Privacy Policy

Information about the processing of the personal data of visitors to the website www.finstral.com based on Art. 13 of EU Regulation 2016/679.

Why are we giving you this information?
In accordance with European Regulation (EU) 2016/679, this page describes the way in which the personal data of users visiting this website www.finstral.com are processed. This information concerns no other websites, pages or online services that may be accessed via any links appearing on the websites that refer to resources outside the domain.

Data controller
Data from identifiable natural persons may be processed when visiting the aforementioned websites.

The data controller is Finstral AG, located at Gastererweg 1, 39054 Unterinn/Ritten (BZ), e-mail: privacy@finstral.com, certified e-mail address: fibu.finstral@legalmail.it, T +39 0471 296611
The data protection officer can be contacted at dpo@finstral.com.
Responsible of processing regarding the administration of the webpage: Zeppelin Group GmbH, Kuperionstraße 34, 39012 Meran, Italy, info@zeppelin-group.com

Legal basis of processing
The personal data provided on this page will be processed as necessary by the data controller for the operation of the website and on the basis of specific information or the required consent in order to offer and process the services offered on the website.

Types of data processed and purposes of processing
Browsing data
The computer systems and software procedures necessary for the functioning of this website will collect certain personal data during normal operation: such data will be transmitted via internet communication protocols.
Such data may include the IP addresses or domain names of computers and terminal devices used, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the enquiry, the method used to submit the enquiry to the server, the size of the file obtained in reply, the numerical code indicating the status of the server reply (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data, which are necessary for the use of the web services, are also processed in order to:

obtain statistical information about the use of services (most popular pages, number of visitors by time or day, geographical origin, etc.);
monitor the correct functioning of the services offered.

The browsing data will be kept only for as long as is absolutely necessary to ensure the proper operation of the website and will be immediately deleted after indexing (without prejudice to any requirement on the part of the judicial authorities to investigate crimes).

Data provided by users
The optional, explicit and voluntary sending of messages to the contact addresses plus the completion and transmission of the desired web forms appearing on the website will mean the collection of the sender’s contact data necessary for reply, as well as all personal data contained in the messages.
Specific information will be published on the pages as regards the supply of the respective services.

Cookies and other tracking systems
Technical cookies (navigation and function cookies) as well as profiling cookies are used on this website. To learn more about cookies, including how to disable them, please view our Cookie Policy.

Recipients of data
Recipients of data collected during browsing of the websites listed above are those persons who, under Article 28 of the Regulation, are designated as processors so as to develop, guarantee and operationally manage the technical platforms.
The personal data gathered will also be processed by the data controller’s personnel subject to specific orders for the purposes and methods of processing.

Rights of data subjects
Data subjects have the right to ask for information about their personal data as well as to demand the correction or deletion of such data; to request the limitation of the processing concerning their data; or to oppose the processing of such data (Art. 15 ff. of the Regulation). Specific enquiries may be addressed to the above contact point.

Right of complaint
If a data subject believes that the processing of their personal data on this website is in breach of the Regulation, they have the right to file a complaint with the data protection authority, based on Art. 77 of the Regulation, or to approach the relevant judicial authorities (Art. 79 of the Regulation).

This privacy policy is provided by Finstral UK Limited ("us" or "we") and sets out the information required under UK data protection law. This privacy policy applies to the processing of the personal data of the following types of individual: (i) visitors to the website www.finstral.com; (ii) commercial customers (i.e. intermediary partners who purchase our products) and potential commercial customers; (iii) potential end customers who contact us regarding a possible purchase from a commercial customer; (iv) architects, designers and other third parties with whom we have a wider relationship (“other third parties”). We refer collectively to such individuals in this privacy policy as "you" or "your".

Why are we giving you this information?
In accordance with UK data protection law (which includes the UK GDPR and Data Protection Act 2018), this privacy policy describes the way in which your personal data is processed by us.

Data controller

The data controller is Finstral UK Limited, whose registered office address is The Walbrook Building, 25 Walbrook, London, United Kingdom, EC4N 8AF.
Finstral UK Limited is part of a wider group of European companies, who are headquartered in Italy ("Finstral Group"). For any queries regarding this privacy policy, or in relation to your personal data, please contact: privacy@finstral.com

What personal data we collect about you
We collect and use the following personal data about you:

Category of individual	Types of personal data we collect and use
Website users	Browsing data The computer systems and software procedures necessary for the functioning of this website will collect certain personal data during normal operation: such data will be transmitted via internet communication protocols. Such data may include your IP addresses which could potentially identify you. Data provided by users The optional, explicit and voluntary sending of messages to the contact addresses plus the completion and transmission of the desired web forms appearing on the website will mean the collection of your contact data necessary for reply, as well as all personal data contained in the messages.
Commercial customers and potential commercial customers	Name, business contact details – particularly, phone no., email address and job title.
Potential End customers	Position, title, first name, last name, home address, e-mail and phone number.
Other third parties	Name, business contact details – particularly, phone no., email address and job title.

