Information on the processing of personal data Pursuant to Regulation (EU) 679/2016
Pursuant to Regulation (EU) 2016/679 (hereinafter "GDPR"), the following is a description of how the personal data of users who consult the website of Metal World s.p.a. accessible electronically at www.metalworld.it (hereinafter "the Site") are processed.
DATA CONTROLLER
The Data Controller is Metal World s.p.a. with registered office in Via A. Sello n.1 in Pavia di Udine (UD) (email: privacy@metalworld.it- PEC: amministrazione-metalworld@sicurezzapostale.it - telephone: +39 04326868).
INFORMATION ABOUT THE TYPES OF DATA PROCESSED
Browsing data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) of other parameters relating to the user's operating system and computer environment.
Purpose and legal basis of the processing
(GDPR Art.13, paragraph 1, lett. c)
This data is used to control the proper functioning of the site and to obtain statistical information (most visited pages, number of visitors per time slot or daily, geographical areas of origin, etc.). The data could also be used to ascertain responsibility in case of hypothetical computer crimes against the site (legitimate interests of the owner).
Scope of communication
(GDPR Art.13(1)(e, f))
The data are processed exclusively by internal staff, duly authorized and trained in the processing and will not be communicated to external parties, disseminated or transferred to non-EU countries. Only in case of an investigation they may be made available to the competent authorities.
Period of data retention.
(GDPR Art.13(2)(a))
Subject to the need for investigation in case of wrongdoing, data are generally retained for no more than ninety days.
Provision
(GDPR Art.13(2)(e))
Data are not conferred by the data subject but acquired automatically by the technological systems of the site.
CONTACT FORM
The optional, explicit and voluntary sending of messages to the contact addresses of Metal World s.p.a., as well as the completion and submission of the forms on the Site, entail the acquisition and processing of the sender's contact data, necessary to respond, as well as all personal data included in the communications and forms, and Site navigation statistics.
Purpose and legal basis for processing
(GDPR Art. 13(1)(c))
Contact data is requested that is processed to provide a response and/or contact the data subject
Scope of communication
(GDPR Art. 13, para. 1, lett. e,f)
Data are processed only by personnel who are duly authorized and trained in the processing (Art. 29). The data is not disseminated.
Period of data retention.
(GDPR Art. 13(2)(a))
Data are kept for the time necessary to respond to the message.
Conferment
(GDPR Art. 13(2)(e))
Failure to provide mandatory data will result in the inability to send the message.
COOKIE
For specific information you can consult the cookies policy: https://www.metalworld.it/fr/cookie-policy
SECURITY
Metal World has adopted technical and organizational measures to ensure a level of security appropriate to the risk and compliance with the regulations on the processing of personal data.
RIGHTS OF THE DATA SUBJECT
The data subject has the right to obtain from Metal World s.p.a., in the cases provided for, access to and rectification or erasure of personal data or restriction of processing concerning them or to object to processing (GDPR Art. 15 et seq.).
Where processing is based on the data subject's consent, the data subject has the right to withdraw it at any time without affecting the lawfulness of the previous processing.
Data subjects may exercise their rights by contacting the Data Protection Officer.
RIGHT TO COMPLAIN
A data subject who believes that the processing of his or her personal data carried out through this site is in violation of the provisions of the GDPR has the right to lodge a complaint with the competent supervisory authority.
