Privacy Policy

Dear User,

this document is delivered to you in compliance with Article 13 of the EU Regulation 2016/679 (so-called GDPR), which, with regard to the management of personal data, stipulates the obligation for the data controller who collects data from the data subject to give the data subject, as a natural person, at the time such data are obtained, a set of specific information regarding their management.

For these purposes, therefore, we are handing you this information policy containing information regarding the processing of personal data that will be provided by you when browsing our site and, specifically, the use of the “Request More Information” service, which consists of filling out an online form by entering your first name, last name, phone number, email address, subject and message in order to be contacted to receive more information about our services and the request for the “Newsletter” service, which consists of receiving from us a series of informative emails having as subject our products/services.

ART.1 – IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

(cf. art.13, c.1, lett.a, GDPR) The data controller of the personal data you provide will be CFF KEVA ITALY S.P.A., CF and P.Iva 12546920153, with registered office in Via Borgogna, 7 – 20122 Milano (MI) – Italy, whose contact details are as follows:

Telephone number: (+39) 02.57603551
E-mail address: privacy@cff.it.

ART.2 – CONTACT DETAILS OF THE DATA PROTECTION RESPONSIBLE (DPO) (see Art.13, c.1, lett.b, GDPR)
The specific type of data processing, as well as of the professional activity exercised, do not provide for the mandatory appointment of a data protection officer.

ART.3 – PURPOSE AND LEGAL BASIS OF DATA PROCESSING (cf. art.13, c.1, lett.c, GDPR)
The purpose of data processing will be to follow up on your request to be contacted in order to receive more information about our services and to follow up on our sending you a series of informative emails concerning our products/services. The processing will be based on the consent of the data subject, which must be given by signing the statements at the bottom of this privacy policy to which the consent will expressly refer.

ART.4 – LEGITIMATE INTERESTS PURSUANT TO THE DATA CONTROLLER (see Art.13, c.1, lett.d, GDPR)
Processing is not necessary for the pursuit of the legitimate interests of the data controller or third parties.

ART.5 – RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA (see Art.13, c.1, lett.e, GDPR)
The processing does not provide for recipients or categories of recipients of personal data.

ART.6 – DATA TRANSFER TO NON -EU COUNTRIES OR INTERNATIONAL ORGANIZATIONS (see Art.13, c.1, lett.f, GDPR)
The processing does not involve the transfer of data to non-EU countries or international organizations.

ART.7 – PERIOD OF DATA STORAGE OR RELATED CRITERIA FOR DETERMINATION (cf. art.13, c.2, lett.a, GDPR)
The user’s data will be stored only for the time necessary to ensure the proper provision of the services offered.

ART.8 – RIGHTS OF THE DATA SUBJECT (see Art.13, c.2, lett.b, GDPR)
The data subject has the right to request from the data controller access to personal data and the rectification or erasure of personal data or the restriction of processing concerning him or her or to object to their processing, as well as the right to data portability.

ART.9 – WITHDRAWAL OF CONSENT (cf. art.13, c.2, lett.c, GDPR)
The data subject has the right to withdraw consent to processing at any time; pursuant to art.13, c.2, lett.c, GDPR, withdrawal of consent will not affect the lawfulness of processing based on the consent given prior to withdrawal.

ART.10 – COMPLAINTS (see Art.13, c.2, lett.d, GDPR)
The data subject has the right to lodge a complaint with a supervisory authority.

ART.11 – OBLIGATION OR REQU IREMENT OF DATA SUBMISSION (cf. art.13, c.2, lett.e, GDPR)
The provision of personal data is a necessary requirement to enable the user to be contacted to receive more information about our services. The data subject is under no legal obligation to provide such data, but this will make it impossible to follow up on his or her request to be contacted to receive more information about our services. The communication of personal data is a necessary requirement for the user to receive our newsletter. The data subject is under no legal obligation to provide such data, but this will make it impossible to follow up on our sending the requested informational emails.

ART.12 – AUTOMATED DECISION MAKING PROCESSES (see Art.13, c.2, lett.f, GDPR)
Processing will not be subject to automated decision making.

ART.13 – DIFFERENT PURPOSES OF THE PROCESSING (see Art.13, c.3, GDPR)
Processing will not be for purposes other than those set out in Article 3.

In witness whereof, CFF KEVA ITALY S.P.A.