Information - Personal Data Processing

The following document has been drawn up in compliance with the provisions defined in articles 13-14 of the 2016/679 EU Regulation.

Expandi Limited is made of a group of agencies specialized in the consulting, planning and implementation of marketing activities for large and medium size companies in the B2B sector.

Expandi LTD, acting as data controller, collects, processes and stores personal data provided by the data subjects. The following information has been drawn up to ensure the safeguard and the exercise of the rights provided by the law regarding the protection of personal data.

EXPANDI LTD is the data controller.

In order to verify the name of all companies owned by Expandi LTD, data subjects can reach the following link: expandigroup.com/thegroup.html


Data Protection Officer

The contact of the Data Protection Officer (DPO) is dpo@expandigroup.com

Pourpose of the personal data processing

Personal data provided by you will be processed to fulfill one or more of the following purposes:

  • a) Provide information concerning activities carried out by Expandi LTD and/or by associated companies.
  • b) Provide commercial information about customers Expandi Ltd, in according to the personal preferences granted us by telephone, e-mail and/or paper.
  • c) Provide information and services in accordance with your demands through a profiilng process based on non-discriminatory criteria, in compliance with the provisions of the article 22 of EU 2016/679 Regulation.
Data processing Recipients

Personal data provided by you could be communicated to Companies and Public Administrations being part of, among others, the following sectors:

  • a) Information & Communication Technology sectors (es. ERP, CRM, Security, Infrastructure, etc.), with an offer of technological solutions/products potentially in accordance with your demands.
  • b) Insurance Field (es. CyberSecurity, Professional Responsibility, etc.), with an offer of solutions potentially in accordance with your demands.
  • c) Transport Sectors (es. Car Fleet, Car Rental, etc.), with an offer of solutions potentially in accordance with your demands.
  • d) Professional Services (es. Audit, Legal Services, Expert Advide, etc.), with an offer of solutions potentially in accordance with your demands.
  • e) Services and Solutions Facility Management Sectors (es. produttività d'ufficio, Utilities, Security, Telecommunications, Workplace Canteen, Maintenance, etc.) with an offer of services/solutions potentially in accordance with your demands.
  • f) Public Authority
Data storage location

Expandi Ltd stores the personal data of data subjects within the borders of European Union; however personal data occasionally can be processed in non-EU Countries in accordance with with Commission’s decision 2010/87/EU on 5th February 2010 (for a complete list expandigroup.com/legalentities.html).

Data retention

Starting from when consent is given, data subjects are informed that the personal data provided will be stored in the systems owned by Expandi LTD until the consent is withdrawn.

Data subject’s rights
  1. How data subject’s rights are exercised
  2. Data subjects are informed, in compliance with the provisions of article 13 paragraph 2 of EU 2016/679 Regulation, on the modalities with which they will be able to exercise their rights.

    Data subjects are informed that Expandi Ltd, in compliance with the provisions of article 12 paragraph 3 of EU Regulation 2016/679, has:

    • a) Up to 1 month from the time the request is forwarded by the data subject, to respond to the exercise of the rights listed below.
    • b) This term, depending on the number of requests, may be extended by two months.

    Expandi LTD undertakes to promptly notify the data subject about the failure to comply the temporal terms established in a).

  3. Access to personal data
  4. Expandi LTD, in compliance with the provisions of article 15 of EU 2016/679 Regulation, undertakes to ensure the full exercise of right of access, unless this jeopardize a legitimate interest or fundamental rights of other data subjects. Data subjects can exercises the right of access to their own personal data by sending an e-mail to: dpo@expandigroup.com.

  5. Right of rectification
  6. Expandi LTD, in compliance with the provisions of article 16 of EU 2016/679 Regulation, undertakes to ensure the full exercise of the right of rectification of personal data from the data subject. Data subject is informed that he/she may demands the rectification of his/her own personal data by sending an e-mail to: dpo@expandigroup.com, in order to verify the type of personal data in our possession and, therefore, to demand the rectification.

