Suppliers information

pursuant to art. 13 of the 2016/679 EU Regulation
“Referring to the protection of individuals regarding the processing of personal data”


1. Data controller and contact details

1.1 F.P.M. S.R.L. unipersonale as Data Controller in accordance with art. 13 of Regulation (EU) 2016/679, with headquarters in Lodrino (BS), via Mazzini no. 13, tel. 0308950064, e-mail:, informs you that the personal data you provide will be processed in compliance with the following information.

2. Object of the processing of personal data

2.1 The following personal data will be processed: name, surname, address, tax code and VAT number, CCIAA registration number, bank account details, telephone, e-mail, fax.

3. Purpose and legal basis of the data

3.1 the treatment to which the common personal data will be subjected responds to the purposes of providing:

a. at the close out and the execution of the obligations arising there from it;
b. the fulfillment of legal obligations, mainly to civil, fiscal and accounting provisions;
c. the enforcement of judicial and extrajudicial rights related to the relationship (eg, management of any litigation);

3.2 The processing of personal data is legitimised by the need to:

  • stipulate and execute the contract, for the purposes referred to in lett. a);
  • fulfill the legal obligations to which the Data Controller is subject, for the purposes referred to in lett. b);
  • to pursue the legitimate interest of the Controller in defending a right in court in case of any disputes related to the contract, for the purposes referred to in lett. c).

4. Personal data recipients

4.1 The personal data in question will be communicated, as strictly pertinent, to the following recipients or categories of recipients:

  • to Public Administrations, Bodies and Institutions, within the limits established by law and regulations;
  • to the Accountant, for accounting purposes, designated as Data Manager;
  • auditing firms, certification of financial statements, statutory auditors, designated as Data Managers;
  • to the companies or consultancy bodies that work for the Company in the various sectors, designated as Data Managers;
  • to external carriers, for the delivery of goods or correspondence;
  • to practice as a lawyer, for legal assistance in case of disputes regarding the execution of the contract;
  • Internal/external system administrator responsible for the maintenance of the IT system;
  • to authorized employees;

5. Mandatory nature of the provision of data

5.1 The provision of personal data is a necessary requirement for the conclusion of the contract and it is also mandatory for the fulfillment of legal obligations and for the execution of the contract itself. Therefore, failure to provide it implies the impossibility of stipulating and executing the contract.

6. Data transfer to third countries

6.1 The Data Controller does not transfer personal data to third countries or to international organizations. However, it reserves the right to use some services (such as the cloud): in which case, suppliers will be selected in compliance with the rights and guarantees established by the current legislation, subject to verification that the concerned country guarantees a level of “adequate” protection pursuant to art. 46 GDPR 679/16.

7. Rights of the interested party

7.1 The (EU) 2016/679 Regulation recognises the exercise of specific rights, including those to request from the Data Controller:

  • confirmation that the processing of your personal data is ongoing or not, in this case, to obtain access (right of access);
  • the edition of incorrect personal data or the integration of incomplete personal data (right of rectification);
  • cancellation of the data itself, if there is one of the reasons foreseen by the Regulation (right to be forgotten);
  • the limitation of processing, when one of the hypotheses foreseen by the Regulation (limitation right) occurs;
  • to receive, in a structured format, in common use and legible by a computing device, the personal data you have provided to the Data Controller and to transmit this data to another controller (right to portability).

7.2 Opposition right

7.2.1 You have the right to object, for reasons connected to your particular situation, to the processing of data made on the basis of the legitimate interest of the Data Controller (right of opposition).

7.3 How to exercise the rights

7.3.1 To exercise your rights, you can send a request to the e-mail address:

7.4 Right to file a complaint with an Authority

7.4.1 It is also recognised the right to file a complaint with the Warrantor for personal data protection, pursuant to art. 77 Reg., If you consider that the data that concerns you violates the provisions of EU Reg Reg.

8. Data retention

8.1 The personal data subject of this information, noted in the Books and Registers and in the reports and communications required by law, they will be kept for the during the contract relationship, and in any case for ten years from the last registration, pursuant to art. 2220 of the civil code.

Data controller (Delegate): EUGENIO FAUSTI