Information on the processing of personal data and free movement pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council


Data controller

The data controller of personal data is: Italcompo srl, via Ragazzi del 99, 77 20010 S.G sul Legnano,, -

Purpose and legal basis of the processing

The personal data provided are collected for the performance of activities defined by the contractual agreements related to the manufacture of accessories and moulds for footwear, including accessory and auxiliary activities (i.e.: accounting, administrative, organisational, management) and for the fulfilment of legal obligations.

Data processed

These are the common personal data acquired from the customer for the management of the contractual relationship (personal details, address, telephone number, email, technical data on the contract, etc.). No further special categories of personal data will be processed (Art. 9 of the EU regulation).

Categories of recipients of personal data

The processed data may be communicated to: internal manager and designated data processors, external companies for IT assistance and for tax, accounting, administrative assistance. The data, limited to the extent of their competence, may also be communicated to any third party companies and professionals involved in the management of the contractual relationship. Please also note that Italcompo uses cloud computing application services in EU countries, web platforms, email providers at data centres located within the European Economic Area (EEA). The data, except for specific fulfilment of legal obligations, are not transferred to other companies and third countries, in particular to countries that do not provide adequate guarantees regarding data processing.

Period of data retention

The data collected will be processed by means of electronic or in any case automated, computerised and telematic instruments, or by means of manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee the security of the same. Data processing will last from the conclusion of the contractual relationship until the end of the contract, increased by 10 years (in order to allow the fulfilment of legal and fiscal obligations). The fundamental rights of the data subject are specified in Articles 15 (access), 16 (rectification), 17 (right to be forgotten) and 18 (restriction of processing) of EU Regulation 679/2016. To exercise their rights, the data subject may send a written request to the following address: - The data controller will inform him/her of receipt and will follow up on his/her request within 72 working hours. Pursuant to Art. 19, requests relating to the rights under Art. 16, 17 and 18 will be forwarded by the Controller and/or the Internal Responsible.

The right to lodge a complaint with a supervisory authority

The data subject also has the right to lodge a complaint with the competent supervisory authority.

Necessity and Consequences of a refusal to communicate personal data

Failure to provide data for the above-mentioned purposes will prevent the Controller from managing the contractual relationship and sending the requested information.