  7. Right of erasure (right to be forgotten)
  8. Expandi LTD, in compliance with the provisions of article 17 of EU 2016/679 Regulation, undertakes to ensure the full exercise of the right of erasure of personal data, unless this jeopardize data controller’s legitimate interest or other data subject’s fundamental rights. Data subject is informed that he/she may exercises that right by sending an e-mail to: dpo@expandigroup.com.

  9. Right to restriction of processing
  10. Expandi LTD, in compliance with the provisions of article 18 of EU 2016/679 Regulation, undertakes to ensure the full right to restriction of processing. Data subject is informed about the possibility to demand everytime the restriction of personal data processing where one of the following conditions applies:

    • a) The accuracy of the personal data is contested by the data subject;
    • b) The lawfulness of processing is contested by the data subject;
    • c) The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
    • d) The data subject demands to exercise the right of object (article 21).

    Expandi LTD undertakes to provide the data subject prompt communications about the restriction limitation within thirty days starting from the request is received at: dpo@expandigroup.com.

  11. Right to data portability
  12. Expandi LTD, in compliance with the provisions of the article 20 of EU 2016/679 Regulation, undertakes to ensure the data subject the full right to data portability. Data subject is informed that he/she may demands the exercise of the right to data portability by sending an e-mail to: dpo@expandigroup.com (data sharing standard model in modality .csv)

  13. Right to object
  14. Expandi LTD, in compliance with the provisions of article 21 of EU 2016/679 Regulation, undertakes to ensure the exercise of the right to object from the data subject.

    Data subject is informed, where personal data are processed for “marketing campaign”, about the possibility to exercise that right directly from the specific form “opt-out” provided inside marketing communications.

    Data subjects are informed that they may exercise the right to object, except what stated above, by sending an e-mail to: dpo@expandigroup.com.

  15. Complaint
  16. Data subjects are informed that, in compliance with art. 13 par. 2 D of EU Regulation 2016/679, in case they recognize serious non-fulfillments or the failure to comply with one of the rights set out in this statement by Expandi Ltd, may present a formal complaint to the national privacy guarantor.

  17. Consent Withdrawal
  18. The data subject is informed about the possibility to withdraw his/her consent for the processing at any time. The data subject can withdraw the consent through the following methods:

    • a) Verbal communication in case of telephone contact (confirmed by sending electronic communication to the e-mail address provided by you).
    • b) By sending an e-mail to: dpo@expandigroup.com.

    In compliance with the provisions of article 13 paragraph 2 clause C of the EU 2016/679 Regulation, the data subject, which decides to withdraw the consent, is informed that such action will not affect the lawfulness of the processing carried out before the revocation of the same.

    After completing this communication, the data processing for that specific purpose, for which the consent has been withdrawn, can be said, according to the cases, terminated.

    Data subjects are informed that the withdrawal of the consent could affect in whole or in part the services provided to themselves.

Missed Consent

Data subject is informed that, in compliance with the provisions of the Article 13 paragraph 2 clause e) of EU 2016/679 Regulation, Expandi LTD will be unable to fulfill its contractual and legal obligations if the data subject decides not to consent to the following processing purposes:

  • a) If the data subject does not give his/her consent to point a) of the paragraph "Purpose of the Personal Data Processing", included in this statement, the purpose inherent to the provision of information related to "activities carried out by Expandi LTD and/or its associated companies", will not be processed.
  • b) If the data subject does not provide his/her consent to point B) of the paragraph "Purpose of the Personal Data Processing", included in this statement, the purpose inherent to the provision of "commercial information on customers Expandi LTD, according to the preferences granted to us by telephone or by e-mail", will not be processed.
  • c) If the data subject does not give his/her consent to point C) of the paragraph "Purpose of the Personal Data Processing", included in this statement, the purpose inherent to the provision of "information and services in line with his demands through a profiling process On the basis of non-discriminatory criteria, in compliance with the provisions of the article 22 of the EU 2016/679 Regulation", will not be processed.

You can review the Expandi Limited full data protection policy here.