PRIVACY POLICY – WEB GENERAL

Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”) Information to be provided where personal data are collected from the data subject

According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you the due information concerning the processing of collected personal data. This notice is not to be considered valid for other websites attainable trough links and data processor shall not be held responsible for third parties web pages. This notice is provided pursuant to art. 13 of the Regulation (EU) 2016/679 (General Data Protection Regulation) and according to the provisions of the Directive 2002/58/CE, as amended by Directive 2009/136/CE on Cookies, as well as according to the Provision of the Data Protection Authority dated 08.05.2014 on cookies. Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30).

DATA CONTROLLER

pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is C.F.B. S.p.A., registered office in via Don Sturzo n. 9, 23895 Nibionno (Lc), Italy, represented by the legal representative pro tempore.

PURPOSES AND LAWFULNESS OF THE PROCESSING

Purpose of processing

Legal Basis

Data retention

Data conferral

A) Website browsing

Legitimate interest | Data subject rights

Activities strictly related to site operations and to platform browsing service provision.

Session

Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms

B) Contact request – Information request

Legitimate interest |

Subjects request

1 year

Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms

The consent given may be withdraw in any moment sending an e-mail to info@cfbspa.it. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA Personal data provided by you may be communicated to recipients who will act as Processors (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes pointed ahead. Precisely, your data may be communicated to recipients part of the following categories:

- subjects providing services for the management of the information system used by C.F.B. S.p.A. and telecommunications networks;

- Freelancers;

- studies or companies in the context of assistance and consultancy relationships;

- subjects providing services related to the management of the above mentioned purposes (communication, brochure printing, fliers, websites, videos);

- platform operators for the abovementioned services (websites hosting, etc);

- Commercial partners, upon consent;

- Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;

DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION

Personal data provided won’t be transferred to a third Country outside the European Union.

DATA SUBJECT’S RIGHTS

You may freely exercise your rights at any time under Reg. EU 2016/679 –GDPR, Sections15, 16, 17, 18, 19, 20, 21 by contacting the Data Controller – C.F.B. S.p.A. in person of its legal representative sending an email to privacy@cfbspa.it

You have the right, at any time, to obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed, request their rectification or erasure.

Moreover You have the right, at any time, to oppose to personal data processing (also to profiling) without prejudice to lawfulness of processing.

Without prejudice to any other administrative or judicial remedy, in case you consider your data processing in contrast with Reg. UE 2016/679, pursuant to article 15 lett. f) of Reg. UE 2016/679, you have the right to lodge a complaint with a supervisory authority (www.garanteprivacy.it) and, pursuant to article 6 paragraph no. 1, lett. a) and article 9, paragraph no. 2, lett. a), you have the right to revoke your expressed consent at any time.

Exercising your right to data portability, the Data Controller may provide your personal data in a structured, commonly used and machine-readable format subject to the provisions set forth in paragraphs 3 and 4 of art. 20 of Regulation EU 2016/679.

Informative amendments: Data processor retains the right to modify, update, add or remove some parts of this informative at any time.

ABOUT COOKIE

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by this latter. The identifier is then sent back to the server each time the browser requests a page from the server.

Cookies can be deployed by the owner of the site and\or exploited by a third party.

For further information, please visit: www.allaboutcookies.org.

COOKIES CATEGORIES

Temporary cookies are deleted when the navigation session ends

Long-lasting cookies are deleted by the expiry date

MANAGING COOKIES VIA BROWSER

For further information and to manage your preferencies, you can visit your browser web-site

Internet Explorer

Google Chrome

Mozilla Firefox

Safari

Nibionno: 05/05/2020