General informative notice on the processing of customer & supplier data

Pursuant to Articles 13 and 14 of EU Regulation 679/2016

Dear Customer/Supplier,


Pursuant to and for the purposes of Articles 13 and 14 of the EU Regulation on the Processing of Personal Data, notice is hereby given to customers and suppliers that as the Data Controller of their personal data,

F.I.L.A. – Fabbrica Italiana Lapis ed Affini S.p.A
P.IVA (VAT) 08391050963
Via XXV Aprile 5 – 20016 Pero (Mi), ITALY,

holds and processes personal data that is protected by the aforementioned Regulation.

Please note that, according to the indicated Regulation, such processing shall be based on principles of correctness, lawfulness, transparency and the protection of your privacy and your rights.

In compliance with Articles 13 and 14 of EU Regulation 679/2016, we therefore provide you with the following information.

The data you provide shall be processed for the following purposes:

– To fulfil obligations established by law and/or European Community legislation;
– To facilitate the administrative/accounting management of the company;
– To facilitate the management of activities relating to the purchase of goods and services for business purposes.
– To facilitate the sale/hire/invoicing of products and/or the provision of services through direct contact with the customer or via the internet.
– To fulfil obligations arising from agreements between the parties.
– To manage any complaints or disputes.
– To send informative material or commercial proposals, by post, fax or email.
– To facilitate participation in promotional initiatives administered by F.I.L.A., such as competitions, educational initiatives, events, etc.

The processing has a legal basis related primarily to the fulfilment of the contract between the parties, to compliance with the law and to the satisfaction of a request by the Data Subject concerned.

The processing may be carried out with manual, computer-aided and telematic methods in compliance with the principles of confidentiality and security required by law.

The provision of data is mandatory for the purposes of initiating and managing contracts, and is necessary in order to satisfy any requests of the interested party (e.g. of a technical or commercial nature). Refusal to provide such data may result in failed or partial performance of the contract, and/or failure to continue the contractual relationship.

The data may be communicated, in order to execute the contract and perform related administrative activities, to specially appointed collaborators and employees. The data may also be disclosed to third parties as part of the fulfilment of obligations established by law or by the existing contract between the parties (e.g. public entities, supervisory authorities, banking institutions, etc.). The data may also be communicated to associate and/or subsidiary companies, even outside of the European Union, always within the scope of the supply and/or existing contract. The data shall in no way be disclosed to third parties without your prior and specific consent. The personal data shall be kept for the time deemed useful for the execution of the requested service or for the management of administrative, fiscal, accounting and regulatory activities.

The Data Controller is: F.I.L.A. – Fabbrica Italiana Lapis ed Affini S.p.A. – Via XXV Aprile 5 – 20016 Pero (MI), ITALY. The Data Controller and any appointed managers may be contacted by writing to

You may exercise your rights in relation to the Data Controller at any time pursuant to Articles 15 to 20 of EU Regulation 679/2016. The Data Subject, to whom personal data refers, has the right to obtain confirmation of the existence or not of personal data concerning him/her and its communication in an intelligible form. The Data Subject also has the right to obtain indications on the origin of the data, the purposes of processing, processing methods, the Data Controller and its Representative and the parties to whom the data may be communicated. The Data Subject has the right to have the data corrected, supplemented and updated, as well as deleted or transformed into an anonymous form. The Data Subject may request the cessation at any time of processing activities related to direct marketing, commercial communications and market research.