Contacts – Privacy PolicyPRIVACY POLICY REGARDING THE PROCESSING OF PERSONAL DATA
IN THE CONTEXT OF THE COLLECTION OF CONTACT DATA AT FAIRS AND EVENTS
PURSUANT TO ART. 13 and 14 OF REGULATION (EU) 2016/679 (“GDPR”)
DATA CONTROLLERFriulchem S.p.A.
Via San Marco 23, 33099, Vivaro (PN)
telephone number: +39 0427 979911
e-mail: privacy@friulchem.comHereafter also referred to individually as the “Company” or “Controller”.

PERSONAL DATA PROCESSEDThe Controller will process the data that you provide through contact request, by means of a paper or digital form. Only common data will be collected and processed (such as personal details, company affiliation and contact information).PURPOSE OF PROCESSINGLEGAL BASIS FOR PROCESSINGDATA RETENTION PERIODResponding to contact requests from data subjects with respect to the possible establishment of a contractual relationship.Performance of a contract to which the data subject is party, or execution of pre-contractual measures taken at the request of the data subject, pursuant to Article 6.1(b) of the GDPR.For the time necessary to respond to the data subject’s request for contact and, thereafter, for six months.To fulfill obligations or exercise rights under national or European Union law.Compliance with a legal obligation to which the controller is subject, pursuant to Article 6.1(c) of the GDPR.For 10 years, or further period required by law.If necessary, to ascertain, exercise or defend the rights of the Controller in judicial or out-of-court procedures.Legitimate interest for common data under Article 6.1(f) of the GDPR.For the duration of the litigation or the out-of-court procedures, until the exhaustion of the time limits for appeal actions.After the retention periods have expired, the data will be destroyed or anonymized, consistent with technical deletion and backup procedures and the accountability needs of the Controller.
PROVISION OF DATA

Data marked with an asterisk in the registration and contact request form are necessary to contact the data subject; if the data are not provided, the purpose for which the information was collected cannot be fulfilled.

On the other hand, unmarked data are optional: failure to provide such data will not affect the possibility of contacting the data subject.

SUBJECTS AUTHORIZED TO PROCESS

The data may be processed by the employees of the company functions dedicated to the pursuit of the above-mentioned purposes, who have been expressly authorized to the processing and who have received appropriate operating instructions pursuant to Article 29 of the GDPR and 2 quaterdecies of Legislative Decree 196/2003, as amended and adapted by Legislative Decree 101/2018.

RECIPIENTS OF DATA

Data may be disclosed to parties acting as data controllers, including, in particular:

1. Companies in the Group;

Authorities and supervisory or control bodies (e.g. Agenzia delle Entrate, Guardia di Finanza).

The data may be processed on behalf of the Controller by parties designated as data processors, including, but not limited to, companies that perform IT management and/or maintenance services.

The full list of data processors is available upon request by contacting the e-mail address privacy@friulchem.com.

TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUThere will be no data transfers outside the European Union.RIGHTS OF THE DATA SUBJECT – COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the Company at privacy@friulchem.com, data subjects may:

• request access from the controller to the data concerning them, as well as request their rectification, integration, or erasure, and the restriction of processing in the cases provided for by Article 18 GDPR;
• object to the processing in cases of legitimate interest of the controller;
• receive the data in a structured, commonly used, and machine-readable format, as well as, if technically feasible, to transmit them to another data controller without hindrance (“right to data portability”);

withdraw the consent given at any time; such withdrawal will not affect the lawfulness of the processing based on the consent previously given.

Data subjects also have the right to lodge a complaint with the competent Supervisory Authority (Data Protection Authority).