Privacy Policy

POLICY ex Article 13 and 14 Regulation (EU) 2016/679

Dear Sir/Madam,

We inform you that 2 EFFE ENGINEERING SRL, as data controller, will process, for the purposes and in the manner set out below, the personal data provided by you or acquired as part of the supply-sales relationship in place, for the fulfilment of legal and contractual obligations.

In particular, 2 EFFE ENGINEERING SRL will process your personal data.

1. Legal basis and purposes of data processing

The treatment is based on the sales and supply contract with 2 EFFE ENGINEERING SRL, in order to allow the management of the contractual relationship and the related fulfilment.

2. Processing methods

The processing of your personal data is carried out, also with the aid of electronic means, by means of the operations indicated in Article 4 Number 2 of the GDPR and precisely: the processing of personal data may consist of the collection, recording, organization, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

3. Obligatory of data providing

Data providing is mandatory to achieve the purposes listed above, as well as necessary to comply with administrative and accounting obligations.

Any failure to provide the mentioned data will make impossible for 2 EFFE ENGINEERING SRL to transmit the information requested, and therefore, the conclusion of the contract.

4. Scope of communication of data

Your data may be disclosed by the persons in charge of processing and by the specially appointed staff members of 2 EFFE ENGINEERING SRL, as well as external consultants, labour, legal and tax consultants. Your date may be disclosed also for the relative fulfilments to the Revenue Agency.

The personal data you provide will not be disclosed.

5. Data transfer to extra EU Countries

5.1. Personal data are stored on servers located in Italy. If necessary, the data controller will have the right to move the servers even outside the EU. In this case, the Data Controller hereby guarantees that the transfer of non-EU data will take place in accordance with the applicable legal provisions and in particular those of Title V of the GDPR.

5.2. Except in the cases referred to in point 5.1, your data will not be transferred outside the EU.

6. Data retention period

The collected data will be stored for the time strictly necessary to achieve the purposes for which they were acquired, in accordance with the specific provisions of the law in this regard and in any case no longer than 11 years. The check on the obsolescence of the data being processed with respect to the purposes for which they were collected and processed is carried out periodically.

7. Data Controller


Via Brescia, 45

25080 Soiano del Lago (BS)


8. Rights of the data subject

At any moment, you can have access to the personal data concerning yourself, know how they were acquired, check whether they are accurate, complete, up to date and well-kept and you can request its correction or cancellation in accordance with Articles 16 and 17 of the GDPR. According to Article 21 of the GDPR, you have the right to object, in whole or in part, to the data processing for reasons related to your particular situation; if the data are processed for direct marketing purposes, you have the right to object at any time to their processing for that purpose.

These rights may be exercised through a specific request to be addressed by registered letter – or Pec – to the Data Controller.

You also have the right to lodge a complaint with the Authority for the Protection of Personal Data.

Soiano del Lago (BS), 16/09/2019

The Data Controller