skip to Main Content

Pursuant to Legislative Decree n. 196/2003 and of the EU Regulation n. 679/2016 (GDPR) and in relation to the personal data concerning you and which will be the object of processing, we inform you of the following points.


“Data” means those relating to natural persons treated by Serrande Filippi S.r.l. for the stipulation and execution of the contractual relationship with its customers / suppliers, such as for example those directly referable to the customer / supplier natural person, or of the legal representative of the customer / supplier legal person, of the employees / consultants of the same involved in the activities of which to the contract, as well as any other information necessary for the execution of the contract and / or the provision of the service (s). In particular, these Data will be processed for the purposes indicated below.

  1. Management of the contractual / commercial relationship, such as: satisfying specific requests of the customer / supplier before the conclusion of the contract; conclusion, modification, execution of the contract; provision and management of related services; claims management.

The legal bases of the processing in relation to the aforementioned purposes are:

– The fulfillment of contractual obligations and / or execution of pre-contractual measures adopted at the request of the interested party, for contracts entered into directly with the person concerned;

– The legitimate interest (to manage and execute the contract) for the processing of the data of the employees / consultants of the supplier / client involved in the activities referred to in the contract.

  1. Administrative – accounting, such as: invoicing; management of payments, delays and missed payments; internal organizational, administrative, financial and accounting purposes functional to the aforementioned activities.

The legal bases of the processing in relation to the aforementioned purposes are:

– The need to fulfill the legal obligation to keep accounting records;

– The legitimate interest in the administrative management of the contractual relationship.

  1. Fulfillment of legal obligations provided for by national or European Union law or by collective agreements in accordance with national law, such as: fulfillment of obligations established by EU and national laws, in particular in the field of occupational health and safety, and crime prevention (anti-mafia, anti-corruption legislation, Legislative Decree 231/2001). The legal basis of the processing is the need to fulfill a legal obligation to which the data controller is subject.
  2. Exercise and / or defense of judicial rights and debt recovery, such as: management of any legal disputes, credit protection and recovery, directly or through third parties (lawyers / agencies / credit recovery companies).

The legal basis of the treatment is legitimate interest.


The data will be processed for the duration of the contractual relationship and, after its termination, until the end of the limitation period for the reciprocally arising rights between the parties. In the case of litigation, for the entire duration of the same, and until the final decision is passed.


The processing of personal data may be carried out with the aid of both analogical and electronic or in any case automated means, with methods and procedures strictly necessary to achieve the purposes described above.


The Data may be communicated to external subjects acting as autonomous data controllers, as public or private subjects entitled to process the Data (eg public administrations, banks and credit institutions, accountants, notaries, lawyers and other professionals).The Data may be processed, on behalf of the data controller, by external subjects designated as data processors, who carry out on behalf of the data controller specific activities, for example, its distribution network, companies and agents who perform the activity of debt collection for the owner, legal, tax and administrative consultants. The Data may be processed by the employees of the company departments appointed to pursue the aforementioned purposes, which have been expressly authorized for processing and which have received adequate operating instructions.The Data are not subject to disclosure.


Any refusal by the interested party to provide personal data may make it impossible (partial or total) to fulfill legal obligations, or to stipulate or properly execute the contract or service. In this case, without prejudice to the right of the data subject to refrain from providing his or her data, the Data Controller reserves the right to suspend, interrupt or not establish the contractual relationship.


The data controller is Serrande Filippi S.r.l., C.F. BG 03026840169 and P.IVA 03026840169, with registered office in Calcinate (BG), 24050 – Via Enrico Mattei, 18, contacts +39 035/842333. The data controller may process the data directly, through his own authorized employees, or by making use of external collaborators, who in this case assume the status of Data Processors. The updated list of Data Processors is made available by the Data Controller upon request.  


The legislation on the protection of personal data (articles 12-22 of EU Regulation 679/2016) guarantees the interested party the right to be informed about data processing and the right to access the data at any time and to request the update , integration and rectification. If the conditions provided for by the law exist, the interested party can also claim the right to delete the Data, limit their processing, the portability of the Data, to oppose the processing, not to be subjected to decisions based solely on automated processing. If the processing of personal data is based on the consent of the person concerned, he has the right to revoke the consent given. For the exercise of their rights, as well as for more detailed information about data processing, the interested party may contact Serrande Filippi S.r.l. by writing to the e-mail address: If the interested party considers his / her rights violated, he / she can protect himself / herself by proposing a claim before the Guarantor for the protection of personal data.


The customer / supplier is informed that, if he uses his own employees or collaborators (including any subcontractors) in executing the contractual relationship, the personal data of the latter may be processed by Serrande Filippi Srl, always in the capacity of data controller , for the purposes referred to in point 1. These processing operations have the same purposes, methods and times for storing the data described in this statement; in relation to these treatments, moreover, the interested parties have the same rights identified in point 7. The customer / supplier has the duty to correctly inform its employees and collaborators about the aforementioned treatments, including by delivering them to this information.

Back To Top