Ferveo
IT EN
Contact us
Home Challenge Technology Market Roadmap Status and Governance Team Press Contact
IT EN Contact us

PRIVACY POLICY

Ferveo SpA Società Benefit
VAT no. IT09081420722
Registered office: Via Dante Alighieri, 158 – 70122 Bari (BA)

Pursuant to Legislative Decree no. 196/2003 and Regulation (EU) 2016/679 (hereinafter the “Regulation”), this page describes how the personal data of users who consult the website accessible online at the following address are processed: https://www.ferveo.it/

We inform users that, as a result of consulting this website, data relating to identified or identifiable persons may be processed.

This information does not concern other websites, pages or online services reachable through hyperlinks that may be published on the website.

1. Data Controller

Ferveo SpA Società Benefit, with registered office and tax domicile at Via Dante Alighieri, 158 – 70122 Bari (BA), Italy — VAT no. IT09081420722.

The Data Protection Officer can be contacted by email at the following address: info@ferveo.it, or by registered letter with return receipt (for the attention of the Data Protection Officer) at the following address: Via Dante Alighieri, 158 – 70122 Bari (BA)

2. Source of the data and types of data collected

  • Data provided by the user:

    The Controller collects the personal data provided by users when they send a message using the contact channels and/or contact forms on the website. The data collected by the Controller may include, by way of example and without limitation: personal details (first name and surname), company name and contact details (email address).

    The optional and voluntary sending of messages to the contact addresses, as well as the completion and submission of the forms on the website, involves the acquisition of the sender’s contact details needed to reply, as well as of any personal data included in the communications.

  • Browsing data:

    The Controller collects data relating to the user’s use of the website.

    The computer systems and software procedures that operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

    This category of data includes the IP addresses or domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response and other parameters relating to the user’s operating system and IT environment.

    These data, which are necessary to use the web services, are also processed in order to:

    • obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or day, geographical areas of origin, etc.);
    • check that the services offered are working properly.

    Browsing data are not kept for more than seven days and are deleted immediately after being aggregated (except where needed by the judicial authorities to investigate crimes).

3. Cookies and other tracking systems

In order to make its services as efficient and easy to use as possible, this Website uses cookies.

Therefore, when you visit the Website, a minimal amount of information is placed on the User’s device, such as small text files called “cookies”, which are saved in the User’s web browser directory. There are different types of cookies, but essentially the main purpose of a cookie is to make the Website work more efficiently and to enable certain functions.

For more information on the cookies used by this website, please see the cookie policy.

4. Purposes of processing

Depending on the type of processing to be carried out, the Data Controller uses the data collected and/or provided by the User for the following purposes:

  • Replying to requests sent through the form and forwarding them to the relevant company department according to the category selected (for example investor relations or sales): pre-contractual measures taken at your request and our legitimate interest in managing the requests received efficiently (Art. 6(1)(b) and (f) GDPR).
  • Ensuring the operation and security of the website: legitimate interest (Art. 6(1)(f) GDPR).
  • Complying with legal obligations (Art. 6(1)(c) GDPR).
  • replying to any communications, requests for information and/or services from users sent as messages using the addresses and/or contact forms on the website;
  • managing and monitoring risks, preventing possible fraud, insolvency or default; preventing and managing possible disputes, and taking legal action where necessary.

We do not use form data for promotional communications without your specific consent.

5. Recipients of the data

The personal data processed by the Controller are not disseminated, i.e. they are not disclosed to unspecified parties in any form, including by making them available or simply allowing them to be consulted.

They may, however, be disclosed to employees of the Controller, as they operate under the authority of the data controller. On the basis of the roles and tasks they perform, these employees have been authorised to process personal data, within the limits of their respective duties and in accordance with the instructions given to them by the Controller.

They may be disclosed to providers of technical services (hosting, email, website maintenance) and of other functions that the user may use at their discretion.

These service providers, appointed as Data Processors, are given only the personal data necessary to provide their services and are not allowed to use or disclose the data subjects’ personal data for other purposes without the data subject’s prior authorisation.

Finally, the data may be disclosed to parties entitled to access them under laws, regulations or EU legislation.

6. Transfer of data

Data is processed within the EU. Some third-party services on the website (Google, Meta, LinkedIn) may involve the transfer of data to the United States. Such transfers are based on the EU-U.S. Data Privacy Framework adequacy decision (Art. 45 GDPR) or on Standard Contractual Clauses (Art. 46 GDPR) and take place only with the user’s prior consent to the related cookies, which may be withdrawn at any time.

7. Provision of data

Fields marked with * are mandatory: without these data we cannot process your request.

8. Methods and retention period

The Data Controller keeps and processes personal data for as long as necessary to fulfil the stated purposes. Afterwards, personal data will be kept, and not processed further, for the period established by the civil and tax laws in force.

Data are processed with electronic tools and appropriate security measures, and kept for as long as necessary to handle your request and, if the request does not lead to any further relationship, for no longer than 24 months from the last contact. If the request leads to a business or investment relationship, the data are kept for the duration of the relationship and afterwards for the periods required by law, unless the consent given is withdrawn.

In the event of a dispute, the data collected will be kept for its entire duration, until the time limits for appeals have expired.

It should also be added that, if a user provides the Controller with personal data that are not requested or not necessary to perform the requested service or to provide a closely related service, FERVEO cannot be considered the controller of these data and will delete them as soon as possible.

9. Rights of the data subject

With regard to the data processed under this notice, the data subject has the right, at any time, to:

  • request from the Controller access to their personal data and to the related information (Art. 15 GDPR); the rectification of inaccurate data or the completion of incomplete data (Art. 16 GDPR); the erasure of the personal data concerning them (where one of the conditions set out in Art. 17(1) GDPR applies, and subject to the exceptions in paragraph 3 of the same article); the restriction of the processing of their personal data (where one of the cases set out in Art. 18(1) GDPR applies);
  • request and obtain from the Controller – where the legal basis for the processing is a contract or consent and the processing is carried out by automated means – their personal data in a structured, machine-readable format, including in order to transmit those data to another data controller (the right to data portability – Art. 20 GDPR);
  • object at any time to the processing of their personal data on grounds relating to their particular situation (Art. 21 GDPR);
  • withdraw consent at any time, limited to cases where the processing is based on their consent for one or more specific purposes. Processing based on consent and carried out before its withdrawal nevertheless remains lawful (Art. 7(3) GDPR).

The request can be made by contacting the Controller or the Data Protection Officer at the contact details above.

If data subjects believe that their data are being processed in breach of the Regulation, they may lodge a complaint with a supervisory authority (the Italian Data Protection Authority – Garante per la protezione dei dati personali – www.garanteprivacy.it), as provided for by Art. 77 GDPR, or take legal action before the competent courts (Art. 79 GDPR).

10. Refusal to provide data

If the Data Subject does not provide the data identified as necessary to perform the requested service, the Controller will not be able to carry out the processing related to the management of that service, nor fulfil the related obligations.

If the Data Subject does not give consent to the processing of personal data for the activities that require it, that processing will not take place for those purposes, without affecting the provision of the other services requested or those for which consent has already been given. If the Data Subject has given consent and later withdraws it or objects to the processing, their data will no longer be processed for those activities, without any consequences or adverse effects for the Data Subject or for any other services requested.

11. Automated decision-making

The Controller does not carry out any processing consisting of automated decision-making on the data of natural persons.