With this document, drawn up in accordance with Articles 13 and 14 of EU Regulation no. 679/2016 (hereinafter also "Regulation"), Fincantieri S.p.A. intends to inform users who receive its communications concerning financial information or press releases, as data subjects for the processing of personal data, as follows.


1. Data Controller for personal data processing


The data controller for users' personal data (i.e. name, surname, e-mail address, etc.) is Fincantieri S.p.A., VAT no. 00629440322, with registered office in Trieste, Via Genova 1, (hereinafter also referred to just as the "Controller"), email , tel.+39 040 3193111 fax +39 040 3192305.


The Data Protection Officer ("DPO") of Fincantieri S.p.A. can be contacted at the following e-mail address: .


2. Purpose and legal basis of the processing of personal data


The personal data of users will be processed by the Controller, with automated and/or paper-based means, solely for the following purposes and on the following legal basis:


a)      to manage communications to investors in order to carry out, by way of example, the following processing operations: (i) management of the distribution list for price-sensitive communications (financial information) to investors; (ii) management of relations and meetings with investors. Such processing is carried out on the basis of the legitimate interest of the Controller aimed at ensuring correct communication, effective management of events and enhancement of the company's image.


b)     to manage contacts and press releases for the performance of the processing needed to manage the contact list and send press releases to press offices and journalists. Such processing is carried out on the basis of the legitimate interest of the Controller aimed at ensuring correct communication, effective management of events and enhancement of the company's image.


It should also be noted that users' data will be communicated and processed within Fincantieri S.p.A. by personnel duly appointed and instructed by the Controller.


3. Source of personal data collected


We inform you that your data, in the event that you have not provided it directly to the Data Controller, has been collected from public lists or third parties. With particular reference to press releases, in order to keep the information on the composition of the editorial offices up to date, the Controller makes use of the lists provided by Medias.


4. Recipients of personal data


The personal data of users may be communicated, strictly in relation to and in line with the purposes set out above, to the following categories of subjects:

  • suppliers involved in communications management;

  • any other parties to whom it must be communicated under current legal regulations, in compliance with the requirements of the legal obligations borne by the Controller.

The contact data of the processors that perform activities in the Controller’s interest may be requested from the following email address: .


5. Transfer of personal data to a third country or an international organisation


The Controller does not intend to transfer the personal data of users to countries outside the European Union.


6. Period of retention of personal data


Your data will be kept for as long as necessary to carry out the activities indicated above.


7. Rights of the data subject


We inform you that as data subject for the processing you have the right to obtain from the Data Controller:



Right of access:

(Article 15 of the Regulation)

confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, the right to obtain, among other things, access to your personal data and information regarding the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipient to whom the personal data have been or will be disclosed.

Right to rectification:

(Article 16 of the Regulation)

(i) rectification without undue delay of inaccurate personal data concerning you and (ii) completion of your personal data, where incomplete.

Right to erasure ("right to be forgotten"):

(Article 17 of the Regulation)

erasure of personal data concerning you without undue delay (the Data Controller has the obligation to erase personal data without undue delay in the cases set out in Article 17 of the Regulation).

Right to restriction of processing:

(Article 18 of the Regulation)

restriction of processing in the cases set out in Article 18 of the Regulation.

Right to data portability:

(Article 20 of the Regulation)

receipt in a structured, commonly used and machine-readable format of personal data concerning you; the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in the cases set out in Article 20 of the Regulation.

Right to object for processing carried out under Article 6(1)(e) or (f):

(Article 21 of the Regulation)

objection, at any time, on grounds relating to your particular situation, to the processing of personal data relating to you under Article 6(1)(e) or (f), including profiling on the basis of such provisions.


At any time you will be able to exercise the above-mentioned rights by sending a request to the following e-mail address: .


Users also have the right to object to the processing at any time, as well as to lodge a complaint with the Data Protection Authority if they believe that the processing of their personal data breaches the provisions of EU Regulation no. 679/2016.


8. Nature of consent for the processing of data and consequence of failure to give consent


For the processing of personal data relating to the purposes referred to in paragraph 2 above and related to the legitimate interest of the Controller, objection to the processing of data may make it impossible to send users communications relating to financial information or press releases.