Information on the processing of personal data

Pursuant to Article 13 of the EU Regulation no. 2016/679 (GDPR), we inform you that personal data you provide will be handled in a lawful, fair and transparent manner, in compliance with the confidentiality obligations to which the data controller is bound.

  1. The data controller

The data controller is LANIFICIO NOVA FIDES SPA, with registered office in Montemurlo (PO), via Bisenzio 88 – 59013 – email: amministrazione@novafides.it

  1. The Data Protection Officer (DPO)

According to article 37 GDPR, the data controller is not required to appoint a Data Protection Officer (DPO), because it is not engaged in systematic monitoring as a core activity and, to the extent that it processes special categories of data incidentally to its business, typically the personnel administration data.

  1. Subject Treatment

The processing of personal data will focus on the personal data, identification (e.g., name, dates and year of birth, social security number, billing address, shipping address, telephone number, mobile phone numbers, e-mail, personal habits, photos and videos, bank and payment references) provided by you at the time of the establishment and during the contractual relationship.

  1. Legal basis and purpose of the processing

The processing of personal data supplied by you is aimed solely at the conclusion and correct and complete execution of the contractual relationship in order to supply goods or provide services, as well as for purposes related and / or instrumental to the performance of the same and the accounting, tax compliance and social security required by law. With regard to these purposes, the processing of data by the company does not require consent but finds its legal basis in the execution of the contract of which the interested party is a party, or in the execution of pre-contractual measures adopted at the request of the same.

  1. Special categories of personal data

Pursuant to Article 9 (and / or 10) of the EU Regulation no. 2016/679 (GDPR), you might give data classified as “special categories of personal data”, i.e. data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data, which should uniquely identify an individual data relating to criminal convictions, crimes, security measures, data concerning health or sex life or sexual orientation of the person, geolocations. These categories of data may be processed only with your free and explicit consent, writing at the bottom of this information.

  1. Treatment Modalities

The processing will be carried out automatically and / or manually, in accordance with the procedures laid down in Articles 6 and 32 of EU Reg. 2016/679 concerning security measures, by the Data Controller and / or specifically appointed persons and in compliance with the provisions of art. 29 of the EU Reg. 2016/679. Specifically, the treatment may take place:

  1. Provision of personal data

The provision of data is mandatory for the management of the supply / service provision, otherwise it is impossible to fulfill exactly the legal obligations as well as those deriving from the contract for the supply of goods / services.

  1. Data retention

In compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 letter. e) of the EU Regulation, the retention period of your personal data is:

  1. Data Communications

The personal data collected will never be the subject of communication without your explicit consent, except for the necessary communications that may involve the transfer of data to public bodies, to competent and appropriately appointed data processors, or to other subjects authorized by them, to the fulfillment of contractual and legal obligations, with the guarantee of protection of your rights.

  1. Dissemination of data

The personal data collected are not subject to disclosure.

  1. Transfer of personal data abroad

Personal data may not be transmitted to non-EU third countries.

  1. Existence of an automated decision-making process, including the profiling

Personal data are not the subject of an automated decision-making process including profiling (article 22 par. 1 and 4 of the EU Reg. 679/2016).

  1. Rights of the interested party

At any time, you can exercise, pursuant to art. 15-22 of EU Reg. 2016/679, the right to:

You can exercise your rights writing to the data controller, by a registered return mail to Montemurlo (PO), via Bisenzio 88 – 59013 –

I, the undersigned _______________________, declare that I have received the information above.

Montemurlo (PO),_______________Firma ____________________

I, the undersigned, in the light of information received, about the processing of my personal data including those considered as special categories of data, for the purposes indicated in the information:

I consent

I do not consent