NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF THE GDPR 2016/679
This notice on the processing of personal data ("Privacy Notice") explains how FAS INTERNATIONAL S.p.A. uses your information and applies to everyone who uses our website.
1. Who is the Data Controller?
FAS INTERNATIONAL S.p.A.
with its registered office in Schio (VI)
via Lago di Vico, 60
VAT No. 02081960243
contactable by email at info@fas.it
2. What personal data do we collect?
We may collect the following categories of personal information from and about you:
• Internet and network activity information: such as information about browsing behaviour, search history and interactions with websites and advertisements, including data from cookies and pixel tags;
• contact details: such as first name, last name, telephone number and email address;
• commercial information: such as information relating to pre-contractual and/or contractual relationships;
• if you apply for a job, we may process your personal details, contact details, educational and professional information and, where applicable, special categories of personal data.
3. How do we collect your information?
Your personal data may be collected through various channels:
• directly from you: we collect data when you use the website or interact with us in other ways, including through the website;
• through your device: when you use the website, we may collect information about the devices you use to access it, including the hardware model, operating system and version, IP (Internet Protocol) address and other unique device identifiers, mobile network information and device interaction information;
• through tracking systems. We may also collect data through tracking systems. In this regard, please read the dedicated Cookie Policy.
4. For what purposes do we process your personal data?
• Browsing data may be processed to:
enable and monitor the proper functioning of the website and carry out maintenance activities;
obtain anonymous statistical information on the use of the website;
establish any liability in the event of suspected cybercrimes against the website and, therefore, exercise and/or defend the Data Controller's rights in court.
• Data you provide by completing the Contact form is processed to respond to your enquiry.
• Data relating to recruitment is processed for any pre-contractual relationships that may be established following the selection process.
5. What is the legal basis for processing personal data?
• Processing for the purpose of using the website is based on the performance of a contract to which the data subject is a party.
• Processing for profiling purposes is based on consent given as set out in the Cookie Policy.
• The processing of personal data relating to recruitment is based on taking steps at the data subject's request prior to entering into a contract.
• Data may be processed to comply with legal obligations or for the Data Controller's legitimate interests.
6. Why is it necessary to provide your data?
Providing personal data is necessary to deliver the requested service (e.g. browsing the website, requesting contact, submitting a job application). Data marked with * is mandatory, while all other data is optional.
7. To whom may we disclose your data?
Your data may therefore be processed by our IT service providers or other third parties. Some parties may be appointed as Data Processors pursuant to Art. 28 of the GDPR, including natural and/or legal persons carrying out activities that support the purposes indicated above (e.g. website management service providers, such as outsourced IT system providers, companies providing Internet connectivity services and consulting companies). Data may also be disclosed to independent Data Controllers, such as supervisory and regulatory authorities and bodies authorised to request/receive the data.
8. Who is authorised to process your data?
Data will be processed by employees of the relevant company departments and by the Data Controller's collaborators responsible for carrying out activities to achieve the purposes indicated above, who have been expressly authorised to process the data and have received specific operating instructions.
9. How long do we process your data?
Personal data will be retained for different periods depending on the purpose for which it was collected:
• provision of services: we will retain the data for the time strictly necessary to achieve the purposes. In any event, since this processing is carried out to provide services, the Data Controller will exercise its right, as permitted by applicable legislation, to retain the personal data necessary to protect its interests for the period provided for by law.
• Personal data collected for recruitment will be retained until the selection process takes place or for the subsequent 12 months from collection or participation in the selection process.
10. May your data be transferred abroad to non-EU countries?
Personal data is processed within the EU. Where necessary, data may be transferred to parties established in countries outside the European Union (EU) and the European Economic Area (EEA). For such countries, where the European Commission has not deemed them adequate through an adequacy decision pursuant to Art. 45 of the GDPR, the standard contractual clauses adopted by the European Commission pursuant to Art. 46(2)(c) of the GDPR will be used as appropriate safeguards, with any necessary “supplementary measures” to ensure a level of protection essentially equivalent to that required by EU law.
11. How do we process your personal data?
We have adopted specific security measures to prevent the loss of personal data, unlawful or improper use and unauthorised access. However, please remember that, for the security of your data, it is essential that your device is equipped with tools such as regularly updated antivirus software and that your Internet service provider ensures secure data transmission through firewalls, anti-spam filters and similar safeguards.
12. What are your rights?
Data subjects may exercise the rights granted under Arts. 15–22 of the GDPR against the Data Controller and, in particular, may:
• request access to their personal data and to the information referred to in Art. 15 (purposes of processing, categories of personal data, etc.);
• request erasure in the circumstances provided for in Art. 17 if the Data Controller is no longer entitled to process the data;
• obtain the rectification of inaccurate data or the completion of incomplete data;
• obtain restriction of processing (i.e. temporarily limiting the processing of data to storage only), in the circumstances provided for in Art. 18 of the GDPR; object at any time, easily and free of charge, on grounds relating to their particular situation, to the processing of data based on the Data Controller's legitimate interests;
• receive their data in a structured, commonly used and machine-readable format and, where technically feasible, transmit it to another Data Controller without hindrance, where processing is based on consent or a contract and is carried out by automated means.
To exercise these rights, data subjects may contact the Data Controller at any time by sending a request by email to the contact details provided above.
Data subjects have the right to lodge a complaint with the Italian Data Protection Authority or with the competent supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement.
We may update this Privacy Notice at any time and will inform you accordingly.
Updated September 2025