Privacy policy

PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 (“GDPR”)
The Data Controller, in accordance with Legislative Decree 196/2003 (hereinafter the “Privacy Code”) as amended by Legislative Decree No. 101 of 10 August 2018, and Regulation (EU) 2016/679 (hereinafter the “GDPR”), intends to guarantee the privacy and security of the personal data of each visitor consistently with the provisions set forth in this Privacy Notice. This Privacy Notice is to be understood as information provided pursuant to Article 13 of the Privacy Code and Articles 13 and 14 of the GDPR.

DATA CONTROLLER
The Data Controller is ALUVETRO S.R.L., with registered office at Via Lombardia, 4/6 – 25034 Orzinuovi (BS) and operational headquarters at Via Lombardia 10/12/14 – 25034 Orzinuovi (BS), represented by its legal representative pro tempore. Email: [email protected] PEC: [email protected] Telefono: +39 030 9946653

TYPES OF DATA PROCESSED
The website offers informational and, at times, interactive content. While browsing the website, the Data Controller may therefore collect information relating to the visitor in the following ways:

Browsing Data
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes: IP addresses, the type of browser used, credentials for access to restricted areas, the operating system, the domain name and addresses of websites from which access was made, information regarding pages visited by users within the website, access time, time spent on each page, internal navigation path analysis, and other parameters relating to the user’s operating system and IT environment.

Additional Categories of Data
These include all personal data provided by the visitor through the website, for example by submitting a request through the contact form, activating the newsletter service, registering and/or accessing a restricted area and/or a service and/or participating in one of the initiatives of the Data Controller, writing to an email address of the Data Controller to request information, or calling one of our direct customer service contacts.

PURPOSES OF PROCESSING
The Data Controller informs you that the personal data you provide may be processed directly or through duly authorized third parties, both for the purpose of fulfilling any contractual obligations and providing the requested services. In particular, your personal data will be processed solely for the purposes related to the service in question:

PURPOSE	LEGAL BASIS	MANDATORY OR OPTIONAL NATURE
To provide the information and/or service requested by the user, manage the contracts entered into by the user, fulfill the related administrative, accounting, tax, and legal obligations, and process the user’s requests.	Processing carried out for these purposes is necessary for the performance of contractual obligations and does not require the data subject’s specific consent.	The data is essential for establishing the contractual relationship (including the pre-contractual phase) and/or for its performance. Failure to provide the data, or providing incomplete or inaccurate data, may result in the inability to deliver the requested services.
To monitor your experience when using our platforms and services, and to ensure the proper functioning of our web pages and their content.	Processing carried out for these purposes is based on the Controller’s legitimate interest.
To send you communications regarding promotions and/or information about benefits or services that may be of interest to you, in the legitimate interest of the Data Controller.	Processing carried out for these purposes is based on the user’s specific consent, except for communications relating to information and/or services similar to those already subscribed to by the user (“soft spam”), for which the processing is based on the Controller’s legitimate interest.	The provision of data for these purposes is not mandatory and is based on the data subject’s consent. Data processed for soft spam purposes is required in order to provide the requested service.

PROCESSING METHODS
The processing of personal data is carried out mainly using electronic procedures and media for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the principles of lawfulness, fairness, non-excessiveness and relevance provided for by the applicable privacy legislation. The data are processed exclusively by persons specifically appointed by the Data Controller or by third parties related to the managed website/project/service. Personal data are stored securely within the physical, virtual and cloud technological infrastructure managed by the Data Controller or by qualified and accredited suppliers and partners.

REDIRECT TO EXTERNAL WEBSITES
This website may contain links to other websites, including third-party websites.

The Data Controller declines any responsibility regarding any request for and/or disclosure of personal data to third-party websites and with regard to the management of authentication credentials provided by third parties. We cannot guarantee that these third parties will manage your personal data in a reliable and secure manner. We recommend that you read the privacy statements of these websites before using them.

The Controller maintains social media profiles on social networks such as Facebook and Instagram. The website may use so-called social plug-ins. Social plug-ins are special tools that allow social network functionalities to be incorporated directly into the website (for example, Facebook’s “Like” function).

All social plug-ins present on the website are identified by the respective logo owned by the social networking platform (for example, Facebook, LinkedIn).

When you visit a page of our website and interact with the plug-in (for example, by clicking the “Like” button) or decide to leave a comment, the corresponding information is transmitted by the browser directly to the social networking platform and stored by it.

