Privacy policy

Customers, Suppliers, Website Users

Privacy Notice pursuant to Art. 13 of EU Regulation 2016/679 (GDPR)

FLODRAULIC EUROPE SRL, represented by its legal representative pro tempore, with registered office in Granarolo dell’Emilia (BO), via Don Minzoni 28-30-32, 40057 Cadriano (Tax Code and VAT No.: 09417020964), acting as Data Controller or Joint Controller pursuant to Art. 26 of EU Regulation 2016/679 (hereinafter “GDPR”) together with the following companies of the FLODRAULIC group:

  • FLODRAULIC INDUSTRIAL SRL, represented by its legal representative pro tempore, with registered office in Granarolo dell’Emilia (BO), via Don Minzoni 28, 40057 Cadriano;
  • FLODRAULIC MOTION SYSTEMS SRL, represented by its legal representative pro tempore, with registered office in Sasso Marconi (BO), via Cartiera 154, 40037 Borgonuovo;
  • FLODRAULIC FLUID CONVEYANCE SRL, represented by its legal representative pro tempore, with registered office in 40013 Castel Maggiore (BO), via Lirone 60/C;
  • EBI MOTION CONTROLS SRL, represented by its legal representative pro tempore, with registered office in Granarolo dell’Emilia (BO), via Andrea Costa 11/2, 40057 Cadriano;
  • CEIMU SRL, represented by its legal representative pro tempore, with registered office in 37053 Cerea (VR), via del Commercio 9;

hereby informs you that your personal data will be processed in compliance with the GDPR and with applicable national data protection legislation (hereinafter “privacy legislation”).

The Joint Controllers have entered into a joint controllership agreement pursuant to Art. 26 GDPR. The essential contents of this agreement are made available to data subjects upon request sent to the designated contact point: comitatoprivacy@flodrauliceurope.com.

1. Purpose and Legal Basis of Processing

Your personal data will be processed for the following purposes:

1.1 To enter into contracts with the Controller and/or the Joint Controllers and to manage related relationships during pre-contractual, contractual, tax, administrative and accounting phases (legal basis: performance of a contract or pre-contractual measures and compliance with legal obligations pursuant to Art. 6(1)(b) and (c) GDPR);

1.2 To send, to the email address provided by the data subject in the context of a previous contractual relationship with the Controller and/or the Joint Controllers, commercial or promotional communications concerning products or services similar to those already provided (so-called “soft spam”), without prejudice to the right to object pursuant to Art. 21 GDPR at the time of the first communication or subsequently (legal basis: legitimate interest pursuant to Art. 6(1)(f) GDPR);

1.3 To send commercial communications and/or advertising material and/or carry out direct sales and/or market research (i.e. Direct Marketing) relating to products or services of the Controller and/or the Joint Controllers, through automated systems (e.g. email, SMS, fax, MMS, etc.) and traditional methods (postal mail and telephone contact) (legal basis: consent of the data subject pursuant to Art. 6(1)(a) GDPR);

1.4 To respond to information requests submitted through the contact form available on the Controller’s website https://flodrauliceurope.com/ (legal basis: performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR);

1.5 To subscribe to the group newsletter in order to stay informed about initiatives, products and services of the Joint Controllers (legal basis: consent pursuant to Art. 6(1)(a) GDPR);

1.6 To ascertain, defend or exercise the Controller’s and/or Joint Controllers’ rights in court (legal basis: legitimate interest pursuant to Art. 6(1)(f) GDPR);

1.7 For accounting, tax and administrative purposes, customers’ data may be shared within the group (legal basis: legitimate interest pursuant to Art. 6(1)(f) GDPR);

1.8 To facilitate and improve browsing on the Controller’s websites through technical and analytical cookies (legal basis: performance of services expressly requested by the data subject pursuant to Art. 6(1)(b) GDPR).

For processing activities based on legitimate interest pursuant to Art. 6(1)(f) GDPR, the Controller and/or the Joint Controllers have carried out a prior balancing test (Legitimate Interest Assessment – LIA) to verify that their legitimate interests prevail over the fundamental rights and freedoms of the data subject.

2. Processing Methods and Data Retention Period

Your personal data will be processed by applying technical and organizational security measures appropriate to the risk, taking into account the state of the art and implementation costs, in compliance with privacy legislation, the decisions of the Italian Data Protection Authority, and within the limits set forth by Art. 5 GDPR.

