The following document has been drawn up in compliance with the provisions defined in articles 13-14 of the 2016/679 EU Regulation.
Expandi Limited is made of a group of agencies specialized in the consulting, planning and implementation of sales and marketing programs and the delivery of SaaS marketing platforms and services for large and medium size companies in the B2B sector. You can see a full list of Expandi subsidiaries at this link: expandigroup.com/legalentities.html.
All companies in the group will be from now on referred as Expandi.
Expandi is acting as data controller, collects, processes and stores personal data provided by the data subjects, available from public sources and collected by automated mean. The following information has been drawn up to ensure the safeguard and the exercise of the rights provided by the law regarding the protection of personal data.
Information We Collect
The types of information we may obtain about you include:
The information we may collect by automated means includes:
The automated means that may be used to collect this information may include cookies, web beacons, scripts and tags. We may also use third-party website analytics tools that collect automated information about visitor traffic on our sites.
Expandi uses Google Analytics to improve our website content. You can learn how Google collects and processes data by going to the website “How Google uses data when you use our partners’ sites or apps”, located at www.google.com/policies/privacy/partners/.
The contact of the Data Protection Officer (DPO) is email@example.com
Personal data will be processed to fulfil one or more of the following purposes:
a) Provide information concerning activities carried out by Expandi and/or by associated companies.
b) Provide commercial information about Expandi’s customers, in accordance with the personal preferences granted us by telephone, e-mail and/or paper.
c) Provide information and services in accordance with your demands through a profiling process based on non-discriminatory criteria, in compliance with the provisions of the article 22 of EU 2016/679 Regulation.
Personal contact details are shared with third-party organisations only when explicit consent has been obtained from the interested party while pseudonymized details (not directly associated with a specific individual) can be shared with third-party organisations for advertising purposes.
Expandi collects in its data base, companies and decision makers public information via acquisitions from third parties and direct collection using public data sources such as the internet or other social media channels.
The data collected and stored in our system is purely related to the business-to-business sector, no individual private information or sensitive data is collected by the company nor shared with any third party. All company data is regularly checked with legal data (chamber of commerce) to verify its validity.
The objective of the treatment is to propose uniquely targeted commercial information directly related to the company direct business. The legal basis under which this treatment is act upon is the legal legitimate interest of the data controller. We strictly limit the service we deliver to our customers to the usage of professional contact details.
Expandi has taken all precautions to safeguard the data it holds. A series of security measures and policies have been put in place to minimise unlawful usage of all data and company assets.
Expandi shares data with clients only for the purposes indicated in the section above: Purpose of the personal data processing. Personal data could be communicated to Companies and Public Administrations being part of, among others, the following sectors:
a) Information & Communication Technology sectors (es. ERP, CRM, Security, Infrastructure, etc.), with an offer of technological solutions/products potentially in accordance with your demands.
b) Insurance Field (es. CyberSecurity, Professional Responsibility, etc.), with an offer of solutions potentially in accordance with your demands.
c) Transport Sectors (es. Car Fleet, Car Rental, Package delivery, etc.), with an offer of solutions potentially in accordance with your demands.
d) Professional Services (es. Audit, Legal Services, Expert Advise, etc.), with an offer of solutions potentially in accordance with your demands.
e) Business Services (es. Productivity Tools, Utilities, Security, Telecommunications, Workplace Canteen, Maintenance, etc.) with an offer of services/solutions potentially in accordance with your demands.
f) Banking & Financial Services (Foreign Exchange, Payments, Financing, Treasury management, etc) with an offer of services / solutions potentially in accordance with your demands
g) Data Management Platforms or Customer Data Platforms for Advertising purposes (after being pseudonymized) with an offer of services / solutions potentially in accordance with your demands
h) Public Authority
Expandi stores the personal data of data subjects within the borders of European Union; however personal data occasionally can be processed in non-EU Countries in accordance with Commission’s decision 2010/87/EU on 5th February 2010 (for a complete list expandigroup.com/legalentities.html).
Data subjects are informed that the personal data provided will be stored in the systems owned by Expandi until the consent is withdrawn.
Expandi, in compliance with the provisions of article 18 of EU 2016/679 Regulation, undertakes to ensure the full right to restriction of processing. Data subject is informed about the possibility to demand every time the restriction of personal data processing where one of the following conditions applies:
a) The accuracy of the personal data is contested by the data subject;
b) The lawfulness of processing is contested by the data subject;
c) The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
d) The data subject demands to exercise the right of object (article 21).
Expandi undertakes to provide the data subject prompt communications about the restriction limitation within thirty days starting from the request is received at firstname.lastname@example.org.
Data subject is informed that in compliance with the provisions of the Article 13 paragraph 2 clause e) of EU 2016/679 Regulation, Expandi will be unable to fulfil its contractual and legal obligations if the data subject decides not to consent to the following processing purposes:
1. If the data subject does not give his/her consent to point a) of the paragraph "Purpose of the Personal Data Processing", included in this statement, the purpose inherent to the provision of information related to "activities carried out by Expandi and/or its associated companies", will not be processed.
2. If the data subject does not provide his/her consent to point B) of the paragraph "Purpose of the Personal Data Processing", included in this statement, the purpose inherent to the provision of "commercial information on customers Expandi, according to the preferences granted to us by telephone or by e-mail", will not be processed.
If the data subject does not give his/her consent to point C) of the paragraph "Purpose of the Personal Data Processing", included in this statement, the purpose inherent to the provision of "information and services in line with his demands through a profiling process On the basis of non-discriminatory criteria, in compliance with the provisions of the article 22 of the EU 2016/679 Regulation", will not be processed