information request


    INFORMATIONarticle 13 EU Reg. 679/2016
    Dear User/Visitor,

    please be informed that Reg. (EU) 679/2016 (and Italian Leg. Decree 196/2003 as amended, only in so far as it complies with Reg. (EU) 679/2016) provides for the protection of natural persons with respect to personal data processing. According to the said legislation, your data will be processed based on the principles of lawfulness, fairness and transparency, protecting data confidentiality and security and guaranteeing you can exercise your rights.

    Pursuant to the aforementioned article 13 of Reg. (EU) 679/2016, we therefore provide you with the following information:

    a) The identity and contact details of the data controller and, where applicable, of his/her representative;
    The data controller is:

    registered office address MODENA (MO), STRADA SANT'ANNA 88/D, Postal code 41122
    Economic and Administrative Index No. MO – 286230 – Tax code 02385320367 – VAT no. 02385320367
    Tel. +39.059.313920
    Fax. +39.059.313916
    PEC (certified e-mail address)

    The data controller is based in the European Union and, therefore, is not required to designate his/her representative.

    b) The contact details of the data protection officer, where applicable;
    The data controller is not currently processing any data falling under the obligation to designate a “Data protection officer”, as detailed in Articles 37-38-39 and Recital 97 of Regulation (EU) 2016/679.

    c) The purposes of the processing which personal data is intended for, as well as the legal basis of processing;
    The purpose of processing is as follows:
     To process the request for information/contact you submitted by filling in a specific form on our website.
    We inform you that your personal data (personal details, contact details such as e-mail addresses, telephone numbers) will be processed for the aforementioned purpose.
    It should be noted that, in no section of the site, nor for access to any functionality thereof, is it required to provide “special categories of personal data” and/or “personal data relating to criminal convictions and offences”, as defined under art. 9 and 10 of Reg. (EU) 679/2016.
    The legal basis of processing is related to the provisions of art. 6, para. 1 letter a) of Reg. (EU) 679/2016, as the data subject has consented to processing his/her personal data for one or more specific purposes.

    d) If processing is based on Article 6, paragraph 1, letter f), the legitimate interests pursued by the data controller or by third parties;
    Please be informed that data processing is not based on Article 6, paragraph 1, letter f), as processing is not necessary for the data controller or a third party to pursue his/her own legitimate interests, provided that the interests or the fundamental rights and freedoms of the data subject are not overriding, requiring personal data protection, in particular if the data subject is a minor.

    e) Any recipients or categories of recipients of personal data;
    Your personal data will be processed by entities specifically appointed by the data controller as data processors (if appointed) and/or by anyone acting under their authority and/or under that of the data controller, and having access to personal data (Directors/partners/employees of the data controller); said entities will process your data only if necessary in relation to the purposes of the provision thereof, and only as part of performing the tasks assigned to them by the data controller, undertaking to process only the data needed to perform these tasks, and to accomplish only the operations required to carry them out.
    Your personal data will not be communicated and/or disclosed to third parties.

    f) Where applicable, the intention of the controller to transfer personal data to a third country or to an international organisation, and the existence or lack of an adequacy decision by the Commission or, in the event of the transfers referred to in Article 46 or 47 or in the second paragraph of Article 49, the reference to appropriate guarantees and to the measures to obtain a copy of such data, or the place where it was made available.
    The data controller does not intend to transfer personal data to a third country or an international organisation.

    In addition to the information previously given, the data controller provides you with the following additional information necessary to ensure fair, transparent processing:

    g) The retention period of the personal data or, if not possible, the criteria used to establish this period;
    Your data will be kept for the time necessary to achieve the aforesaid purposes; in particular, data will be processed for the time strictly required to process the request for information/contact you submitted by filling in a specific form on our website; the data will be subsequently deleted, except for their transformation into anonymous form. The data will be retained for a maximum of 2 years from the time of collection.

    h) The existence of the data subject’s right to ask the data controller for access to personal data and rectification or deletion thereof, or to restrict the processing of his/her data, or to object to the processing, in addition to the right to data portability;
    You may, at any time, exercise the following rights against the data controller under Reg. (EU) 679/2016, by contacting the data controller at the addresses mentioned under point a) of this information notice:
     Right of access by the data subject (Article 15 of Reg. (EU) 679/2016).
     Right to rectification (Article 16 of Reg. (EU) 679/2016).
     Right to erasure - ‘right to be forgotten’ (Article 17 of Reg. (EU) 679/2016).
     Right to restriction of processing (Article 18 of Reg. (EU) 679/2016).
     Right to object (Article 21 of the Reg. (EU) 679/2016).
     Right to data portability (Article 20 of Reg. (EU) 679/2016).

    i) If processing is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a), the existence of the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
    You may exercise the right to withdraw consent at any time against the data controller without affecting the lawfulness of processing based on consent before its withdrawal.

    j) The right to lodge a complaint with a supervisory authority;
    If you believe that the processing of the personal data concerning you by the data controller is performed in violation of the provisions of Reg. (EU) 679/2016, you have the right to lodge a claim with the competent Supervisory Authority, as envisaged by Article 77 of Reg. (EU) 679/2016, or to address the competent courts (Article 79 of Reg. (EU) 679/2016).

    k) If the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as if the data subject is obliged to provide personal data, in full awareness of any consequences of the failure to provide such data;
    As previously described, disclosing personal data is required to process the request for information/contact you submitted by filling in a specific form on our website; therefore, failure to disclose said data might make it impossible to process your request for return/repair (in particular, as regards the “mandatory fields” in the data collection form).

    l) The existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in those cases, significant information on the logic used, as well as the importance and expected consequences of said processing for the data subject.
    The data controller informs you that your data will not be subject to an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4 of Reg. (EU) 679/2016.

    The full texts of the articles of Reg. (EU) 679/2016 relating to your rights (articles 15 to 22 included) are available at the following link on the Data Protection Authority website:
    or, alternatively, they will be provided by the Data Controller upon your request.
    Finally, the data controller informs you that, if he/she intends to further process your personal data for a purpose other than that for which it was collected, before such further processing, he/she undertakes to provide you with all the information concerning this different purpose, and any further relevant details, pursuant to Article 13 of Reg. (EU) 679/2016, paragraph 2.

    Date when document was last amended
    Modena (Mo), 25/01/2021

    I declare that I have read the privacy information provided to me by the data controller (KF Srl Società Benefit) pursuant to Art. 13 of EU Reg. 679/2016 and, I authorize the processing of my personal data in relation to what is indicated therein.