Information document for the processing of personal data
Pursuant to and for the purposes of EU Regulation no. 2016/679 (“GDPR”),
as well as Legislative Decree no. 196 of 30 June 2003 (“Privacy Code”).

FRIOV SRL, with registered office in Casoria (Na), cap. 80026, at Via Gaetano Pelella 10, as Data Controller, for the purposes set out in the legislation in the epigraph and subsequent amendments and additions, informs you of the following.

Purpose of the processing.

The personal data (e.g. name, surname, company name, address, telephone number, e-mail, bank details, etc.), communicated by you, will be processed and stored, without the need for your express consent (articles 6 GDPR - Art. 24 Privacy Code), for the purposes related to the conclusion of contracts relating to the products and services offered by the Data Controller, and in particular for the fulfillment of all pre-contractual and contractual obligations, including legal, accounting and tax obligations, arising from the relationship established with you, or to fulfill, before the conclusion of the contract, your specific requests.

The same data may be processed and stored to fulfill any obligations imposed by law, including community law, or an order of the Authority, as well as to exercise a right of the Data Controller, such as, for example, the right to protection and defense in court.

The provision of data for the aforementioned purposes is mandatory for the fulfillment of the aforementioned pre-contractual and contractual, accounting and tax commitments, to which the Data Controller is bound, by reason of the relationship established with you, with the consequence that, your possible refusal to provide them, in whole or in part, or their incorrect communication, could give rise to the impossibility for the Data Controller to execute the contract, or to correctly carry out all the obligations connected to it and required by law, or, before the conclusion of the contract, to the impossibility of meeting your specific requests.

Only with your specific and separate consent (art. 7 GDPR – art. 23 Privacy Code) your data may be processed and used by the Data Controller for marketing purposes, i.e. to send you, via email, post, through telephone contact(s), including the use of text messages, commercial communications and/or advertising material on the products and services offered by the Data Controller, newsletters, or questionnaires to detect the degree of your satisfaction with the quality of the products and services offered by the Data Controller.

Access to data.

Exclusively for the purposes set out above, your data may be made accessible, or communicated, in Italy, to:

- employees and collaborators of the Data Controller, in their capacity as Data Processors or Data Processors;

- third-party companies or other entities, such as, by way of example: professional firms, consultants, credit and insurance institutions, commercial agents and representatives, professional mediators, who carry out activities on behalf and on behalf of the Data Controller and in their capacity as (external) Data Processors;

- public bodies, state administrations, supervisory bodies and in general all those entities to whom communication is mandatory by law or for the fulfillment of the purposes mentioned above.

These entities will process your data as independent data controllers with the related responsibilities.

Any further and different communication or dissemination may only take place with your explicit consent and any transfer to a third country, or an international organization, will take place in compliance with the guarantees provided by the relevant legislation (art. 46 GDPR).

Processing methods.

The processing of the communicated data includes the operations of collection, registration, organization, storage, extraction and consultation, communication, cancellation or destruction (art. 4 n. 2 GDPR), performed exclusively by persons appointed to do so, with or without the aid of automated processes and electronic devices, on paper media (e.g. estimates, orders, transport documents, invoices, preliminary sales, project documents), as well as on computer or telematic media (e.g. entry into management software).

The data is stored on Aruba hosting servers and on the company's internal cloud management system located in Italy. It is understood that the Data Controller, if necessary, will have the right to move the server even outside the EU, ensuring from now that such transfer will take place in compliance with the provisions of the GDPR (articles 45 and 46) and, in any case, with current legislation.

The Data Controller will process your data for the time strictly necessary to fulfill the purposes set out above and, in any case, no longer than ten years from the termination of the relationship for the so-called contractual purposes and no longer than two years from collection for marketing and promotion purposes, as well as for statistical purposes.

Rights of the interested party.

In your capacity as interested party, you have the rights set out in Articles 15 GDPR and 7 of the Privacy Code and, in particular:

- the right to obtain confirmation that the data is or is not

processing of your data and the right to access them (right to obtain a free copy);

- the right to obtain information and indications on the origin of the personal data, on the purposes and methods of processing, including the retention period or the criteria used to determine it, on the existence of automated decision-making processes, including profiling and, in the most significant cases, on the logic used, as well as the importance and consequences of such processing;

- the right to obtain the identification details of the owner and information on the recipients, or categories of recipients to whom the data have been or will be communicated and, where transferred abroad, the right to be informed about the existence of adequate guarantees pursuant to art. 46 of the GDPR;

- the right to request and obtain the updating, rectification and, when interested, integration of data, cancellation, limitation of processing, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

- the right to object, in whole or in part, to the processing of data concerning you and the right to lodge a complaint with the Guarantor Authority

Data Controller, data processors and persons in charge.

The Data Controller of your personal data is the company FRIOV SRL, with headquarters in Casoria (Na), cap. 80026, at Via Gaetano Pelella 10, (Amministrazione@techflash.it). The Data Controller keeps the updated list of data processors and persons in charge of processing.

By contacting the Data Controller at the addresses indicated, by registered letter or certified email, you may exercise the rights listed above.