PURPOSE AND PROCEDURE FOR THE PROCESSING OF PERSONAL DATA
The personal data you have provided ("Data") will be processed for the following purposes:
- providing the requested service ("Service") according to the agreement between you and CRF S.c.p.A. ("Company");
- allowing the Company to perform surveys on customers satisfaction ("Customer Satisfaction") related to the quality of Company goods and services according to the Company legitimate interest;
The Data may be processed in hardcopy, by automated or electronic means.
CONSEQUENCES OF FAILURE TO PROVIDE THE DATA
Submitting the Data is never mandatory. However, not providing the Data marked as mandatory will prevent the Company from providing the Service. On the other hand, not providing the optional Data will allow you to access the Service anyway.
RECIPIENTS OF THE DATA
The Data may be processed by natural persons and/or legal entities, acting on behalf of the Company and under specific contractual obligations, based in EU Member States or in countries outside the EU.
The Data may be communicated to third parties to comply with legal obligations, to execute Public Authorities orders or to exercise a Company right before judicial authorities.
DATA TRANSFER OUTSIDE OF THE EUROPEAN ECONOMIC AREA (EEA)
Within its contractual relations the Company may transfer the Data in countries outside of the European Economic Area (EEA), including store them in databases managed by entities acting on behalf of the Company. Databases management and Data processing are bound to the purposes of the processing and are carried out according to applicable data protection law.
In case the Data are transferred outside of the EEA the Company will use any appropriate contractual measures to guarantee an adequate protection of the Data including – among the others – agreements based on the standard contractual clauses adopted by the EU Commission to rule the transfer of personal data outside of the EEA.
CONTROLLER AND DATA PROTECTION OFFICER TEAM
The Controller is CRF S.c.p.A., with registered office in Strada Torino, 50 - 10043 Orbassano (TO), Italy.
You can contact the Data Protection Officer team at the email address firstname.lastname@example.org.
The Data processed to provide the Service and the Customer Satisfaction will be kept by the Company for the period deemed strictly necessary to fulfil such purposes. Concerning the Data processed for the provision of the Service, the Company may continue to store these Data for a longer period, as may be necessary to protect Company's interests related to potential liability related to the provision of the Service.
You can exercise the following rights:
- right to access means the right to obtain from the Company whether your Data are being processed and, where applicable, have access to them;
- right to rectification and right to erasure means the right to obtain the rectification of inaccurate and/or incomplete Data, as well as the erasure of Data when the request is legitimate;
- right to restriction of processing means the right to request suspension of the processing when the request is legitimate;
- right to data portability means the right to obtain Data in a structured format, ordinary used and readable, as well as the right to transfer Data to other controllers;
- right to object means the right to object to the processing of Data when the request is legitimate, including when the Data are processed for marketing or profiling, if applicable;
- right to lodge a complaint with a supervisory authority in case of unlawful processing of Data.
You can exercise the abovementioned rights by writing to CRF S.c.p.A., Strada Torino, 50 - 10043 Orbassano (TO), Italy.