Dear Customer,
FPS Automation S.r.l., with registered office in (40060) Toscanella di Dozza (BO), Via Rodolfo Morandi 180, in its capacity as data controller, provides you with this information notice pursuant to Regulation (EU) 2016/679 (General Data Protection Regulation – hereinafter GDPR), regarding the processing of personal data collected in the context of the contract between us. The processing will be carried out in compliance with the principles established by the current legislation.
1. Data Controller, external processors and authorized persons
The Data Controller is FPS Automation S.r.l., with registered office in (40060) Toscanella di Dozza (BO), Via Rodolfo Morandi 180, phone: 0542/674298, email: amministrazione@fps-automation.com.
The updated list of processors and persons authorized to process the data is kept at the Data Controller’s registered office.
2. Types of data processed
The processing concerns personal and identifying data of you and/or your organization’s contact persons, provided to us for pre-contractual and contractual obligations with the Controller, as well as payment data (e.g., IBAN).
3. Purpose of processing
a) Data will be collected and processed for the following purposes:
a) Responding to your requests for information and steps necessary for the conclusion of the contract
b) Execution of contractual services detailed in the agreement signed between the Parties
c) Performance of administrative/accounting obligations and, in general, legal obligations; legal protection in case of contractual default
d) Judicial and extrajudicial credit recovery
e) Dispute/arbitration/mediation proceedings
f) Compliance with obligations established by law, regulations, EU legislation, or by order of an Authority
g) Sending newsletters, product updates, events
4. Legal basis of processing and nature of data provision
The legal basis of the processing is the performance of a contract or pre-contractual measures (purposes a, b, c), compliance with legal obligations (purpose f), the legitimate interest of the Controller (purposes d-e), and your explicit consent (purpose g).
Therefore, the processing is lawful (Art. 6, par. 1, Regulation EU 2016/679).
The provision of data is necessary to achieve purposes a-f; failure to provide such data may result in FPS Automation being unable to perform the contract. Data provision for purpose g is optional; failure to provide it will prevent the sending of communications.
5. Data recipients
The Controller informs you that, when necessary for the achievement of the purposes, your data may be disclosed, in addition to specifically authorized employees based on their tasks, to the following external parties, appointed in writing, where applicable, as data processors pursuant to Art. 28 of the GDPR:
- Accounting firm for accounting/tax obligations and external consultant managing accounting;
- Banks for payment purposes;
- Public Administration for mandatory legal communications;
- Travel agencies or hotels in case of visits to the premises;
- Service companies and trade associations entrusted with specific tasks related to contractual obligations;
- IT service companies for administrative data management and newsletter delivery;
- Professionals for credit recovery or for the legal protection of the Controller.
The Controller will maintain an updated list of external Data Processors, which will be provided upon specific request by the data subject.
6. Processing methods
Personal data is processed using electronic tools and paper documents subject to specific security measures, adopted, applied, and documented as required by current legislation. Authorized personnel are formally appointed by the Controller and receive specific training on applicable regulations. External parties processing personal data, or parts thereof, are appointed as data processors under Art. 28 of the GDPR, and are therefore required to apply the technical and organizational measures established by the GDPR.
7. Data transfers
Data will be processed exclusively in Italy and in any case within the European Union. If, for reasons related to the performance of the contract, data must be transferred outside the European Union,