Policy on the processing of personal data for contact

In this document, we inform you about the specifics of the processing of Your personal data carried out by Fabrick S.p.A.. In particular, information is provided here on: 

1. Who is the Data Controller?
2. How to contact the Data Protection Officer?
3. What data are or may be processed and what are the sources of data?
4. For what purposes are the data processed and on what legal basis?
5. To whom may the data be disclosed?
6. Why might the Company share Your data with Axerve S.p.A.?
7. Can the data be transferred outside of the European Economic Area?
8. For how long is the data stored?
9. What are Your rights?

1) Who is the Data Controller?

The Data Controller of Your personal data is Fabrick S.p.A. (hereafter, the "Data Controller" or the "Company") with head office in Biella (BI) - 13900, Piazza Gaudenzio Sella, 1.

2) How can the Data Protection Officer be contacted?

The Data Protection Officer (hereinafter also "DPO - Data Protection Officer") may be contacted at the following addresses:

• postal address of Fabrick S.p.A.: Piazza Gaudenzio Sella 1, 13900, Biella - DPO;
• e-mail address: privacy@fabrick.com

3) What data are or may be processed and what are the sources of data?

The processing relates to your personal data belonging to the following categories:

• identification and socio-demographic data (such as: first name, surname, occupation/profession and company data);
• contact data (such as: telephone number, e-mail address).

The aforementioned data are provided directly by you to the Data Controller following an exchange of contacts (e.g. exchange of contacts and business cards during an event) or through third party companies (e.g. event organisers or web/social platforms), independent data controllers, with which the Company collaborates, and which have collected your expression of interest in the Company itself or specific consent to be contacted.

4) For what purposes are data processed and on what legal basis?

The processing of personal data is carried out in execution of pre-contractual measures taken at the request of the data subject, pursuant to art. 6, par. 1, letter b) of the Regulation, in order to follow up your expression of interest in the Company's products and services in response to any contact exchanges or your explicit request.

Within the limits of the specific scope indicated above, the processing is carried out by means of manual, computerised and telematic tools. The Company adopts appropriate organisational and technical measures to guarantee the security and confidentiality of your personal data.

5) To whom may the data be disclosed?

Your personal data will be processed, using appropriate methods and procedures, by employees and collaborators of the Company and will not be disclosed. For the same purposes expressed in paragraph 4, your personal data may also be processed by suppliers of the Company (for example: companies that support the Company in the promotion of its products or services, companies that provide CRM software). These subjects, if the conditions are met, are appointed as Data Processors in accordance with Article 28 of the Regulation.

6) Why might the Company share Your data with Axerve S.p.A.?

The Company promotes the services of Axerve S.p.A., company also belonging to Sella Group, based in Biella (BI) - 13900, Piazza Gaudenzio Sella, 1, e-mail privacy@axerve.com (hereinafter, "Axerve"). Should you, also subsequently, show an interest in Axerve's products or services, your personal data will be communicated to Axerve, which will process them as independent data controller for the purpose of providing a reply to your expression of interest, in accordance with Art. 6 par. 1 letter b) of the Regulation. Axerve may communicate your personal data to its suppliers (e.g. suppliers of CRM software), specifically appointed as Data Processors in accordance with Art. 28 of the Regulation.

For the pursuit of this purpose, Axerve will process and store your data for 12 months. You may exercise the rights accorded to you by the Regulation, outlined in the paragraph "What are your rights?", or you may contact Axerve's DPO at:

• Axerve S.p.A. postal address: Piazza Gaudenzio Sella 1, Biella - 13900;
• e-mail address: privacy@axerve.com.

7) Can data be transferred to countries outside of the European Economic Area?

For the pursuit of the purposes set out in paragraph 4, your personal data will be transferred outside of the European Economic Area, in particular to the United States, through the Company's suppliers (in particular, suppliers of the CRM software for managing contacts). The data are transferred, in compliance with the regulations, under agreements that comply with the standard contractual clauses for the transfer of personal data adopted by the European Commission.

8) How long will the data be stored?

The processing will have a duration required to pursue the purposes for which Your data was provided. In particular, personal data will be processed and stored for 12 months.

9) What are Your Rights?

We inform you that you can learn which personal data are processed by the Company and, where the conditions are met, exercise the rights regarding their use recognised to you by the Regulation (right of access, rectification, cancellation, restriction of processing, portability, withdrawal of consent to processing and to obtain a copy of the appropriate safeguards adopted where the data are processed in countries outside the European Economic Area, as well as to obtain indication of the place where such data are stored or transferred, and to object on legitimate grounds to a particular processing operation), by contacting:

• Fabrick S.p.A. postal address: Piazza Gaudenzio Sella 1, Biella - 13900;
• e-mail address: privacy@fabrick.com. 

We also inform you that if you believe that the processing of your data violates the Regulation, you have the right to lodge a complaint with the supervisory authority for personal data protection (hereinafter, the "Data Protection Authority"), in the manner indicated on the Data Protection Authority's website.

The Company shall provide you with information on the action taken regarding your request without undue delay and at the latest within one month of receipt thereof.