Privacy Policy

Information notice for data subjects pursuant to and for the purposes of Articles 13 and 14 of European Regulation (EU) 2016/679
Legislation relating to the protection of natural persons with regard to the processing of personal data
GDPR (General Data Protection Regulation – EU Regulation 679/2016)
Privacy Code Legislative Decree 196/2003 (as amended by Legislative Decree 101/2018).

FLUIMAC SRL wishes to inform the data subjects concerned that personal data relating or referable to them are processed by the Company in full compliance with the legislation in force on data processing and with the confidentiality obligations that have always inspired us. “Processing of personal data” means any operation or set of operations, whether or not carried out by automated means, concerning the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if not recorded in a database.
Pursuant to Articles 13 and 14 of the GDPR (EU Regulation 2016/679), with regard to the personal data that we process following the establishment of our mutual contractual relationships (arising from the “consultancy mandate”), we hereby provide the information set out below.

Data Controller

For all legal purposes, the “Data Controller” is FLUIMAC SRL, with its operational headquarters at Via Brescia 1, Tradate (VA), Italy, which may be contacted at the following email address: info@fluimac.com.

Purpose of the processing

Personal data relating to natural persons, provided directly by the data subjects or by companies having commercial or contractual relationships with the Company, are processed for purposes connected with the Company’s core business (production of industrial pumps) and the consequent fulfilment of legal and tax obligations; such processing shall continue for the entire duration of the commercial/contractual relationship and also thereafter, for the fulfilment of legal obligations and for administrative and tax purposes.
Please also note that, when browsing our website, the system may acquire technical browsing data relating to the IP address, identification codes of the devices used by the user to access pages or services, data relating to browser characteristics and access times, and other anonymised browsing data.
Within the scope of the purposes for which personal data are collected, FLUIMAC SRL processes such data in accordance with the principles of fairness, lawfulness, transparency, and protection of the confidentiality and rights of the data subject.
Lastly, please note that the Company uses, within its management systems, artificial intelligence (AI) software – ChatGPT, Copilot – the use of which may involve the processing of personal data (names, email addresses). The use of AI complies with the applicable Italian and European legislation. The Company guarantees that the use of AI does not affect the individual in any way whatsoever during automated management processes.

Nature of the provision of data

Personal data are always collected directly from the data subject.
The provision of such data, which are necessary for the purposes described above, is essential in order to carry out the contractual and commercial relationship; any refusal to provide such data may result in the inability to provide, in whole or in part, the Company’s services.

Processing methods

Data are processed in accordance with the principles of fairness, lawfulness, and transparency, by means of tools and procedures suitable to ensure their security and confidentiality, and may be carried out both on paper and with the aid of electronic means.
The processing is carried out using appropriate security measures to minimise the risk of unauthorised access to the data by third parties, their destruction and/or deterioration, and to ensure confidentiality, pursuant to Article 32 of the GDPR.

Retention of personal data

Personal Data and, where applicable, special categories of data, shall be retained only for the time necessary for the purposes for which they are collected, in compliance with the data minimisation principle set out in Article 5(1)(c) of the GDPR, as well as with the legal obligations to which the Data Controller is subject. Further information on retention periods and processing times is available from the Data Controller.

Disclosure of data

Personal data shall not be disseminated in any way; however, they may be communicated by us:

  • to persons in charge, duly appointed, of processing such data within the Company;
  • to entities and associations connected with the Company;
  • to public bodies, public administrations, and financial institutions;
  • to subjects that need to access such data for purposes ancillary to the relationship between our Company and the data subject, within the strict limits necessary to perform the auxiliary tasks assigned to them, such as: credit institutions, law firms, insurance companies, experts.

Other special categories of personal data

When submitting a CV, pursuant to Articles 9 and 10 of GDPR 2016/679, the data subject may voluntarily provide the Company with data qualifying as “special categories of personal data” (namely data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership… genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a person’s sex life or sexual orientation”). Such category of data may be processed by FLUIMAC SRL only with the prior written consent of the data subject.

Rights of the data subject

The data subject may, at any time, exercise the rights referred to in Articles 15–22 of the GDPR:

  1. To obtain confirmation as to whether or not personal data concerning them are being processed and, where that is the case, to obtain access to the personal data and all the information provided for under Article 15 of the GDPR;
  2. To obtain the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement;
  3. To obtain the erasure of personal data concerning them without undue delay;
  4. To obtain restriction of processing where one of the cases provided for in Article 18 of the GDPR applies;
  5. To receive, in a structured, commonly used and machine-readable format, the personal data concerning the data subject that have been provided to the Company;
  6. To object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Article 6(1)(e) or (f) of the GDPR. In such a case, the Company shall refrain from further processing the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims;
  7. Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. This right shall not apply in the cases governed by Article 22(2) of the GDPR;
  8. To lodge a complaint with the supervisory authority if they believe that their data have been processed unlawfully.