GDPR Compilance

Information document for the processing of personal data

Pursuant to and for the purposes of EU Regulation no. 2016/679 (“GDPR”),

as well as Legislative Decree no. 196 of 30 June 2003 (“Privacy Code”).

FRIOV SRL, with registered office in Casoria (Naples), postcode 80026, at Via Gaetano Pelella 10, as Data Controller, for the purposes set out in the above-mentioned legislation and subsequent amendments and additions, informs you of the following.

Purpose of the processing.

The personal data (e.g., name, surname, company name, address, telephone number, email, bank details, etc.) you provide will be processed and stored, without your express consent (Article 6 of the GDPR – Article 24 of the Privacy Code), for purposes related to the conclusion of contracts relating to the products and services offered by the Data Controller, and in particular to fulfill all pre-contractual and contractual obligations, including legal, accounting, and tax obligations, arising from the relationship established with you, or to fulfill your specific requests prior to the conclusion of the contract.

The same data may be processed and stored to fulfill any obligations imposed by law, including EU law, or by an order of the Authority, as well as to exercise a right of the Data Controller, such as, for example, the right to protection and defense in court.

Providing your data for the aforementioned purposes is mandatory for fulfilling the aforementioned pre-contractual and contractual, accounting, and tax obligations to which the Data Controller is bound by the relationship established with you. Therefore, your refusal to provide such data, in whole or in part, or your incorrect communication of such data, could make it impossible for the Data Controller to execute the contract or to correctly perform all related and legal obligations, or, prior to the conclusion of the contract, to fulfill your specific requests.

Only with your specific and separate consent (Article 7 of the GDPR – Article 23 of the Privacy Code) may your data be processed and used by the Data Controller for marketing purposes, namely to send you, via email, post, telephone contact(s), including the use of text messages, commercial communications and/or advertising material on the products and services offered by the Data Controller, newsletters, or questionnaires to measure your level of satisfaction with the quality of the products and services offered by the Data Controller.

Access to data.

Exclusively for the purposes set out above, your data may be made accessible, or communicated, in Italy, to:

- employees and collaborators of the Data Controller, in their capacity as Data Processors or Data Processors;

- third-party companies or other entities, such as, but not limited to: professional firms, consultants, credit and insurance institutions, commercial agents and representatives, professional mediators, who carry out activities on behalf of and on behalf of the Data Controller and in their capacity as (external) Data Processors;

- public bodies, state administrations, supervisory bodies, and in general all those entities to whom communication is mandatory by law or for the fulfillment of the purposes mentioned above.

These entities will process your data as independent data controllers with the related responsibilities.

Any further or different communication or dissemination may only occur with your explicit consent, and any transfer to a third country or an international organization will take place in compliance with the guarantees provided by the relevant legislation (Article 46 GDPR).

Treatment methods.

The processing of the communicated data includes the collection, recording, organization, storage, retrieval and consultation, communication, erasure, or destruction (Article 4, paragraph 2, GDPR) performed exclusively by authorized persons, with or without the aid of automated processes and electronic devices, on paper media (e.g., estimates, orders, shipping documents, invoices, preliminary sales agreements, design documents), as well as on computerized or electronic media (e.g., data entry into a management system).

The data is stored on Aruba hosting servers and on the company's internal cloud management system located in Italy. It is understood that the Data Controller, if necessary, will have the right to move the server outside the EU, ensuring from now that such transfer will be carried out in compliance with the provisions of the GDPR (Articles 45 and 46) and, in any case, with applicable legislation.

The Data Controller will process your data for the time strictly necessary to fulfill the aforementioned purposes and, in any case, no longer than ten years from the termination of the relationship for contractual purposes and no longer than two years from collection for marketing and promotional purposes, as well as for statistical purposes.

Rights of the interested party.

In your capacity as data subject, you have the rights set forth in Articles 15 of the GDPR and 7 of the Privacy Code, and in particular:

- the right to obtain confirmation as to whether or not your data is being processed and the right to access it (right to obtain a free copy);

- the right to obtain information and indications on the source of personal data, on the purposes and methods of processing, including the retention period or the criteria used to determine it, on the existence of automated decision-making processes, including profiling and, in the most significant cases, on the logic used, as well as the significance and consequences of such processing;

- the right to obtain the data controller's identification details and information on the recipients, or categories of recipients to whom the data has been or will be disclosed, and, if transferred abroad, the right to be informed of the existence of adequate safeguards pursuant to Article 46 of the GDPR;

- the right to request and obtain the updating, rectification, and, where applicable, integration of data, deletion, limitation of processing, transformation into anonymous form, or blocking of data processed in violation of the law, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed;

- the right to object, in whole or in part, to the processing of data concerning you and the right to lodge a complaint with the Guarantor Authority

Data controller, data processors, and data processors.

The Data Controller of your personal data is FRIOV SRL, with registered office in Casoria (Naples), postcode 80026, at Via Gaetano Pelella 10, (amministrazione@techflash.it). The Data Controller maintains an updated list of data processors and data controllers.

By contacting the Data Controller at the addresses indicated, by registered letter or certified email, you may exercise the above rights.