Privacy Policy

It should be noted that this website is mostly a "static website", which aims to present the company and its products to users of the site.

With this Privacy Policy CRIF intends to describe the methods adopted in the management of this website with reference to the processing its users' personal data.

This is a general notice, issued to all those who consult the website, in compliance with the provisions of the General Data Protection EU Regulation 679/2016 (GDPR) and all applicable laws.

When using certain services, users will be provided with specific and detailed privacy notice in accordance to articles 13 and/or 14 of GDPR and requested specific consent for their personal data to be processed, if necessary.

The Data Controller

Following access and consultation of this site, data relative to identified or identifiable persons may be processed. The data controller is CRIF SpA, with registered offices in Via M. Fantin 1-3, 40131 Bologna

Data Processing Location

The data collected from those who access the site will be processed at the CRIF SpA offices, in the manner set out by the Garante per la protezione dei dati personali (the Italian Authority which deals with the protection of personal data) and in compliance with GDPR provisions and all applicable laws. The data shall be handled by persons with relative adequate technical skills; employees or associates, who have been specifically trained and assigned data processing roles.

Processing Methods

The data shall be processed in a lawful, correct fashion, so as to ensure data security and confidentiality, as foresees by GDPR provisions and all applicable laws. Personal data shall be processed using electronic, or at any rate, computerized devices.

Purposes of processing

The data shall be processed for the purposes time to time needed on the base of the service asked by CRIF’s customer. For each service asked by CRIF’s customer CRIF will provide a specific privacy notice with a detail of the applicable purposes of processing.

Ground of processing

The data shall be processed on the base of different ground of processing, in accordance with the type of service provided by CRIF. For each service asked by CRIF’s customer CRIF will provide a specific privacy notice with a detail of the applicable ground of processing.

Recipients of the personal data

The data could be communicated to different kind of recipients, in accordance with the type of service provided by CRIF. For each service asked by CRIF’s customer CRIF will provide a specific privacy notice with a detail of the recipients of the personal data.

Data transfer

Generally, the data provided by CRIF’s customer will not be transferred outside the European Union. However, it is possible that this transfer takes place in accordance with the type of service provided by CRIF. For each service asked by CRIF’s customer CRIF will provide a specific privacy notice with a detail of the Countries where the data are transferred. However, when personal data will be transfer outside the European Union, the transfer will be put in place in accordance with previsions of GDPR and all applicable laws (as specified in each privacy notice).