This page outlines how to manage the site with reference to the processing of personal data of users who consult the website, pursuant to Legislative Decree 196/2003 (Privacy Code) and EU Regulation 679/2016 (GDPR).
Browsing/usage data
During normal operation, the computer systems and software procedures used to operate this website acquire certain personal data, the transmission of which is implicit in the utilisation of Internet communication protocols. This information is not collected in order to be associated with identified parties, yet by its very nature could be able to identify users through processing and association with data held by third parties. This category of data includes IP addresses or domain names of computers utilised by users who connect to the website, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etcetera) and other parameters regarding the operating system and the user’s IT environment.
Data voluntarily provided by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, being necessary to respond to requests, along with any other personal data included in the message itself.
Cookies – Please refer to the specific Policy.
Personal data processed to access the website’s services
The navigation/usage data, as described in Point 1 above, is utilised for the sole purpose of obtaining anonymous statistical information on website usage and to check on its proper functioning. The data may be exploited to ascertain liability in the event of any hypothetical computer crimes against the website.
Personal data voluntarily provided by users consulting the site shall be processed for the following purposes:
Personal data provided spontaneously by users will be processed in accordance with the consent expressed during registration on the site. With regard to the technical information strictly necessary for provision of the service (navigation/usage data), such data shall be treated as necessary for the pursuit of our legitimate interest in optimising the website, as well as to improve its performance and content.
The data processing is carried out both manually and with the aid of IT and telematic means via ordinary or electronic mail. The data shall be stored both in paper and electronic format for the time strictly necessary to achieve the purposes referred to in Point 2 and in any case, following the exhaustion of such purposes.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.
Apart from that specified for navigation data, the user is free to provide the personal data requested by the various services of the site. Failure to provide such data may render it impossible to obtain that requested.
The personal data collected from the website is not subject to general dissemination. Such data may be processed, for the purposes referred to in Point 2, by those responsible for data processing and information systems, as well as by those responsible for the technical management of the website.
Privacy Legislation (Articles 7–10 of the Italian Privacy Code and Articles 12–22 of EU Regulation 679/2016) guarantees Data Subjects the right to be informed about the processing of their data and the right to access such data at any time and to request that it be updated, supplemented or rectified. If the conditions established in the legislation are met, the Data Subject may also claim the right to data erasure, to restriction of the data processing, to data portability, to object to processing and to not be subject to decisions based solely on automated processing.
If the processing of personal data is based on the Data Subject’s consent, they have the right to revoke the consent given.
In order to exercise their rights, as well as for more detailed information about the subjects or categories of subjects to whom the data is communicated or who are aware of them as managers or agents, the Data Subject may avail of the following contacts: telephone and email.
Any person who believes that their rights have been infringed may take action by lodging a complaint with the Personal Data Protection Authority.
The Data Controller is Cometal Srl, with registered office in Via F.lli Buttinoni, 4 – 24047 Treviglio (BG). The updated list of Data Processors is stored at the Data Controller’s registered office.
The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying users on this page. Please consult this page on a regular basis, taking as reference the date of the last change modification indicated at the base of the text. In the event of non-acceptance of the changes made to this Privacy Policy, the user may request the Data Controller remove their personal data. Unless otherwise specified, the previous Privacy Policy shall continue to apply to the Personal Data collected up to that time.