Information on personal data processing for Newsletter and Contact

Version 4Last update on 07/2024

Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (hereinafter, the "Regulation"), i.e. the so-called GDPR, Fabrick S.p.A. (hereinafter, the "Company" and/or the "Data Controller"), provides you with the following information about the characteristics of the processing that it carries out on your personal data.

1) Who is the Data Controller?

The Data Controller of your personal data is Fabrick S.p.A. with registered office in Biella (BI), in Piazza Gaudenzio Sella, n. 1.

2) How to contact the Data Protection Officer?

The Data Protection Officer (hereinafter also "DPO") can be contacted at the following addresses:

  • Post address of Fabrick S.p.A.: Piazza Gaudenzio Sella n. 1, 13900, Biella - DPO;
  • email address: privacy@fabrick.com

3) What categories of data are or can be processed and what are the sources of the data?

Based on the specific purpose pursued, the Company may process personal data belonging to the following categories:

  • personal and socio-demographic data (such as name, surname, data relating to employment/profession and the company/startup to which the user belongs);
  • contact details (such as telephone number, email address);
  • contractual data (such as customer code, company name, VAT number). 

The above data is provided by you directly to the Company (e.g. by email or website), or collected through third-party companies or social networks (e.g. by filling in specific online forms of the Company or third parties or by messaging).

4) On what legal basis and for what purposes does the Company process your personal data?

The above personal data will be processed for the pursuit of one or more of the purposes listed below and in the presence of the related legal bases:

  1. provide feedback on your requests for assistance submitted through the Company's platforms or by email, as well as provide feedback on other requests submitted by filling in the appropriate forms on the Company's or third parties' website. The processing is carried out pursuant to art. 6, par. 1, letter b) of the Regulation, and therefore in execution of a contract or pre-contractual measures adopted at your request. The provision of data is necessary and consent to processing is not required. Failure to communicate one or more data will not allow us to respond to your request.
  2. contact you by email or telephone to offer you the Company's products and services. The processing is carried out pursuant to art. 6, par. 1, letter a) of the Regulation, in the presence of your specific consent. The provision of data is, therefore, optional, and you may revoke any consent given at any time in the manner indicated in the paragraph "What are your rights?", or through a specific option at the bottom of the emails, without prejudice to the lawfulness of the processing carried out before the revocation.
  3. send you, to the email address indicated by you, through newsletters, communications of an informative, promotional and commercial nature, free of charge. The processing is carried out pursuant to art. 6, par. 1, letter a) of the Regulation, in the presence of your specific consent. The provision of data is, therefore, optional, and you may revoke any consent given at any time in the manner indicated in the paragraph "What are your rights?", or through a specific option at the bottom of each e-mail, without prejudice to the lawfulness of the processing carried out before the revocation.

5) To whom can your personal data be disclosed?

Your personal data will be processed, with appropriate methods and procedures, by employees and collaborators of the Company and will not be disclosed. For the same purposes expressed in paragraph 4, your personal data may also be processed by the Company's suppliers (for example: platforms for the forwarding of marketing emails, companies that support the Company in carrying out activities to promote their products or services, companies that provide CRM software). These subjects, if the conditions are met, are appointed as Data Processors pursuant to art. 28 of the Regulation.

6) Can your personal data be transferred to countries outside the European Economic Area?

For the pursuit of the purposes referred to in paragraph 4, your personal data will be transferred outside the European Economic Area, in particular to the United States, through the Company's suppliers. The transfer takes place, in compliance with the provisions of the legislation, under agreements that comply with the standard contractual clauses for the transfer of personal data adopted by the European Commission.

7) How long is the data stored?

The processing will have a duration necessary for the pursuit of the purposes for which your data was provided. In particular:

  • the data processed for sending the newsletter will be processed and stored for the entire period in which the service will be active or until your possible withdrawal of consent;
  • the data processed to contact you by email or telephone and offer you the Company's products and services or to respond to your requests will be processed and stored for 12 months.

8) What are your rights?

We inform you that you will be able to know which personal data is processed by the Company and, where the conditions are met, exercise the rights relating to its use that are recognised by the Regulation (right of access, rectification, cancellation, limitation to processing, portability, withdrawal of consent to processing, and the right to obtain a copy of the appropriate guarantees adopted where the data is processed in countries outside the European Economic Area, to obtain an indication of the place where such data is stored or transferred, as well as to object for legitimate reasons to a particular processing) by contacting:

  • Post address of Fabrick S.p.A.: Piazza Gaudenzio Sella n. 1, Biella – 13900;
  • email address: privacy@fabrick.com

We also inform you that, if you think that the processing of your data violates the Regulation, you may file a complaint with the Data Protection Authority for the protection of personal data (hereinafter, the "Authority"), in the manner indicated on the Authority's website.

The Company provides you with information regarding the action taken with respect to your request without undue delay and, at the latest, within one month of receipt of your request.