Privacy Policy

The Data Controller is Fisa Italia Srl, with registered office at Via Della Tecnica, 13, Montecchio Maggiore (VI) - Italy, e-mail info@fisahorn.com.

The DPO appointed by Fisa Italia Srl, who represents the point of contact for data subjects, can be reached through the following channels:
- e-mail: info@fisahorn.com;
- post: Fisa Italia Srl - Via Della Tecnica, 13, Montecchio Maggiore (VI) - Italy.

The user's personal data will be processed for the following purposes:
a) provision of the services requested by the user;
b) direct marketing.

Processing under letter a) is necessary for the provision of the services requested by the user, while processing under letter b) requires your express consent by ticking a specific "flag".

Please note that direct marketing activity carried out by Fisa Italia Srl aims to collect and use data relevant and limited to what is necessary for the purposes for which it is processed, in order to carry out studies, research, market statistics, send advertising and informational material, carry out direct sales activities or the placement of products or services, send commercial information, and carry out interactive commercial communications.

With regard to marketing activities, please note that, in the absence of specific consent to processing by the user, it will not be possible to carry out the aforementioned activities.

Within the scope of the stated purposes, your data may be communicated to: Fisa Italia Srl - Via Della Tecnica, 13, Montecchio Maggiore (VI) - Italy.

Fisa Italia Srl transfers data only to cloud services based in the United States, to companies that adhere to the applicable regulations.

Personal data will be retained for the period strictly necessary to achieve the specific purposes of the processing for which the user has given consent, and specifically:
- for the purposes indicated in letter a) of point 3, for the time necessary to fulfil contractual obligations and, in any case, no longer than 10 years from the collection of your data, for compliance with regulatory obligations and, in any case, no longer than the statutory limitation periods;
- for the purposes indicated in letter b) (direct and indirect marketing and market research) of point 3, for 24 (twenty-four) months from the granting of consent to processing.

The user may, at any time, exercise the rights indicated below.
a. Access to personal data: to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, access to the following information: the purposes, categories of data, recipients, retention period, the right to lodge a complaint with a supervisory authority, the right to request rectification, erasure or restriction of processing or to object to processing, as well as the existence of automated decision-making;
b. Request for rectification or erasure of data, or restriction of the processing concerning you; "restriction" means marking stored data with the aim of limiting its processing in the future;
c. Objection to processing: to object, on grounds relating to your particular situation, to the processing of data for the performance of a task carried out in the public interest or for the pursuit of a legitimate interest of the Controller;
d. Data portability: in the case of automated processing based on consent or performed under a contract, to receive the data concerning you in a structured, commonly used and machine-readable format; in particular, the data will be provided by the Controller in .xml format or similar;
e. Withdrawal of consent to processing for direct marketing purposes; the exercise of this right does not affect in any way the lawfulness of processing carried out prior to the withdrawal;
f. To lodge a complaint pursuant to Art. 77 GDPR with the supervisory authority competent based on your habitual residence, place of work, or place where the alleged infringement occurred; for Italy, the competent authority is the Garante per la protezione dei dati personali, reachable via the contact details published on the website https://www.garanteprivacy.it.

The above rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in point 1 of this notice.

Requests relating to the exercise of the user's rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity or a high number of requests may this period be extended by a further 2 (two) months.

The provision of data by the user is mandatory as it is necessary for the provision of the requested service.

Therefore, should the user refuse to provide the data, this may result in the service not being provided, to the extent that such data is necessary for that purpose.