Privacy Policy

The Data Controller is F.I.A.M.E. s.r.l., with registered office at Viale Cassiodoro 5, 20145 Milan (MI) and production facility at Via Monte Nero 13, 20010 Bareggio (MI) — VAT no. 01183220159.

For any matter relating to the processing of personal data, please contact the Controller at fiame@fiame.it or by phone at +39 02 903 62 455.

F.I.A.M.E. Srl collects and processes the following personal data for the purposes indicated:

• First and last name — to identify the user in communications
• Email address — to respond to contact requests
• Phone number — for telephone contact at the user's request
• Company and role — to contextualise the commercial or technical request
• Message content — to provide the most appropriate response

Data is processed exclusively to respond to requests submitted via the contact forms on the website and for the management of any commercial relationship established.

Processing is carried out on the following legal bases:

• Performance of pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR)
• Consent given by the data subject at the time of submitting the form (Art. 6(1)(a) GDPR)
• Compliance with a legal obligation to which the Controller is subject (Art. 6(1)(c) GDPR)
• Legitimate interests of the Controller for commercial communication purposes (Art. 6(1)(f) GDPR)

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected.

• Contact data: retained until the end of the relationship and for the following 10 years due to legal obligations
• Data collected via form: retained for 24 months from the date of the last communication
• Navigation data and cookies: as indicated in the Cookie Policy

Upon expiry, data is deleted or irreversibly anonymised.

Data subjects may exercise the following rights at any time by contacting the Controller at the email address provided:

• Right of access to personal data (Art. 15 GDPR)
• Right to rectification of inaccurate or incomplete data (Art. 16 GDPR)
• Right to erasure ("right to be forgotten") (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with the supervisory authority (Garante Privacy — www.garanteprivacy.it)

F.I.A.M.E. Srl does not sell, transfer or disclose personal data to third parties for marketing purposes. Data may be communicated exclusively in the following circumstances:

• Upon order of the judicial or public security authority, in cases provided for by law
• To IT and hosting service providers that process data on behalf of the Controller, as Data Processors
• In the event of a merger, acquisition or business transfer, data may be transferred to the successor company

We have concluded a data processing agreement with Google for any analytics and maps services used on the site.

Personal data is processed and stored within the European Union. Any transfers to third countries are carried out in accordance with the guarantees provided by the GDPR (standard contractual clauses, European Commission adequacy decisions).

F.I.A.M.E. Srl adopts appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or accidental disclosure. These measures include:

• Encrypted data transmission via HTTPS/TLS protocol
• Access to data limited to authorised personnel
• Regular updating of IT security systems
• Data backup and recovery procedures

The website uses technically necessary cookies and, subject to consent, analytical and profiling cookies. For detailed information on the types of cookies used and consent management, please refer to the Cookie Policy.

The Controller reserves the right to modify this notice at any time, in order to adapt it to any regulatory or operational changes. Changes are published on this page with the date of the update. You are invited to consult this page periodically.