What we do with your personal data and our lawful basis
Under UK data protection law, we must be able to identify a justification (known as a lawful basis) in order to be able to use your personal data for a particular purpose. The purposes and accompanying lawful bases are as follows:

Category of individual	What we do with your data	Our lawful basis
Website user	Statistical and analytical purposes relating to understanding users’ interactions with our website. Dealing with requests received from users of our website who get in touch.	Legitimate interests – optimising performance of our website, and managing requests and queries in order to support customer experience.
Commercial customer	Manage our ongoing business relationship with you (liaison, day to day communications, meetings etc.).	Legitimate interests – managing relationship with commercial customers
Potential commercial customer	To liaise with and form relationships with you regarding your possible appointment as a commercial customer.	Legitimate interests – form relationships with potential new commercial customers
Potential end customers – who get in touch with us	To pass your details and request to a commercial customer.	Legitimate interests – to facilitate sales to end customers.
Other third parties	Liaising with you around potential referrals. Collaboration around marketing initiatives.	Legitimate interests – to manage our relationship with you.
Potential end customers, potential commercial customers, other third parties to whom we market our goods	Direct marketing	Consent

Direct marketing
We carry out direct marketing related activities (including via email and social media campaigns) using personal data of prospective end customers, potential commercial customers and other third parties. This may involve us obtaining such contact details of prospective end customers from other third parties. We only send direct marketing messages (whether by email or social media) to such individuals, where they have first provided their consent to receiving such marketing communications from us.

How long we retain your data for
We will only retain your personal data for as long as is necessary according to the purpose for which it was collected. In particular, we retain your data for the following periods (following which it will be either deleted or fully anonymised):

Website users – The browsing data will be kept only for as long as is absolutely necessary to ensure the proper operation of the website and will be immediately deleted after indexing (unless we are required by law to retain it for a longer period). For information submitted via online website forms etc., we retain such information for 12 months, unless there is any ongoing communication with you.
Commercial customers – for the duration of our agreement with you, plus 6 years thereafter (which aligns with limitation periods under English law); and
Potential end customers, potential commercial customers and other third parties – we typically retain your data for a period of 36 months (depending on the specific nature of your query/our interaction with you) following our last contact with you. This is often the timescale between someone first getting in touch with an enquiry around potentially purchasing our products, and actually having them installed.

Overseas transfers of data
We will store your personal data on the Finstral Group’s IT servers in the EU. Furthermore, as a company within a wider European group, we may from time to time, share your information with another company in the Finstral Group, including our parent company Finstral AG who are based in Italy. However, all Finstral Group companies and our IT suppliers who host data, are based within the EU, which means that we can share personal data freely with each other in compliance with UK and EU data protection law. However, your personal data will not be transferred outside of the UK / the EU.

Cookies and other tracking systems
Cookies are used on this website. To learn more about cookies, including how to disable them, please view our Cookies Policy.

Recipients of data
We will share your data with a limited number of recipients. In particular:

Our IT service providers;
Credit institutions, in particular for the processing of payments (commercial customers only);
Freight forwarders, courier services and door-to-door delivery services (foot or bicycle couriers) as well as post offices for the dispatch or receipt of goods and/or information material;
Our external advisors e.g. lawyers, accountants, tax advisors, consultants;
External marketing companies commissioned by the company to undertake marketing activities on our behalf, including by telephone and email (potential commercial customers only);
Other contacts – for instance we may share details of one commercial customer with another, or details of another third party with a commercial customer (or vice versa); and
Other entities within the Finstral Group.

Where possible, we have contracts in place with all such recipients, which ensures that suitable measures are in place to ensure that your data is protected in accordance with UK / EU data protection law.
The personal data gathered will also be processed by our personnel, subject to specific orders for the purposes and methods of processing.

Rights of data subjects
Under UK data protection law, you have certain rights over your personal data. In particular you have the following rights:

The right to access your personal information - You can request a copy of the personal information we hold about you and certain details of how we use it.
The right to rectification - We make reasonable efforts to keep your personal information where necessary up to date, complete and accurate. We encourage you to ensure that your personal information is accurate so please regularly let us know if you believe that the information we hold about you may be inaccurate or incomplete. We will correct and amend any such personal information and notify any third party recipients of necessary changes.
The right to erasure - You can request that we delete your personal information. For example, where we no longer need your personal information for the original purpose we collected it. Whilst we will assess every request, this request is subject to legal and regulatory requirements that we are required to comply with.
The right to restriction of processing - Subject to the circumstances in which you exercise this right, you can request that we stop using your personal information, such as where you believe that we no longer need to use your personal information.
The right to data portability - Subject to the circumstances in which you exercise this right, you can request that we port across personal information you have provided to us, to a third party in a commonly used and machine-readable format.
The right to object to direct marketing – You can unsubscribe from direct marketing at any time.
The right to object to processing - In certain circumstances, where we only process your personal data because we have a legitimate business need to do so, you have the right to object to our processing of your personal data.
Rights relating to automated decision-making - We do not currently carry out any automated decision-making. In the event that this changes, we will notify you and inform you about your rights relating to automated decision-making.
The right to withdraw consent. You can withdraw your consent to direct marketing at any time. You can do this by contacting Finstral at the above address.

Specific enquiries may be addressed to the above contact point.

Right of complaint
If you believe that the processing of your personal data by Finstral UK is in breach of UK data protection law, then you have the right to file a complaint with the Information Commissioner's Office.