Privacy Policy

1. Introduction

SAFIN S.P.A. ("we", "us", "our") is committed to protecting the privacy and personal data of visitors to our website and clients who use our services. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Italian data protection legislation.

By accessing this website or providing information through our contact forms, you acknowledge the practices described in this policy. This policy applies solely to the website safinspa.org and does not cover practices on other websites that may be linked from our pages.

2. Data Controller

SAFIN S.P.A., with registered office at Via Nazionale Appia Snc, 81040, Curti (CE), Italy, acts as the data controller for the purposes of processing personal data collected through this website. For any privacy-related inquiries, you may contact us at support@safinspa.org.

3. Data We Collect

3.1 Data You Provide

When you use our contact form or communicate with us by email or phone, we may collect:

• Your name and surname
• Your email address and telephone number
• The content of your message or inquiry
• Your region or location, if voluntarily provided

3.2 Data Collected Automatically

When you visit our website, we may automatically collect certain technical data, including:

• IP address and browser type
• Pages visited and duration of visit
• Referring website and approximate geographic location
• Cookie identifiers (see our Cookie Notice for details)

4. Purposes of Processing

We process personal data for the following purposes:

• Responding to inquiries submitted through the contact form or by email
• Providing information about our services when requested
• Complying with legal and regulatory obligations, including anti-money laundering requirements
• Maintaining website security and preventing misuse
• Analyzing website usage to improve user experience

5. Legal Basis for Processing

Our processing of personal data is based on the following legal grounds under the GDPR:

• Consent: When you voluntarily submit information through our contact form
• Legitimate interest: For website security, analytics, and responding to inquiries
• Legal obligation: When processing is required by law or regulation
• Contract performance: When processing is necessary for the provision of services under a signed agreement

6. Data Retention

Personal data collected through this website is retained only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Inquiries submitted through the contact form are typically retained for up to 24 months after resolution. Data related to active loan agreements is retained for the duration of the agreement plus the period required by applicable regulations.

7. Data Sharing

We do not sell personal data to third parties. We may share data with the following categories of recipients when necessary:

• Regulatory and supervisory authorities, when required by law
• Professional advisors, including legal and accounting firms, under confidentiality obligations
• Technology service providers that support our website operations, acting as data processors

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you
• Right to rectification: You may request correction of inaccurate or incomplete data
• Right to erasure: You may request deletion of your data, subject to legal exceptions
• Right to restriction: You may request that we limit processing of your data in certain circumstances
• Right to data portability: You may receive your data in a structured, machine-readable format
• Right to object: You may object to processing based on legitimate interests
• Right to withdraw consent: You may withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at support@safinspa.org. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include access controls, encryption where applicable, and regular review of our security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Personal data is primarily processed within the European Union. Where any data is processed by service providers located outside the EU, appropriate safeguards such as Standard Contractual Clauses are in place to ensure an adequate level of protection.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational considerations. The date of the latest revision is indicated at the top of this page. We encourage you to review this policy periodically.

12. Contact

For any questions or requests regarding this Privacy Policy or the processing of your personal data, please contact us: