Formartis takes the right to privacy very seriously and is committed to ensuring that all personal data is collected, processed and used in a safe, ethical and transparent manner. For us, the privacy of our customers and partners is important, and we appreciate the trust placed by users in the correctness and attention that Formartis dedicates to the use of their personal data, in accordance with the principles included in this Notice.
- WHO CONTROLS THE USER’S PERSONAL DATA?
Formartis Srl is registered in the Italian register of companies with the number IT02396230340. Its main office is in via Luciano Lama 12 in Lemignano di Collecchio (PR), Italy.
Unless otherwise indicated in this Notice, Formartis acts as the Data Controller of the user’s personal data and is therefore responsible for the processing of personal data in accordance with the current data protection legislation. In this capacity, Formartis establishes both the purposes (the “why”) and the essential tools (the “how”) of the processing of the user’s personal data.
- METHOD OF COLLECTION AND PROCESSING OF PERSONAL DATA
3.1 THE PERSONAL DATA WE COLLECT ABOUT THE USER
Precisely because of the importance of data confidentiality for us, our intent is to remain open and transparent about the type of personal data we collect and how we use it.
Normally, Formartis will limit itself to collecting the user’s personal data where it is necessary for the purpose of maintaining the existing relationship with him as a commercial reference and (potential) customer. Depending on the exact type of relationship between us and the user, current and future, Formartis can therefore collect, use and process the following types of personal data: contact information, such as name, surname, e-mail address and number telephone number, as well as the postal address for billing and shipping purposes.
3.2 LEGAL BASES FOR PROCESSING
3.2.1 User’s personal data
Pursuant to current legislation, it is possible to collect and process personal data on the basis of a limited number of legal bases. At Formartis, we rely on one of the following legal bases for the processing of the user’s personal data:
1. need to execute a contract with the user (for example, for the management of their payment details when purchasing software licenses from us); or
2. legal obligations that Formartis is required to observe (for example, medical standards and traceability requirements); or
3. legitimate interests of Formartis (for example, when sending the user e-mails for marketing purposes, which contain references to products similar to those already purchased from us); or
the explicit and informed consent of the user (for example, when requesting a trial license for our software products).
3.3 CUSTOMER ASSISTANCE
Since for the purpose of providing most of our services it is necessary to guarantee technical support and the efficient handling of complaints and requests, the user acknowledges and is aware that Formartis may process personal data such as name, contact information, customer number and IP addresses, as well as any other personal data with which it may come into contact during the provision of assistance services.
- METHOD OF PROTECTION OF PERSONAL DATA
Formartis is committed to processing personal data in a lawful, fair and transparent manner.
Consequently, it guarantees that any processing of the user’s personal data will be limited to what is necessary, adequate and relevant in order to achieve the purposes for which such data were collected. Furthermore, Formartis will use, where possible and technically applicable, data made anonymous or referring to pseudonyms, for example for reasons of assistance, internal statistics or financial reporting.
Given the fundamental nature that the protection of the user’s personal data plays for us, Formartis is also intent on protecting the systems where such personal data are hosted. For this reason, we have defined and implemented appropriate technical and organizational measures in collaboration with our service providers, in order to protect personal data from unauthorized access, illegal use, accidental loss, alteration or destruction. In this way, the user can be sure that his personal data will be processed on the basis of the strict principle of “need for information”, in case of need and where appropriate.
Furthermore, being fully aware that threats evolve and diversify and wanting to retain user trust over the years, we are committed to regularly review and update our security measures and infrastructures in order to reduce operational risks and maintain ours. updated security programs to the latest industry standards and best practices.
- THIRD PARTIES WITH WHICH THE USER’S PERSONAL DATA MAY BE SHARED
Under no circumstances will Formartis sell the user’s personal data to third parties.
However, where it is relevant and necessary for the purposes of the processing activity, we may have to disclose the user’s personal data to suitable third party recipients, who need it for cognitive needs (for example, to financial institutions, in order to verify the details of payment and why this is necessary for the execution of the contract).
In any case, Formartis will limit the access and transfer of the user’s personal data only to trusted third party recipients, able to demonstrate an adequate level of data protection.
