In compliance with the obligations arising from national legislation (Legislative Decree no. 196 of 30 June 2003, Code for the protection of personal data and subsequent amendments) and Community law, (European Regulation for the protection of personal data no. 679/2016, GDPR), the Company Giusto Faravelli S.p.A. Società con Socio Unico, with registered office in Milan, Via Medardo Rosso 8, CF and P. IVA 03224410153, in its capacity as Data Controller, informs you of the methods and purposes of the processing of Personal Data collected through the contact form on its website www.giustofaravelli.it or through the receipt of e-mails or mail sent to the contact addresses on the site. 

Categories of Data Processed
By filling in the contact form in the "Let's keep in touch!" section of the www.giustofaravelli.it website, the site visitor is required to transmit a series of data, indispensable for the Data Controller to reply to the contact request. These are in particular 
- First and last name
- E-mail;
- areas of interest;
- message;
All the above-mentioned data, with the exception of the "sector of interest", which is optional, are indispensable in order to reply to the contact request, therefore, if the visitor does not provide them, Faravelli will not be able to reply to the communications received.
By filling in the free field of the Form, or by sending an email or a paper letter, the visitor may also transmit any other Data, Common or Particular, his own or of Third Parties, even minor. Please note that the services of the Faravelli Group are addressed to persons over the age of 18. Should the Data Controller become aware of the processing of data of minors under 18 years of age without the valid consent of their parents or legal guardian, it reserves the right to unilaterally interrupt any communication and to delete the data acquired. 

Purpose and legal basis of data processing

The Data Controller processes the Data listed above and those that the Visitor may wish to indicate, solely for the purpose of responding to the Visitor's contact requests, e-mails and communications.
The legal basis for the processing is that provided for in Article 6 letter f) of the GDPR, i.e. the legitimate interest of the Data Controller to acknowledge any external communication, subject to the balancing of the fundamental rights and freedoms of the data subjects.

Duration of processing and storage time

Contact Data will be processed, for the purposes described above, only for the time necessary to process the request and in any case no longer than 6 months. Should, following the contact request, the data be processed for purposes other than those indicated above, the Data Controller will issue new and specific information.

Modalities of data processing

The processing of personal data will be based on principles of correctness, lawfulness and transparency, always protecting your confidentiality and the rights of those concerned, and will be carried out using means (physical supports and technological instruments, not automated) suitable for guaranteeing their security and confidentiality at all times, in accordance with the best practices available.

Categories of persons with access to the data and scope of dissemination

Within the limits of the obligations, purposes and tasks indicated above, the data
- will be processed by the Controller's internal staff, specifically trained and authorised to process the data;
- if necessary for the pursuit of the purposes described above, may be transmitted to other companies of the Group, also outside the European territory, subject to appropriate agreements;
- will not be subject to profiling or automated decisions.

Transfer of data

Without prejudice to what has been specified above, with reference to the transfer to the companies of the Group, the data will not be transferred abroad.

Rights of the data subject

In relation to the purposes of the processing, the user is recognised the exercise of the rights provided for in Articles 15 et seq. of the GDPR, and in particular the right to
- access, i.e. to obtain confirmation of the existence or non-existence of personal data concerning him/her, to know their origin, as well as the logic and purposes on which the processing is based, the recipients or categories of recipients to whom the data may be communicated, the determination of the storage period if it is possible to define it
- rectification of inaccurate data
- erasure (so-called right to be forgotten), if the data are no longer necessary in relation to the purposes of collection, or if the data subject has withdrawn consent to the processing (where such consent is provided as optional or where there is no other legal basis for the processing)
- restriction, the right to obtain from the Controller the restriction of access to personal data by all persons having a service contract or an employment contract with the Controller
- portability, the right to receive in a structured, commonly used and machine-readable format the personal data concerning the data subject, with the possibility of transmitting them to another Controller. This right does not apply to non-automated processing (e.g. paper files or registers); moreover, only data processed with the consent of the data subject and only if the data have been provided by the data subject are subject to portability;
- objection, i.e. the right to object to processing for reasons related to the particular situation of the data subject;
- complaint to be sent to the Data Protection Authority. Furthermore, pursuant to Article 7(3) of the GDPR, the right to withdraw consent at any time is recognised; withdrawal of consent does not affect the lawfulness of the processing based on the consent prior to withdrawal.

Procedures for exercising rights

The interested party may at any time exercise its rights, as set out in the preceding point, by sending
- a registered letter with return receipt to Giusto Faravelli S.p.A Società con Socio Unico, Via Medardo Rosso 8, 20159 Milano
- an e-mail to the address privacy@faravelli.it

Data Controller, Data Processors and Persons in Charge

The Data Controller is Giusto Faravelli S.p.A Società con Socio Unico with registered office in Milan, Via Medardo Rosso 8.
The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.

Privacy Policy Update

This privacy policy is in force as of 20.08.2022. The Data Controller reserves the right to modify or simply update its content, in part or in full, also due to changes in applicable legislation. Visitors will be informed of such changes as soon as they are introduced. They shall be binding as soon as they are published on the Site. The Data Controller therefore invites you to visit this section regularly in order to be aware of the most recent and up-to-date version of the privacy policy so that you are always up-to-date on the data collected and how it is used.

want to stay up to date on our news?
Sign up to our newsletter!

By subscribing to our newsletter you accept our privacy policy