EU Regulation 2016/679 – PRIVACY

“Fabbri 1971 srl”, represented by its legal representative “Ms. Serena Fabbri”, VAT No. IT07429010486, registered office in Calenzano – 50041 (FI), Via Sandro Pertini, 46 (Tel. +39 055 88 78 684 / e-mail: info@otticafabbri.com) as data controller (hereinafter, the “Controller”),

I N F O R M S Y O U

Pursuant to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter, the “GDPR”), that your data will be processed in compliance with the aforementioned legislation and with the methods and for the purposes specified below:

1 – SUBJECT OF THE PROCESSING AND NATURE OF THE DATA

In the course of its activity, the Controller processes your personal data (in particular, First Name, Last Name, Tax Code, VAT No., e-mail, telephone number—hereinafter, “personal data” or “data”) collected when you voluntarily enter such personal data in the “data collection” and “orders” forms on this website.

2 – PURPOSES OF THE PROCESSING

Your personal data are processed for the following purposes, distinguished by their respective legal bases:

Performance of the contract; compliance with legal obligations (Art. 6(b), (c)). Your personal data are processed for the following purposes:

• to fulfill pre-contractual, contractual and administrative-accounting obligations;

• to comply with obligations laid down by law, regulation, EU legislation or orders of Authorities.

On the basis of your consent (Art. 6(a)). Your personal data are processed for the purpose of sending, via SMS and/or e-mail, informational and promotional communications, as well as newsletters from the Controller in relation to its own initiatives and/or those of subsidiaries and/or affiliates (Marketing purposes);

3 – RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

The personal data provided may be disclosed to third-party recipients in order to fulfill contracts or related purposes. More specifically, the data may be communicated to recipients belonging to the following categories:

• Professionals and consultants in legal, tax and employment matters;

• Banking institutions;

• Competent authorities for compliance with legal obligations and/or provisions issued by public bodies (Italian Revenue Agency, etc.);

• External parties that manage, support or assist—even occasionally—the Controller in the administration of the IT system and telecommunications networks (including e-mail).

The subjects belonging to the above categories act as Data Processors, or operate in full autonomy as separate Data Controllers. The list of any processors is constantly updated and available at the Controller’s registered office.

4 – METHODS OF PROCESSING

Processing will be carried out using manual and/or IT and telematic tools, with organizational and processing logics strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security, integrity, availability and confidentiality of personal data.

In compliance with Art. 5(1)(e) of EU Reg. 2016/679, the personal data collected will be stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.

5 – PROVISION OF DATA

Please note that, in view of the purposes of processing specified in point 2.1, the provision of data is mandatory and failure to provide, partial or inaccurate provision may result in the impossibility of performing the professional service.

6 – TRANSFER OF DATA TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION

The personal data provided are not transferred outside the European Union.

7 – DURATION OF PROCESSING

Personal data are retained for the entire duration of the contractual relationship and, in the event of withdrawal and/or any other termination of said relationship, for the periods established by law for fulfillment—by way of example—of tax obligations.

For marketing purposes, data will be retained until consent is withdrawn or for the period established by law or by measures issued by Supervisory Authorities.

8 – RIGHTS OF THE DATA SUBJECT

You may, at any time, exercise the rights provided for by Arts. 15, 16, 17, 18, 19, 20, 21, 22 of Regulation (EU) 2016/679, and in particular the right:

• to access personal data;

• to obtain their rectification or erasure, or the restriction of processing concerning you;

• to object to processing;

• to data portability;

• to withdraw consent; withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;

• to lodge a complaint with the Supervisory Authority (Garante Privacy).

You may exercise your rights by sending a request to the Controller at the following contacts:

Via Sandro Pertini, 46 – 50041 CALENZANO (FI) e-mail: info@otticafabbri.com