In addition, whenever the user’s personal data is shared externally, these operations will be covered by strict processing agreements, under which Formartis remains the Data Processor (Data Controller) and the third party recipients involved act as Data Processors. Consequently, the third party recipients with whom we may share the user’s personal data will be required to delete or return them in full to Formartis at the end of the provision of the Services relating to the processing activity and to delete all existing copies (unless such recipients third parties are themselves legally required to further retain the personal data in question).
- INTERNATIONAL TRANSFER OF PERSONAL DATA
Formartis headquarters are located in Italy.
Formartis will therefore remain responsible for the processing of the user’s personal data and will take the necessary measures to protect the processing by relying on adequate data transfer mechanisms, such as the Standard Contractual Clauses or the Privacy Shield signed between the EU and the US.
- PERIOD OF STORAGE OF PERSONAL DATA BY FORMARTIS
As a general rule, Formartis retains the user’s personal data only for the time necessary to fulfill the purposes for which they were collected. However, based on the type of personal data subject to processing and the purposes of the same, the actual retention period can vary significantly. In addition, there are industry laws and regulations in place that establish minimum retention periods in relation to personal data.
Except when there is a need to keep the user’s personal data for statistical purposes, to establish, exercise or defend rights in court or to the extent that we are required by law to keep a copy, Formartis is required to delete the personal data securely or permanently anonymously once fulfilled the initial processing purpose and no longer need to be retained further.
The effective retention period applicable to the personal data will depend on whether the processing takes place in the context of an existing contractual relationship with the user or is based on his explicit consent; from the fact that the processing of personal data takes place for our legitimate interests or if Formartis is legally obliged to keep them for a specific period or to fulfill specific legal obligations.
- THE USER’S RIGHTS AS AN INTERESTED PERSON
Although Formartis is technically the Data Processor, the final control over personal data rests in the last resort always with the user, provided that he is able to produce evidence of his real identity.
Consequently, and to the extent that the user is not already in possession of the information, the request is not manifestly unfounded or excessive, or if the satisfaction of this request does not appear unreasonably difficult, Formartis will manage the request at no cost, without undue delay, and in any case within one month after its receipt. We have the right to extend this period by a further two months, in the event that the fulfillment of the request requires additional time. In this circumstance, the user will be made aware of the underlying reasons.
8.1 RIGHT OF ACCESS
The user has the right to request access to a copy of personal data currently stored by us in a commonly used format and to obtain information on their processing, including processing for profiling purposes.
8.2 RIGHT TO RECTIFICATION
If the user detects errors in their personal data, they can ask us to rectify the personal data that are found to be inaccurate or to complete them. Formartis will notify the request to any third party recipient to whom we have disclosed the user’s data, unless this proves impossible or involves a disproportionate effort.
8.3 RIGHT OF CANCELLATION
Insofar as (i) the personal data are no longer necessary for the initial purpose, (ii) the processing was based on the user’s consent and was withdrawn, or (iii) the user has already objected to the processing on the on the basis of our legitimate interest, you have the right to request the deletion of your personal data from our systems without undue delay and to inform third party recipients to whom we have provided your personal data of such a request, unless the latter operation proves impossible or involves a disproportionate effort.
8.4 RESTRICTION OF PROCESSING
In the event that the user disputes the accuracy of his personal data, he has the right to request a consequent restriction of processing on our part, for the duration of time necessary to verify its accuracy within our systems. You may also request that the processing of your personal data be limited to pure storage, insofar as we no longer need it for our processing purposes, but the user needs it to establish, exercise or defend rights in court. . In the event that Formartis has disclosed the user’s personal data to third party recipients, we will notify them of your request to a reasonable extent.
8.5 RIGHT OF OBJECTION
The user has the right to object to the processing of their personal data by Formartis at any time on the basis of our legitimate interests.
8.6 DATA PORTABILITY
Where it is feasible from a technical point of view, the user can ask Formartis to export the personal data concerning him currently held by him in a structured format, commonly used and readable electronically, and request its transmission to another company of his choice.
- RESPONSIBLE FOR DATA PROTECTION
For more information on the processing of your personal data and user rights, contact us by e-mail at [email protected]. In the event that you are dissatisfied with the methods of handling your request, you have the right to request the limitation of the use of your personal data by us and to lodge a complaint with the supervisory authority responsible for the protection of personal data in the your country of residence.