Privacy Policy

This information is provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter also referred to as the Regulation); according to the indicated law, such processing will be based on principles of correctness, lawfulness, and transparency, and the protection of your privacy and your rights.

Data Controller

The Data Controller is FONDAPI National Supplementary Pension Fund for workers of small and medium-sized enterprises, headquartered in Piazza Cola di Rienzo, 80/A – Rome (also referred to as the Fund)

Data Protection Officer (DPO)

The Data Protection Officer is Protection Trade S.r.l. with registered office in Via Giorgio Morandi – 22, Itri (LT); their contact information is: dpo_fondapi@protectiontrade.it.

Purpose and Legal Basis of Processing

The collection and processing of your personal data are carried out for sending the Fund’s newsletter via the email you provided. The legal basis for processing is consent. Regarding the latter, you have the right to withdraw it at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal

Nature of Processed Data

For the aforementioned purposes, the following data will be processed: name and surname, IP address, and email address.

Nature of Personal Data Provision

Providing data for these activities is optional, and any refusal may result in the impossibility for the Controller to pursue the aforementioned purposes. You have the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Processing Methods

The processing is carried out primarily through automated means and in any case with the observance of every precautionary measure for data security and confidentiality.

Data Recipients

Authorized persons handling communications and external subjects appointed as data processors under Art. 28 of EU Regulation 2016/679 may become aware of your personal data exclusively for pursuing the aforementioned purposes. The data, which will not be disseminated, may be communicated to subjects who, on behalf of the Controller, perform accounting and fiscal management activities and to subjects who are recognized by law and/or regulation to have the right to access the data. The data will not normally be transferred outside the European Union. Any transfer of data outside the European Union will only occur to subjects that guarantee an adequate level of protection of processing and/or to countries for which the competent Authorities have issued an adequacy decision and to subjects that have provided suitable guarantees for data processing through appropriate regulatory/contractual instruments, such as the signing of standard contractual clauses.

Personal Data Retention Period

Personal data will be retained for two years or until consent is withdrawn.

Rights of Data Subjects

The data subject can request information about the processing of their personal data by writing to dpo_fondapi@protectiontrade.it. In particular, the data subject may:

• access your personal data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom they may be communicated, the applicable retention period, the existence of automated decision-making processes, including profiling, and, at least in such cases, meaningful information about the logic used, as well as the significance and possible consequences for the data subject, where not already indicated in the text of this Notice;
• obtain without delay the rectification of inaccurate personal data concerning them;
• obtain, in cases provided by law, the deletion of your data;

• obtain the limitation of processing or object to it, when permitted based on the legal provisions applicable to the specific case.

Where deemed appropriate, the data subject may file a complaint with the Supervisory Authority (Data Protection Authority).