your browser.
- Cookies: those present on the website are described in detail in the Cookies Policy.
3. Purpose, legal basis for processing, and data retention period
We collect and use your data for the following purposes:
Purpose
Data retention period
3.1 "Registration" on the Website and creation of an account:
Registration may be required to use certain services offered on the Website. The registration process consists of filling out an online form in order to create login credentials (username/email and password).
Legal basis: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the GDPR).
Please note that the information marked with an asterisk (*) in the registration form must be provided in order to allow the contract to be performed; therefore, any refusal to provide such information will prevent the registration on the Website. The provision of data not marked with an asterisk is purely optional, therefore, failure to provide such data, or providing partial or inaccurate data, will not prevent you from registering.
Your data will be stored for the entire duration of the contract and, after termination, for the ordinary limitation period of 10 years.
3.2 Compliance with legal obligations:
Compliance with obligations or exercise of rights under national or EU law.
Legal basis: processing is necessary to comply with a legal obligation to which the data controller is subject (Article 6(1)(c) of the GDPR).
This is a processing activity that the Data Controller is obliged to carry out in order to comply with specific regulatory requirements.
For the period strictly necessary to fulfill the specific legal obligation under applicable law.
3.3 Sending promotional newsletters:
Sending promotional communications and content via email. In this case, personal data is also provided voluntarily by the user when entering their email address in the newsletter subscription form.
Legal basis: consent – which is entirely optional and may be revoked at any time – (Art. 6, paragraph 1, letter a) GDPR).
It should be noted that the collection of the email address is necessary for the performance of the requested service; therefore, any refusal will prevent the newsletter from being sent.
Until you unsubscribe from the newsletter service, which can be done by clicking on the "unsubscribe" button at the bottom of each email, or until you withdraw your consent by other means.
3.4 Online quote requests:
The collection of data (first name, last name, email address, telephone number, city, country, region, and postal code) is necessary to complete the quote request, in particular to ensure the correct execution of the quote, as well as to send communications to the user regarding their quote requests.
Legal basis: processing is necessary for the performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) of the GDPR).
The provision of data is essential in order to proceed with the execution of the service. Any refusal to provide personal data will not allow the interested party to request a quotation for our products.
In particular, it is mandatory to provide the data marked with an asterisk (*) in the collection form. Any refusal to provide such information will prevent the use of the service.
Until the expiration of the quotation and subsequently within the general limitation period of 10 years.
3.5 If necessary, to ascertain, exercise, and/or safeguard the rights of the Data Controller in court and/or out of court:
Personal data processed for the purpose of providing our services may be stored for a longer period, as it may be necessary to protect the legitimate interests of the Data Controller with regard to potential liabilities related to the provision of services.
Legal basis: legitimate interest (Article 6(1)(f) of the GDPR).
In the event of judicial proceedings, for the entire duration thereof, including until the expiration of any applicable appeal periods.
3.6 Processing of any requests for information or contact and the "Request for technical drawings" service
The personal data requested for any requests for information or technical drawings will be processed in order to contact the user or respond to any requests for information or provide a service.
Legal basis: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6, paragraph 1, letter b) of the GDPR).
The provision of personal data is necessary for the performance of the requested service; refusal to provide such information will make it impossible to contact the user.
The data will be processed only for the time strictly necessary to process the request and will subsequently be destroyed or made anonymous.
3.7 Marketing:
Sending commercial/promotional communications via automated contact methods (e.g., email, SMS, or MMS) and traditional methods (e.g., mail or operator-assisted telephone calls) regarding FM Partec products/services and its partners (without transferring data to the latter), as well as customer satisfaction surveys, market research, and statistical analysis.
Legal basis: consent is optional and may be revoked at any time – (Art. 6, paragraph 1, letter a) GDPR).
The provision of data for this purpose is optional.
Until consent is revoked.