Data retention is limited to the time strictly necessary to achieve the purposes for which the data are collected, without prejudice to mandatory retention periods established by law or by decisions of the Data Protection Authority.

In particular:

  • For the purposes under Arts. 1.1 and 1.7, personal data will be retained for 10 years from termination of the contract, unless limitation periods are interrupted (Art. 2946 Italian Civil Code).
  • For direct marketing purposes under Arts. 1.2 and 1.3, personal data will be retained for no longer than 24 months from collection, without prejudice to the right to object (soft spam – Art. 1.2) and the withdrawal of consent (Art. 1.3).
  • For the purpose under Art. 1.4, personal data will be retained for the time necessary to process your request.
  • For the purpose under Art. 1.5, personal data will be retained until consent is withdrawn.
  • For the purpose under Art. 1.6, data will be retained for the time necessary to exercise defense rights.
  • For the purpose under Art. 1.8, data will be retained according to the retention periods indicated in the Cookie Policy published on the Controller’s website.

3. Recipients of the Data

For the above purposes, your personal data may be processed by authorized/designated personnel of the Controller and/or the Joint Controllers who have been duly instructed and trained.

Data may be disclosed, in compliance with legal obligations or for the proper performance of the contractual relationship, to external parties acting as independent Data Controllers or as Data Processors duly appointed pursuant to applicable legislation (depending on their role in relation to the processing), such as social security, welfare and insurance bodies, trade associations, tax and labor offices, other group companies, legal, commercial and tax advisors, auditing firms, banks and credit institutions.

4. Nature of Data Provision

Providing your data is mandatory for the fulfillment of contractual and legal obligations; therefore, failure to provide them, in whole or in part, will make it impossible to execute the contractual relationship in all its phases.

Providing data for other purposes is optional; therefore, refusal to provide such data will only result in the impossibility of using certain services of the Controller’s website (such as subscribing to the group newsletter or submitting requests through the contact form) and of receiving commercial and/or promotional communications for direct marketing purposes as described above.

With reference to direct marketing activities, you may at any time exercise your right to object to processing for such purposes (in the case of soft spam), after which your data will no longer be processed for that purpose, or withdraw your consent as indicated in paragraph 7 below. Where processing is based on consent, provision of data is optional and consent may be withdrawn at any time.

5. Data Transfers Abroad

Your data will not be transferred to countries outside the European Union or to international organizations.

Should it become necessary, for technical and/or operational reasons or for the performance of the contract, to engage parties located outside the European Union, any transfer of data outside the EU will take place in compliance with applicable legal provisions, namely on the basis of an adequacy decision of the European Commission or, in its absence, on the basis of appropriate safeguards pursuant to Arts. 46 or 47 GDPR (e.g. standard contractual clauses adopted by the European Commission), or where a derogation under Art. 49 GDPR applies.

For information regarding transfers of personal data collected through third-party cookies to non-EU countries, please refer to the privacy policies of each third party, available on their respective websites (links are provided in the Cookie Policy published on the Controller’s website).

6. Rights of the Data Subject

As a data subject, you may exercise at any time the rights provided for in Articles 15 to 22 GDPR. In particular, you may:

  • access your personal data and obtain information about the purposes pursued, categories of data involved, recipients to whom data may be disclosed, applicable retention periods, existence of automated decision-making processes including profiling, and, at least in such cases, meaningful information about the logic involved and the significance and possible consequences for you;
  • obtain without undue delay the rectification of inaccurate personal data concerning you;
  • obtain erasure of data, where provided by law;
  • obtain restriction of processing or object to processing, where permitted under applicable law;
  • where provided by law, request data portability, i.e. receive the data you have provided in a structured, commonly used and machine-readable format and request transmission to another controller, where technically feasible;
  • lodge a complaint with the Italian Data Protection Authority (Art. 77 GDPR).

Where processing is based on consent, such consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

7. How to Exercise Your Rights

Pursuant to Art. 26(3) GDPR, the data subject may exercise their rights against each Joint Controller.

In any case, the data subject may contact FLODRAULIC EUROPE SRL by sending a written communication to the company’s registered office or by sending an email to: comitatoprivacy@flodrauliceurope.com.

Updated March 2025