This is to inform you that, pursuant to Articles 12 and 13 of the EU Regulation 2016/679 concerning the “Protection of individuals with regard to the processing of personal data as well as the free circulation of such data” (hereinafter the Regulation), in the of commercial relations with Flyby S.r.l., hereinafter “Flyby”, manages a series of personal data relating to the company you represent.


 1. Identity and contact details of the Data Controller

  1. The Data Controller of your personal data is Flyby S.r.l., based in Livorno in via Aurelio Lampredi 45.


2. Contact details of the Data Protection Officer

Flyby did not deem it appropriate to designate a Data Protection Officer (c.d. DPO) as the processing of data carried out by the same does not fall within the cases of mandatory DPO designation envisaged by art. 37 of the Regulation.


3. Purpose of the processing

Personal data will be processed for the purpose of managing your business relationship (contractual management).
Furthermore, some data may be used for purposes related to company management control.
In particular, the processing of personal data may be carried out for:

fulfill contractual obligations towards the interested party

fulfill the fiscal obligations of the law

fulfill accounting obligations


4. Legal basis of the processing

The legal basis of the processing is constituted by Article 6, letter b) and c) of the Regulation
b. the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same; c. processing is necessary to fulfill a legal obligation to which the data controller is subject.


5. Processing methods

Your data will be processed by electronic and paper support, observing the rules on the protection of personal data, including those relating to data security.


6. Categories of recipients of personal data

The data you have provided may be disclosed to public and private parties relevant to the aforementioned purposes.
The communication of personal data is carried out based on the obligations provided for by the law.
Your data may also be communicated to subjects appointed by Flyby as external Data Processors for the following purposes: Administrative, accounting and tax management.
Furthermore, Flyby‘s obligation to communicate the data to the Judicial Authority remains valid, whenever a specific request is sent in this regard.


7. Data storage

Your personal data will be stored in compliance with the security measures adopted by Flyby regarding data protection, and access to them will be allowed only to the personnel involved and duly designated for the processing of the data.
Your data will be kept until the statute of limitations of rights arising from the contractual relationship.


8. Rights of the interested party

You may exercise at any time the rights provided for by Article 13, letter b) and by Articles 15, 16, 17, 18 and 20 of the Regulations by contacting the Privacy Coordinator with the contact data referred to in point 2 of this information.
In particular, as an interested party, you can request:

access to personal data concerning him, in accordance with Article 15 of the Regulation;

the correction of personal data concerning him, according to the provisions of Article 16 of the Regulation;

the cancellation of personal data concerning him (“right to oblivion”), according to the provisions of Article 17 of the Regulation;

the limitation to the processing of personal data concerning him, according to the provisions of Article 18 of the Regulation.Finally, we inform you that you can oppose the processing of your data at any time, pursuant to art. 21 of the Regulation, in the event that one of the situations referred to in Article 6, paragraph 1, letters e) and f) of the same Regulation occurs.


9. Complaint to the Control Authority

Finally, pursuant to Article 77 of the Rules, we remind you that you have the right to lodge a complaint with the Supervisory Authority (Guarantor for the Protection of Personal Data), if you believe that the processing that concerns you violates the provisions of the same Regulation.


10. Nature of processing and mandatory provision of data

Many of the data you are asked for are necessary (even in the execution of obligations deriving from legal rules) to the establishment and continuation of the business relationship. In some cases, failure to provide them may result in the failure to continue this relationship.


11. Existence of automated decision-making processes in the processing

It is specified that for the processing of the aforementioned data NO type of automated decision-making process is present, pursuant to Article 22 of the Regulation.