3.8 Profiled marketing:
Analysis of your preferences, habits, behaviors, and purchasing interests through evidence of your previous purchases or through the use of cookies (browsing analysis, monitoring of selected products, and virtual shopping cart) with the aim of sending communications/offers/commercial services tailored to your needs.
Legal basis: consent – which is entirely optional and can be revoked at any time – (Art. 6, paragraph 1, letter a) GDPR).
The provision of data for this purpose is optional.
Until consent is revoked.
In any case, details relating to your preferences, habits, behaviors, and purchasing interests will be deleted every 12 months.
3.9 Prevention of abuse/fraud
Browsing data may be used to prevent and detect fraudulent activity or misuse of the Website (for potentially criminal purposes), and to ascertain responsibility in the event of potential cybercrimes against the Website, allowing the Data Controller to defend itself in court if necessary.
Legal basis: legitimate interest (Art. 6, paragraph 1, letter f) GDPR).
The data will be stored for no longer than is strictly necessary to achieve the purposes for which it was collected, and may be retained for longer where required to defend the Data Controller in any subsequent legal proceedings or to comply with obligations to disclose information to public authorities.
3.10 Website administration
Browsing data is not collected to identify data subjects; however, it may allow the identification of users when combined with data held by the Company or third parties.
Browsing data is used solely to obtain anonymous statistical information about the use of the Website and to ensure its proper functioning.
Legal basis: legitimate interest (Article 6(1)(f) of the GDPR).
The data will be deleted immediately after processing.
4. Categories of recipients of personal data communications
The data may be disclosed to legitimate parties acting as independent data controllers, such as supervisory and regulatory authorities and, more generally, public or private entities legally authorized to request data.
The data may also be processed, on behalf of the Data Controller, by external entities appointed as Data Processors, who are provided with adequate operating instructions, such as:
- hosting providers or email service/platform providers;
- companies authorized to perform technical maintenance (including maintenance of network equipment and electronic communications networks);
- companies that provide website management services;
- companies that provide services related to newsletter management;
- companies that provide services requested by users (e.g., requests for technical drawings);
- Elesa S.p.A., which provides services to FM Partec, in particular for website management and marketing activities.
5. Persons authorized to process personal data
The data may only be processed by persons who have been expressly designated by FM Partec S.p.A. and who have received specific instructions from the latter on the correct methods of processing personal data.
6. Transfer of personal data to third countries
Some of the recipients indicated in paragraph 4 may be located in countries outside the European Economic Area (so-called third countries). If these countries have been recognized as adequate by the European Commission, the Data Controller will transfer personal data on the basis of an adequacy decision adopted by the European Commission, such as the "Data Privacy Framework" for data transfers to the United States. If these countries have not been recognized as adequate by the European Commission, the transfer of personal data will be carried out using one of the transfer tools provided for in Chapter V of the GDPR, such as the standard contractual clauses adopted by the European Commission. For more information, please write to [email protected] .
7. Rights of Data Subjects
By contacting the Data Controller via email at the following e-mail address [email protected] , data subjects may request at any time to access their personal data, delete data, correct inaccurate data, supplement incomplete data, restrict processing in the cases provided for in Article 18 of the GDPR, and object to processing, for reasons related to their particular situation, in cases of processing based on the legitimate interest of the Data Controller.
The data subject has the right to object to the processing of personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
Furthermore, where processing is based on consent or on a contract and is carried out by automated means, data subjects have the right to receive their personal data in a structured, commonly used format and to transmit those data to another controller without hindrance from FM Partec S.p.A.
Data subjects may always withdraw their consent at a later stage, without prejudice to the lawful processing carried out prior to such withdrawal (e.g. for marketing and profiling purposes).
Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State in which they reside or work, or in the Member State in which the alleged infringement occurred.
8. Changes to the privacy policy and related communications
We reserve the right to amend this Privacy Policy at any time by publishing the updated version on our Website. You are encouraged to review it periodically, particularly if you maintain an ongoing relationship with us. Please ensure that the personal data we hold about you is accurate and current, and notify us of any changes.