Dear Navigator, Facchinetti s.r.l. hereby informs you that, pursuant to and for the purposes of Articles 13 and 14 of the European Regulation No. 2016/679 GDPR, the data acquired and/or provided by you, will be processed in accordance with the regulations mentioned below.

ROLES

The Data Controller is: Facchinetti s.r.l. , Via Case Sparse, 14 Casc. Cortenuova T.Q. 28100 NO , info@facchinettitech.com

MODE OF TREATMENT

The processing consists, for example, in operations of collection, recording, organization, storage, extraction, consultation, use, communication, deletion of personal data. It is carried out, for the aforementioned purposes, according to the principles (ex art. 5 of GDPR No. 2016/679) of lawfulness, correctness, transparency, data minimization and accuracy. Data are processed by telephone, paper, computer and telematic means. The processing is carried out using suitable tools, technical and organizational measures adequate to ensure security, integrity and confidentiality, avoiding in particular the risk of loss, unauthorized access, unlawful use, dissemination, in compliance with the provisions also of Article 32 of GDPR No. 2016/679, by the subjects and in compliance with the provisions of Article 29 of GDPR No. 2016/679 and Article 2- quaterdecies of the Privacy Code.

NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO RESPOND

Providing data for mandatory purposes does not require explicit consent. Without such data, we will not be able to provide our services. The provision of data for other purposes is optional and requires your explicit consent. If you do not consent, you will not be able to receive newsletters, informational materials or commercial communications regarding the services offered by the Owner or third-party companies. However, you will still continue to have access to our services. We process your personal information only when there is a legal basis for such processing. Legal bases include:

• Your consent to the processing activities in question
• Compliance with the legal obligations we are required to meet
• The execution of rules dictated by laws or regulations, or by contracts, agreements or other legal instruments
• Studies conducted by research organizations, preferably on anonymized personal information
• The performance of a contract and related pre-contractual obligations, if you are a party to that contract
• The exercise of our rights in court, administrative proceedings or arbitrations
• The defense or protection of the physical safety of yourself or a third party
• Health protection, in the context of procedures implemented by health care entities or professionals
• Our legitimate interest, provided that your fundamental rights and freedoms do not outweigh such interests
• Credit protection.

DATA ACCESS

Your data may be made accessible for the purposes mentioned below:

• To employees and collaborators of the Owner in their capacity as data processors and/or system administrators;
• To third-party companies or other entities (by way of example: professional firms, consultants, software houses that provide the management systems, credit institutions, insurance companies, etc.) that carry out outsourced activities on behalf of the Controller, in their capacity as external data processors.

Among the Personal Data collected by this Web Site, either independently or through third parties, are: Tracking Tools; Usage Data; name; email; Web site; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); number of Users; city; device information; session statistics; browser information; answers to questions; clicks; keypress events; motion sensor events; mouse movements; location relative to scrolling; and touch events.

COMMUNICATION OF DATA

The Data Controller may communicate your data to the Public Administration, Supervisory Bodies and/or Judicial Authorities, as well as to all other subjects to whom the communication is obligatory or necessary by law. Your data will not be disseminated.

DATA RETENTION

All personal data provided will be processed in accordance with the principles of lawfulness, correctness, relevance and proportionality, exclusively by the necessary means, including computer and telematics, to pursue the purposes described above. Personal data will be kept for a period of 6 years following the last contact made with the data subject or until the data subject requests cancellation. In this case, data related to the legitimate interest of the owner or necessary for the fulfillment of legal obligations may still be retained. It should be noted that the information systems used to manage the information collected are configured from the outset to minimize the use of personal data.

RIGHTS OF THE DATA SUBJECT

• To obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients in third countries or international organizations; when possible, the expected period of storage of the personal data or, if this is not possible, the criteria used to determine this period; where the data are not collected from the data subject, all available information about their origin; the existence of automated decision making, including profiling, and, at least in such cases, meaningful information about the logic used, as well as the importance and the expected consequences of such processing for the data subject;
• To obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration;
• To obtain from the data controller information about personal data concerning him or her without undue delay, if any of the following grounds applies: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; the data subject withdraws the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a); and if there is no other legal basis for the processing; the data subject objects to the processing in accordance with Article 21(1) and there is no overriding legitimate ground for processing, or objects to the processing in accordance with Article 21(2); the personal data have been processed unlawfully; the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the data controller is subject;
• Obtain from the data controller the restriction of processing when one of the following occurs: the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; the processing is unlawful and the data subject objects to the deletion of the personal data and instead requests that its use be restricted; although the data controller no longer needs the personal data for the purposes of processing, the personal data are necessary for the establishment, exercise or defense of a legal claim; the data subject has objected to the processing pursuant to Article 21(1), pending verification as to whether the data controller’s legitimate grounds prevail over those of the data subject;
• To receive in a structured, commonly used and machine-readable format personal data concerning him or her that he or she has provided to a data controller, and to transmit such data to another data controller without hindrance from the data controller to whom he or she has provided the data if the processing is carried out by digital means. When exercising his or her rights with regard to data portability, the data subject has the right to obtain the direct transmission of personal data from one controller to another, if technically feasible;
• To receive in a structured, commonly used and machine-readable format personal data concerning him or her that he or she has provided to a data controller, and to transmit such data to another data controller without hindrance from the data controller to whom he or she has provided the data if the processing is carried out by digital means. When exercising his or her rights with regard to data portability, the data subject has the right to obtain the direct transmission of personal data from one controller to another, if technically feasible;
• Object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her under Article 6(1)(e) or (f), including profiling on the basis of those provisions. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her carried out for such purposes, including profiling insofar as it is related to such marketing;
• Right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or that significantly affects him or her in a similar way;
• Right to file a complaint with a supervisory authority under Art. 77.

WAYS OF EXERCISING RIGHTS

You may exercise your rights at any time by contacting the Holder at the following e-mail address: info@facchinettitech.com

EXTERNAL MANAGERS AND APPOINTEES

The updated list of external data controllers and processors is kept at the registered office of the data controller

MODIFICATION OF THE CURRENT DISCLOSURE

This notice was prepared on 09-04-2025 and may be subject to change over time, including as a function of additions or amendments to relevant laws and regulations. The Interested Party is invited to frequently consult this page.