Transparency and data protection

Privacy Policy

Privacy notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679
Last updated: July 21, 2026

This privacy notice describes how the personal data of users who visit the www.fimas.it website and use the contact form are processed, pursuant to Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (Privacy Code), as amended by Legislative Decree 101/2018.

1.Data controller

The Data Controller is Fimas S.r.l., with registered office at Via Strada 17 n. 34 – 95018 Riposto (CT) – Italy, VAT no. 01781270879.
Contacts: Tel. +39 095 930426 / +39 095 933111 – Mobile +39 380 7414098 – Email: fimas@fimas.it.

2.Types of data processed

Data provided voluntarily through the contact form

  • Full name;
  • Company / public body (optional);
  • Address, ZIP code, city, province and country;
  • Phone (optional) and mobile;
  • Email address;
  • Business sector (private/public), subject of the request and any message;
  • Date and time the consent was given.

Browsing data

The computer systems that operate the website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, access times, pages visited). Such data are used solely to obtain anonymous statistical information on the use of the website and to monitor its correct operation.

3.Purposes and legal basis of the processing

  • Responding to user requests (information, price lists and specification items, free samples): the legal basis is the performance of pre-contractual measures taken at the data subject's request (Art. 6, par. 1, letter b GDPR) and the consent given by checking the relevant box (Art. 6, par. 1, letter a GDPR);
  • Compliance with legal obligations (Art. 6, par. 1, letter c GDPR);
  • Website security and prevention of misuse (legitimate interest of the Controller, Art. 6, par. 1, letter f GDPR).

Providing the data marked as mandatory (*) is necessary in order to act on the request: if such data are not provided, the request cannot be answered. Consent may be withdrawn at any time, without affecting the lawfulness of the processing carried out before its withdrawal.

4.Methods of processing

The data are processed by electronic and/or paper means, according to logic strictly related to the purposes indicated and with the adoption of appropriate security measures pursuant to Art. 32 GDPR, in compliance with the principles of lawfulness, fairness, transparency, data minimization and storage limitation. There is no automated decision-making process and no profiling activity (Art. 22 GDPR).

5.Data recipients and third-party services

Personal data are not disseminated. They may be accessed by authorized internal staff and by parties carrying out activities on behalf of the Controller (e.g. IT and hosting service providers), appointed as data processors pursuant to Art. 28 GDPR. The data may also be disclosed to the competent authorities in the cases provided for by law.

Third-party services integrated into the website

Some features of the website rely on external services, which may process the user's technical data (such as the IP address) as independent controllers:

  • Google Maps (Google Ireland Limited) – map embedded in the Contacts page: loading the map involves the transmission of technical browsing data to Google and may result in the installation of third-party cookies. Privacy notice: policies.google.com/privacy;
  • Google Fonts (Google Ireland Limited) – typefaces loaded from Google's servers: requesting the fonts involves the transmission of the IP address to Google;
  • Photon – OpenStreetMap (komoot GmbH, Germany) – address suggestion service in the Contacts form: only the text typed in the “Address” field is sent to the service, on servers within the European Union, for the sole purpose of offering completion suggestions; no cookies are installed.

6.Transfer of data outside the EU

The data collected through the contact form are processed and stored on servers located within the European Union. The use of the Google services indicated above may involve transfers of technical data to third countries (in particular the United States); such transfers take place on the basis of the safeguards provided for in Chapter V of the GDPR, including the adequacy decisions of the European Commission (EU-U.S. Data Privacy Framework) and the standard contractual clauses adopted by the providers.

7.Retention period

The data collected through the contact form are retained for the time necessary to respond to the request and to manage any business relationship arising from it and, subsequently, for the time strictly necessary to comply with legal obligations or to assert a right in legal proceedings. Browsing data are retained for the technical time required for statistical and security purposes.

8.Rights of data subjects

Pursuant to Articles 15-22 GDPR, users have the right to:

  • obtain access to their personal data (Art. 15);
  • obtain their rectification (Art. 16) or erasure (Art. 17);
  • obtain restriction of the processing (Art. 18);
  • receive the data in a structured, commonly used format (portability, Art. 20);
  • object to the processing (Art. 21);
  • withdraw the consent given at any time (Art. 7);
  • lodge a complaint with the Garante per la protezione dei dati personali, the Italian Data Protection Authority (Art. 77 GDPR – www.garanteprivacy.it).

These rights may be exercised by writing to the Controller at the contact details given in point 1.

9.Cookies

The www.fimas.it website uses only technical, preference and anonymous statistical cookies. On first access, a banner allows the user to accept all cookies or to reject the non-essential ones: technical cookies, which are essential to the operation of the website, do not require consent. Simply continuing to browse does not constitute the granting of consent.

Complete list of cookies

Cookie name Type Purpose Duration
PHPSESSID Technical Maintain the user session When the browser is closed
cookie_consent Technical Store cookie preferences 12 months
hideShepherdGuide Preferences Store the choice about the interactive guide 6 months
uuid Statistics (anonymous) Aggregate website usage statistics 24 months

Managing preferences

Cookie preferences can be changed at any time through the “Manage cookie preferences” button at the bottom of every page of the website, or through your browser settings (including by deleting cookies already installed).

10.Minors

The website and the contact form are intended for an adult audience and do not knowingly collect personal data of minors under 14 years of age. Should the Controller become aware that data have been provided by a minor in the absence of the legal requirements, it will promptly delete such data.

11.Changes to this privacy notice

Fimas S.r.l. reserves the right to update this privacy notice at any time, including as a result of regulatory changes. The updated version, with its date, is published on this page: users are invited to consult it periodically.