English

HOW WE USE YOUR DATA

(art. 13 of EU Regulation 2016/679)
INF08e - v.04 of 08/04/24
Dear online Customer,
we would like to provide some information about the methods and purposes relating to the processing of your personal data. Regulation (EU) 2016/679 on the "protection of individuals with regard to the processing of personal data, as well as the free movement of such data" (hereinafter referred to as the "Regulation" or "GDPR") contains a set of rules to ensure that the processing of personal data is carried out in compliance with the fundamental rights and freedoms of individuals. This policy incorporates the forecasts.
Pursuant to art. 13 of the European Regulation (EU) 2016/679. We inform you of the following.

1. Data controller

The Data Controller is Difass International S.p.a. (hereinafter “Difass”), in person of the pro tempore legal representative, C.F./P.IVA 02172260974, with registered office at CORIANO (RN), via Ausa 5, 47853.

2. Nature and provision of data

Providing your personal data to Difass is essential in order for you to use the website. Consequently, if you do not wish to provide the necessary data, you will not be able to browse the website.
If you decide to submit an enquiry or contact request using the form provided on the website, or send us an email for the same purpose, you will need to provide your personal data so that we can process your request and reply to you.
If you wish to register and make a purchase through our website, your personal data will be required to complete the order and ship the goods.

3. Purpose of processing

We inform you that your personal data will be used for the following purposes:
  1. Use of the website. This processing involves the management of navigation services and technical analysis of the website.
    Retention period: 30 days.
  2. Use of website users’ contact details for information purposes. Use of contact details to respond to specific queries, requests for clarification or contact made via the website’s enquiry form or by email.
    Retention period: 6 months from the last communication.

4. Legal basis for processing

Difass processes your personal data lawfully.
  • Processing 1 and 2 are intended to serve a legitimate interest of the Data Controller.
The Data Controller, Difass, will process your personal data only to the extent that they are mandatory, in relation to the objective of the purposes mentioned above, in compliance with the provisions of current legislation on the protection of personal data.

5. Methods of processing

Your personal data – as “data subjects” – are, in particular:
  1. Common personal identification data (First name, Surname, Address, Email address, Telephone number),
    Data category: Identifiers – Personal data: common
as part of Treatment 2.
  1. Data relating to the contact request or necessary for its processing.
    Data category: Identifiers – Personal data: common
as part of Treatment 2.
  1. IP addresses or domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment
Data category: Identifiers – Personal data: common
as part of Treatment 1.
These data will be treated with a high level of security and always adequate to the most modern standards. All the protection measures indicated by the legislation on the protection of personal data and the applicable legislation, as well as those determined by the Data Controller, are implemented.
The data will be processed by the following categories:
  • Subjects authorized to the treatment:
    • IT Manager (Treatment 1).
    • C.O.O. (Treatment 2).
    • Deputy Managing Director, Strat. Comm. (Treatment 2).
    • Op. Marketing Italy (Treatment 2).
    • Op. Switchboard (Treatment 2).

  • Appointed Data Processors involved for:
    • Hosting and site maintenance (Treatment 1).
    • Document system management (Treatment 2).

6. Communication and data transfer

The data, collected by Data Controller, may be communicated, in addition to the subjects indicated above, also to other categories of subjects for whom the communication is strictly necessary, functional and compatible with the legal basis that regulates the processing of your data. In particular, they may be communicated to:
  • Legal consultants or accountants who provide functional services for the purposes indicated above;
  • Banking and insurance institutions that provide functional services for the purposes indicated above;
  • Subjects who process data in execution of specific legal obligations;
  • Judicial or administrative authorities, for the fulfillment of legal obligations.
As part of the processing carried out by the subjects described above, your data will not be transferred to third countries or international organizations. However, the Owner reserves the right to use cloud services, in that case the service providers will be selected from those who provide adequate guarantees, as required by art. 46 of the GDPR.

7. Automated decision making and profiling

No decision is made based solely on automated processing that produces legal effects that affect you or that significantly affects your person in a similar way. For the purposes of the data processing described above, no decision is made solely on the basis of automated processing that produces legal effects concerning you or similarly significantly affects you.

8. Rights of the Data Subject

As a Data Subject, you have the rights set out in section 2, 3 and 4 of Chapter III of Regulation (EU) 2016/679 (e.g. ask the Data Controller: access to personal data and the rectification or cancellation of the same; the limitation of the processing concerning you; to oppose their processing).
The Data Subject has in particular the right to:
  • obtain from the Data Controller the confirmation that a personal data concerning him or her is being processed or not and, in this case, to obtain access from the personal data and the information provided by art. 15 of EU regulation n. 679 of 2016;
  • obtain from the Data Controller the rectification of inaccurate personal data concerning him or her;
  • obtain the deletion of personal data concerning him or her, where these are no longer necessary for the purposes for which they were collected or otherwise processed, or where they use additional conditions under art. 17 EU regulation n. 679/2016 and provided that the conditions of art. 17, paragraph 3, EU regulation n. 679/2016 do not apply;
  • obtain from the Data Controller the restriction of processing when:
  1. the data subject contests the accuracy of the personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data;
  2. the processing is unlawful but the Data Subject himself opposes the cancellation and instead asks for the application of limitation measures or asks that the processing of the same take place for the establishment or defense of his right in court;
  • receive in a structured format, commonly used and machine-readable, the personal data concerning him or her; in the case of the exercise of this right, the data subject may request that the Data Controller transmit the aforementioned data directly to another data controller;
  • object to the processing of personal data concerning him or her if the conditions of Art. 21 EU regulation n. 679/2016, paragraph 2 occur;
  • lodge a complaint with a supervisory authority.
Regarding the exercise of these rights, the interested party can contact:

Data Controller
Difass International SPA
Via Ausa 5,
47853 Coriano (RN)
FISCAL CODE AND VAT NR. 02172260974
mail: privacy@difass.com
DPO: dpo@difass.com

9. Data retention

The personal data that you will provide us will be kept for the purpose of performing the agreed service and will be kept for the time necessary to carry out the same, and - subsequently - for the time in which the Data Controller is subject to conservation obligations for tax or for other purposes, provided for by law or regulation.
Conservation can take place through:
  • storage within the hardware systems of the Data Controller or its managers

Do you need further information?

Fill the form, we will answer as soon as possible



Mandatory Fields *
Via Ausa, 5 - 47853 Coriano (Rn) - Tel. +39 0541/1780101 - Fax +39 0541/1780115 - E-mail: info@difass.com
Credits TITANKA! Spa