SUBJECT: WEBSITE PRIVACY NOTICE PURSUANT TO NATIONAL LEGISLATION AND ART. 13 OF EU REG. 2016/679

1. DATA CONTROLLER
Pursuant to Articles 4 and 24 of EU Reg. 2016/679, the Data Controller is Class Italia Srl, with registered office in Via Emilia Romagna 2, 61020 Gallo di Petriano (PU), Tel. +39 0722 52176, privacy@formerin.it, represented by its legal representative pro tempore.

2. PURPOSES AND LEGAL BASIS OF PROCESSING
The personal data provided will be processed, in compliance with the conditions of lawfulness under Art. 6 of EU Reg. 2016/679, for the completion of a form intended to request information. The legal basis of the processing is legitimate interest (Art. 6 paragraph 1 letter f).

3. DATA RETENTION PERIOD
The data collected will be processed using manual, IT or telematic tools, in compliance with the purposes for which they were collected and in a manner suitable to ensure their security and confidentiality. Personal data will be retained for the time necessary to fulfill the specific purposes mentioned above, also taking into account the legal deadlines for judicial protection of the interests of the User and the Controller. Therefore, pursuant to Art. 5 paragraph 1 letter e) of EU Reg. 2016/679, the retention of personal data depends on the purpose of the processing: for contact request data, the retention period is a maximum of 6 months.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF DATA
The personal data provided will be disclosed to recipients who will process the data as processors (Art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Controller and the Processor (Art. 29 of EU Reg. 2016/679), for the purposes listed above under point 2. Specifically, data will be disclosed to:

• entities providing services for the management of the IT system and telecommunications networks, including email and the website;

• professionals, firms or companies within the scope of assistance and consultancy relationships;

• competent authorities for compliance with legal obligations and/or orders of public bodies.

The subjects belonging to the above categories perform the function of Data Processor, or act in full autonomy as separate Data Controllers.

5. TRANSFER OF DATA TO A THIRD COUNTRY
The Data Controller will not transfer your personal data to a third country or to an international organization. However, the Controller reserves the right to use cloud services; in such case, the service providers will be selected among those offering adequate guarantees, as provided by Art. 46 of EU Reg. 2016/679.

6. NATURE OF PROVISION AND REFUSAL
Apart from what is specified for browsing data, the user is free to provide personal data. The provision of data may be optional or necessary depending on the specific purpose of processing. Failure to provide the data marked with the symbol *, will make it impossible to obtain what has been requested or to use the services of the Data Controller.

7. DATA SUBJECTS’ RIGHTS
You may exercise your rights as set out in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of EU Regulation 2016/679, by contacting the Data Controller at privacy@formerin.it. You have the right, at any time, to request access to your personal data, rectification, deletion, and restriction of processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, e.g., profiling), as well as to data portability. Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your personal data violates EU Reg. 2016/679, pursuant to Art. 15 letter f) of the aforementioned Regulation, you have the right to lodge a complaint with the Data Protection Authority and, with reference to Art. 6 paragraph 1 letter a) and Art. 9 paragraph 2 letter a), you have the right to withdraw consent at any time. In the event of a request for data portability, the Data Controller will provide you, in a structured, commonly used and machine-readable format, with your personal data, subject to paragraphs 3 and 4 of Art. 20 of EU Reg. 2016/679.