Privacy policy Customers

DEFINITION OF  “DATA” AND DATA ORIGIN/SOURCE

"Data" is meant as that relating to natural persons which are processed by the Company for the stipulation and execution of contractual relationships with its customers/clients - , natural persons -  or, in case of legal persons ( “Customers”),  data of their  legal representative signing  the contract for and on behalf of the Customer, as well as data of the  customer’s employees / consultants involved in the activities specified in the contract.

In this last case, the Data source is the customer itself.

PURPOSES OF DATA PROCESSING

LEGAL BASIS OF PROCESSING

DATA STORAGE TERMS

Purposes connected with the stipulation and execution of the contractual relationship between the Customer  and the Company.

Contract execution, for the legal representative’s Data.

Legitimate interest in the Data of the Customer’s employees / consultants, who are involved in the activities specified in the contract. 

Contractual duration and  15 years .
after contract expiration. 
In the case of a legal dispute, for the entire duration of the same, until expiration of the enforceability terms of practicability of appeal actions.

Performance of administrative and accounting obligations - such as the management of accounting and treasury, as well as billing (for example, invoices verification and registration), in compliance with the requirements of legislation in force.

Need to fulfill a legal obligation the Company is subjected to.

Extrajudicial debt collection 

Legitimate interest

If necessary, in order to ascertain, exercise and / or defend the rights of the Data Controller in Courts of Law

Legitimate interest

Marketing purposes (sending of commercial / promotional communications), through automated contact methods  (such as e-mail, text messages or mms) and traditional ones  (such as telephone calls with operator and traditional mail) on the Company's products / services, surveys on customer satisfaction, market surveys and statistical analysis.   

Consenso del legale rappresentante del Cliente (facoltativo e revocabile in qualsiasi momento).

Contractual duration, and  15 years after contract expiration. 
In the case of a legal dispute, for the entire duration of the same, until the expiration of the enforceability terms of practicability of appeal actions.
.

Once the abovementioned storage terms have elapsed, Data will be destroyed or made anonymous, consistently with technical cancellation and backup procedures.

DATA  PROVISION

The provision of data is mandatory for entering into contract and / or for its execution. Refusal to provide the Data will not therefore allow to stipulate contractual relationships and / or to fulfill deriving obligations.  

CATEGORIES OF DATA RECIPIENTS 

Data may be disclosed to external subjects acting as data controllers, for instance, authorities and supervisory and control bodies and in general public or private subjects, who are entitled to request such Data  .
Data may also be disclosed, as data controllers, to subjects who need to access such data for accessory purposes connected with existing relationships within the limits strictly necessary to carry out any auxiliary tasks (mention is made by way of example of credit institutions and forwarding agencies) and, with the same limits, to our consultants, upon our letter of appointment imposing their obligation of confidentiality and security.

Data can be processed, on behalf of the data controller, by external subjects appointed as data processors, who perform  specific activities on the controller’s behalf , such as  accounting, tax and insurance obligations, personnel management , correspondence, management of collections and payments, etc. 

SUBJECTS AUTHORIZED TO CARRY OUT DATA PROCESSING

Data can be processed by employees of the company departments responsible for the performance of the aforementioned purposes, who have been expressly authorized to carry out data processing and who have received adequate operating instructions.

TRANSFER OF PERSONAL DATA TO EXTRA-EUROPEAN COMMUNITY COUNTRIES 

Not Applicable

RIGHTS OF THE PERSON CONCERNED - COMPLAINT TO CONTROL AUTHORITIES  

By contacting the Company via  e-mail at privacy@financo.it, the person concerned  can ask the Company to access data concerning him / her, as well as their deletion,  correction of inaccurate Data, integration of incomplete data, deletion of data,  limitation for data  processing in the cases provided for by art. 18 GDPR, and to oppose, for reasons connected with their particular situation, to the processing carried out in the legitimate interest of the data controller.

Furthermore, if data processing is based on consent or on the contract and is carried out using automated tools, the person concerned shall have the right to receive such Data in a structured, commonly used and automatically readable format, as well as, if technically feasible, to transmit them to another data controller without any impediment.

The person concerned shall have the right to lodge a complaint to the competent Supervisory Authority in the Member State in which he or she normally resides or works, or in the State where the alleged violation has occurred.

The person concerned shall have the right to revoke the consent given at any time for the marketing purposes and to oppose the processing of the data processed for the same purposes. The possibility remains for the person concerned, who prefers to be contacted for the aforementioned purpose exclusively through traditional methods, to oppose only the receipt of communication through automated methods.