Last updated: 11 June 2026
2.1. Scope
This notice applies to the processing of personal data of customers, potential customers, suppliers, business partners and their business contacts, contact persons, employees, collaborators and representatives.
2.2. Categories of data
TFS may process identification and contact data, company data, role or position, contractual data, invoicing and payment data, tax and accounting data, bank details, data relating to orders, deliveries, installations, technical assistance, warranties, complaints, disputes and business correspondence.
As a rule, TFS does not request special categories of personal data under Article 9 GDPR. Where such data are necessary in specific cases provided for by law, they will be processed within the limits and safeguards set out by applicable law.
2.3. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Manage pre-contractual requests, offers, quotations, negotiations and expressions of interest | pre-contractual measures, Art. 6(1)(b) GDPR; legitimate interest, Art. 6(1)(f) GDPR | up to 24 months from the last contact, unless a contractual relationship follows or rights need to be protected |
| Enter into and perform contracts, orders, sales, deliveries, installations, interventions, assistance and warranties | performance of a contract, Art. 6(1)(b) GDPR | for the duration of the relationship and thereafter according to legal or limitation periods |
| Manage invoicing, accounting, payments, tax and administrative obligations | legal obligation, Art. 6(1)(c) GDPR | normally 10 years from the relevant record or from termination of the relationship, unless longer periods apply by law |
| Manage complaints, disputes, debt recovery and protection of rights | legitimate interest, Art. 6(1)(f) GDPR | for the time required to manage the dispute and according to limitation periods |
| Send technical, organisational and service communications relating to products, services or ongoing relationships | performance of a contract or legitimate interest, Art. 6(1)(b)/(f) GDPR | for the duration of the relationship and the time needed to document the activity |
| Send commercial or promotional communications not strictly necessary for the relationship | consent, Art. 6(1)(a) GDPR, unless specific cases are allowed by applicable law | until withdrawal and, normally, no longer than 24 months from the last relevant interaction or consent confirmation |
| Carry out commercial profiling | separate consent, Art. 6(1)(a) GDPR | normally up to 12 months |
2.4. Mandatory or optional provision of data
Providing data necessary for pre-contractual, contractual, administrative and tax purposes is necessary. Without such data, TFS may be unable to start or continue the relationship. Providing data for promotional or profiling purposes is optional and refusal does not affect the supply of products or services.
2.5. Recipients and transfers
Personal data may be processed by authorised TFS staff and communicated, where necessary, to advisers, banks, credit institutions, insurance companies, carriers, freight forwarders, installers, maintenance providers, IT providers, hosting providers, technical support companies, debt collection companies, lawyers, accountants, auditors, public administrations and competent authorities.
Data are processed mainly in the European Economic Area. Any transfers to third countries are carried out on the basis of adequacy decisions or appropriate safeguards, including Standard Contractual Clauses where applicable.
2.6. Rights
Data subjects may exercise their rights under Articles 15-22 GDPR by writing to a.amodio@tfs.it or to the registered office of TFS. The right to lodge a complaint with the Italian Data Protection Authority remains unaffected.