Policy on the processing of personal data - Contact

(Articles 13 and 14 of EU Regulation 2016/679 hereinafter referred to as the 'Regulation')

In this document, we inform you about the specifics of the processing of Your personal data carried out by Axerve S.p.A.. In particular, information is provided here on:

1. Who is the Data Controller?
2. How to contact the Data Protection Officer?
3. What data are or may be processed and what are the sources of data?
4. For what purposes are the data processed and on what legal basis?
5. To whom may the data be disclosed?
6. Why might the Company share Your data with Fabrick S.p.A.?
7. Can the data be transferred outside of the European Economic Area?
8. For how long is the data stored?
9. What are Your rights?

1. Who is the Data Controller?

The Data Controller of Your personal data is Axerve S.p.A. (hereafter, the "Data Controller" or the "Company") with head office in Biella (BI) - 13900, Piazza Gaudenzio Sella, 1.

2. How can the Data Protection Officer be contacted?

The Data Protection Officer (hereinafter also "DPO - Data Protection Officer") may be contacted at the following addresses:

• postal address of Axerve S.p.A.: Piazza Gaudenzio Sella 1, 13900, Biella - DPO;
• e-mail address: privacy@axerve.com

3. What data are or may be processed and what are the sources of data?

The processing relates to your personal data belonging to the following categories:

• identification and socio-demographic data (such as: first name, surname, occupation/profession and company data);
• contact data (such as: telephone number, e-mail address).

The aforementioned data are provided directly by you to the Data Controller following an exchange of contacts (e.g. exchange of contacts and business cards during an event) or through third party companies (e.g. event organisers or web/social platforms), independent data controllers, with which the Company collaborates, and which have collected your expression of interest in the Company itself or specific consent to be contacted.

4. For what purposes are data processed and on what legal basis?

The processing of personal data is carried out in pursuance of pre-contractual measures taken at the request of the data subject, in accordance with art. 6, par. 1, lett. b) of the Regulation, in order to follow up your expression of interest in the Company's products and services in response to any contact exchanges or your explicit request.

 Within the limits of the specific purpose indicated above, the processing is carried out by means of manual, computerised and telematic tools. The Company adopts appropriate organisational and technical measures to guarantee the security and confidentiality of your personal data.

5. To whom may the data be disclosed?

Your personal data will be processed, using appropriate methods and procedures, by employees and collaborators of the Company and will not be disclosed. For the same purposes expressed in paragraph 4, your personal data may also be processed by suppliers of the Company (for example: companies that support the Company in the promotion of its products or services, companies that provide CRM software). These subjects, if the conditions are met, are appointed as Data Processors in accordance with Article 28 of the Regulation.

6. Why might the Company share Your data with Fabrick S.p.A.?

The Company collaborates with Fabrick S.p.A., company also belonging to Sella Group, based in Biella (BI) - 13900, Piazza Gaudenzio Sella, 1, e-mail privacy@fabrick.com (hereinafter, "Fabrick"). Should you subsequently show an interest in Fabrick's products or services, your personal data will be communicated to Fabrick, which will process them as independent data controller for the purpose of providing a reply to your expression of interest, in accordance with Art. 6 par. 1 letter b) of the Regulation. Fabrick may communicate your personal data to its suppliers (e.g. suppliers of CRM software for the management of contacts), specifically appointed as Data Processors in accordance with Art. 28 of the Regulation and, through some of these suppliers, your personal data will be transferred outside the European Economic Area, in particular to the United States (the transfer is carried out, in accordance with the provisions of the legislation, under agreements that respect the standard contractual clauses for the transfer of personal data adopted by the European Commission). For the pursuit of this purpose, Fabrick will process and store your data for 12 months.

You may exercise the rights accorded to you by the Regulation, outlined in the paragraph "What are your rights?", or you may contact Fabrick's DPO at:

• Fabrick S.p.A. postal address: Piazza Gaudenzio Sella 1, Biella - 13900;
• e-mail address: privacy@fabrick.com.

7. Can data be transferred to countries outside of the European Economic Area?

In accordance with the purposes set out in paragraph 4, your personal data will not be transferred outside the European Economic Area.

8. How long will the data be stored?

The processing will have a duration required to pursue the purposes for which Your data was provided. In particular, personal data will be processed and stored for 12 months.

9. What are Your Rights?

We inform you that you can learn which personal data are processed by the Company and, where the conditions are met, exercise the rights regarding their use recognised to you by the Regulation (right of access, rectification, cancellation, restriction of processing, portability, withdrawal of consent to processing and to obtain a copy of the appropriate safeguards adopted where the data are processed in countries outside the European Economic Area, as well as to obtain indication of the place where such data are stored or transferred, and to object on legitimate grounds to a particular processing operation), by contacting:

• Axerve S.p.A. postal address: Piazza Gaudenzio Sella 1, Biella - 13900;
• e-mail address: privacy@axerve.com. 

We also inform you that if you believe that the processing of your data violates the Regulation, you have the right to lodge a complaint with the supervisory authority for personal data protection (hereinafter, the "Data Protection Authority"), in the manner indicated on the Data Protection Authority's website.

The Company shall provide you with information on the action taken regarding your request without undue delay and at the latest within one month of receipt thereof.

Last update on 29/06/2023