For information regarding the purposes, type and methods of collection, processing, use and storage of personal data by the social networking platform, as well as the methods through which you may exercise your rights, please consult the privacy policy adopted by the individual social network.

DATA TRANSFER
The data may be processed on behalf of the Data Controller by professionals and/or companies appointed to carry out technical, management, development, administrative, accounting, tax, legal and similar activities.

The Controller also reserves the right to make use of servers, cloud services and other IT tools for the storage and management of personal data owned or managed by third parties, ensuring that service providers will be selected from among those providing adequate guarantees, as provided for by Article 46 of Regulation (EU) 2016/679 “General Data Protection Regulation”.

For all the purposes indicated in this notice, the Data Subject’s common personal data may be communicated to all companies belonging to the group, subsidiaries, affiliated companies, etc., in compliance with the rights and guarantees provided by current legislation.

DATA RETENTION
We inform you that personal data collected through the website, where recorded, will be retained by the Controller only for the period necessary for their use.

We further inform you that the data provided by you will be processed for the entire duration of the informational/contractual relationship between us in order to complete the requested service and will subsequently be retained exclusively for the period required to comply with legal obligations and for a maximum of 10 years following the termination of the contractual relationship, unless it is necessary to retain them for a longer period in order to defend or assert a right or to comply with additional legal obligations or orders from Authorities.

In any case, the personal data collected are retained until the user requests and/or expressly expresses the intention to unsubscribe from the service and/or withdraw consent.

RIGHTS OF THE DATA SUBJECT
At any time, the Data Subject may exercise, pursuant to Legislative Decree 196/2003 and Articles 15 to 22 of Regulation (EU) 2016/679, the right to:

Access their data
The Data Subject may at any time request and obtain from the Data Controller information regarding the personal data being processed (including confirmation as to whether personal data concerning him or her are being processed), and also has the right to access such data pursuant to Article 15 of Regulation (EU) 2016/679 and obtain a copy thereof, provided that the rights and freedoms of others are not adversely affected.

Verify and rectify their data
The Data Subject has the right to verify the accuracy of their data and to obtain, without undue delay, the updating, correction and completion of inaccurate personal data concerning them, pursuant to Article 16 of Regulation (EU) 2016/679.

Obtain erasure (Right to be Forgotten)
Where the conditions set out in Article 17 of Regulation (EU) 2016/679 apply, the Data Subject may request the erasure of their data by the Controller.

Obtain restriction of processing
Where the conditions set out in Article 18 of Regulation (EU) 2016/679 apply, the Data Subject may request restriction of processing. In such case, the Controller may not process the data for any purpose other than storage or for “the establishment, exercise or defence of legal claims” or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Obtain data portability
The Data Subject has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to request and obtain, without hindrance, their transfer to another Controller.

Object to the processing of data
Where personal data are processed for “the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller” or where “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child”, the Data Subject may object to the processing on grounds relating to their particular situation.

The Data Subject may also object at any time to processing for direct marketing purposes, without the need to provide specific reasons.

Lodge a complaint
If the Data Subject believes that the processing of their personal data is carried out in violation of Regulation (EU) 2016/679, they “have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement”.

Object to automated decision-making
The Data Subject may object to the fully automated processing of their personal data, including profiling, unless such processing is necessary for the conclusion and/or performance of a contract, is required by applicable legislation or is carried out on the basis of the explicit consent of the Data Subject, who may withdraw such consent at any time.

Withdraw consent at any time
The Data Subject may withdraw consent to data processing at any time. Withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.

The Data Subject may exercise their rights by writing to the Data Controller at the contact details indicated above, specifying the subject of the request, the right they intend to exercise and attaching a copy of an identity document proving the legitimacy of the request.

CHANGES TO THIS PRIVACY NOTICE
The Data Controller reserves the right to modify or simply update its content, in whole or in part, including as a result of changes to applicable legislation. Therefore, this document may be amended over time. We therefore invite you to consult this page periodically. Where the changes are significant, the Data Controller will inform you of such changes through a more visible notification.

CONTACTS
To read the Cookie Policy click here
To contact the Data Controller: use the dedicated contact form or the following contact details:

ALUVETRO S.R.L.
Via Lombardia 10 – 25034 Orzinuovi (BS) – Italy
+39 030 94 44 433
[email protected]
[email protected]