Privacy policy
INFORMATION RELATING TO THE PROCESSING OF PERSONAL DATA OF CUSTOMERS
Pursuant to article 13 of the General Data Protection Regulation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free movement of such data (hereinafter "GDPR"), we inform you how we collect, process, communicate and protect your data.
Data controller: FITMAX SRL
Registered office:
Victory Square 1
42124 Reggio Emilia
CS €50,000 iv
RE Reggio Emilia / VAT and Fiscal Code 02092530357
REA Reggio Emilia: No. 251193
Operational headquarters:
Via Fratelli Cervi 169/O
42124 Reggio Emilia
Tel. 0522/943564 - Fax 0522/946562
Email: info@fitmax.it
OBJECT OF THE TREATMENT
The Data Controller processes personal, identifying and non-sensitive data (in particular, name, surname, tax code, VAT number, email, telephone number, identity card, etc. - hereinafter, "personal data" or even "data" ) communicated by you directly to our employees in the company, during registration on the website and/or when subscribing to the newsletter service offered by the Data Controller.
| Purpose of the treatment | Legal basis of the treatment |
| - fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships; - fulfill management obligations relating to the purchase phase (e.g. receiving orders, preparing bills/delivery notes, ..) - fulfill billing and payment obligations. |
art. 6 paragraph 1, lett. b GDPR .performance of a contract |
| - filing and storage of data, both electronic and paper communications regarding the commercial relationship | art.6, paragraph 1, letter c GDPR Treatment necessary to fulfill a legal obligation to which the owner is subject |
| For Marketing Purposes: - send via email, newsletters, commercial communications and/or advertising material on products or services offered by the Owner and/or by the Sponsor Companies of the events organized by the Owner himself. We point out that if you are already our customer, we will be able to send you commercial communications relating to the Owner's services and products similar to those you have already used, unless you disagree. |
art. 6, paragraph 1 letter a GDPR .Consent of the interested party |
| - prevent or detect fraudulent activity or abuse harmful to the website; - exercise the rights of the Owner, for example the right of defense in court. art. 6 paragraph 1, lett. f GDPR . Processing necessary for the pursuit of the legitimate interest of the owner |
art. 6 paragraph 1, lett. f GDPR . Processing necessary for the pursuit of the legitimate interest of the owner |
METHODS OF TREATMENT
The processing of personal data is carried out by means of the operations indicated in art. 4 no. 2) GDPR and precisely concern the collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data is subjected to paper, electronic and/or automated processing.
DATA RETENTION PERIOD
The data will be processed for the times established by law. In the absence of precise limits, the data will be kept for the time necessary to achieve the aforementioned purposes. In particular:
for purposes related to the establishment and execution of the contractual relationship between you and the company, the data will be kept for the entire duration of the contract. After termination of the contractual relationship for the ordinary limitation period, not exceeding 10 years. In the case of judicial litigation for the entire duration of the same, until the exhaustion of the terms of practicability of the appeal actions.
for Marketing Purposes until the consent is revoked or 24 months from the provision of consent for purchase data only.
Once the storage terms indicated above have elapsed, the data must be destroyed or made anonymous.
ACCESSIBILITY TO DATA
The data may be made accessible to employees of the company functions and collaborators of the Data Controller, in their capacity as persons in charge and/or internal data processors for the purposes indicated above.
DATA COMMUNICATION
the Data Controller may communicate the data to Supervisory Bodies, Judicial Authorities as well as to all other subjects to whom the communication is mandatory by law for the accomplishment of the aforementioned purposes. The data may be processed, on behalf of the Data Controller, by external subjects designated as data processors, who carry out specific activities on behalf of the Data Controller, by way of example, accounting, tax and insurance compliance, mail shipments, collection and payment management, etc. Your data will not be disclosed.
NATURE OF THE PROVISION OF DATA
The provision of data for purposes related to pre-contractual, contractual and tax obligations is mandatory. In their absence, we could not guarantee you registration on the site or on the aforementioned Services. The provision of data for marketing purposes is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the Services offered by the Data Controller. In any case, you will continue to be entitled to the Services for the purposes related to contractual obligations
RIGHTS OF THE INTERESTED PARTY
In your capacity as an interested party, you have the rights referred to in art. 15 GDPR and precisely the rights of:
obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
obtain the indication:2.a) of the origin of the personal data;2.b) of the purposes and methods of the treatment;2.c) of the identification details of the owner, of the managers and of the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; 2.d) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or agents;
obtain: 3.a) updating, rectification or, when interested, integration of data; 3.b) cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed; 3.c) the attestation that the operations referred to in letters 3.a) and 3.b) have been carried aware, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
object, in whole or in part: 4-a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; 4-b) to the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by email and/or through traditional marketing methods by telephone and/or paper mail
Where applicable, you also have the rights pursuant to articles 16-21 GDPR (Right to rectification, right to be forgotten, right to limitation of treatment, right to data portability, right to object), as well as the right to complain to the Guarantor Authority.