PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

This Privacy Notice explains which data are collected and how they are used, disclosed, transferred and/or stored by the company.

This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679, hereinafter the GDPR, to those who interact with the web services accessible electronically from the following address: www.meccanicabaudano.com

This notice may be updated, and any updates will be promptly published on the website.

DATA CONTROLLER

The Data Controller of the data collected through this website is Meccanica Baudano S.p.A., with registered office at Via Legnano, 26 | 10128 Turin, ITALY, VAT No. 00884440017, email: info@meccanicabaudano.com

METHODS OF PROCESSING PERSONAL DATA

Personal Data provided or acquired will be processed in accordance with the principles of fairness, lawfulness, transparency and confidentiality protection under applicable legislation.

The Data Controller processes Users’ Personal Data by adopting appropriate security measures designed to prevent unauthorised access, disclosure, alteration or destruction of Personal Data.

Processing is carried out using IT and/or electronic tools, according to organisational procedures and methods strictly related to the purposes indicated. Personal Data collected by this Website, either independently or through third parties, include: Cookies, Usage Data, Email Address and Name. Additional Personal Data collected may be specified in other sections of this Privacy Policy or through information notices displayed when the Data are collected. Personal Data may be voluntarily provided by the User or collected automatically when using this Website.

1. COMMUNICATION AND DISCLOSURE OF DATA

In addition to the Data Controller, in certain cases the following parties may have access to the Data:

1. categories of authorised personnel, specifically trained for this purpose and involved in the organisation of the Website, including administrative, sales, marketing and legal personnel and system administrators;
2. external parties, such as third-party technical service providers, hosting providers, IT companies and communication agencies, which may also be appointed as Data Processors by the Data Controller pursuant to Article 28 of the GDPR. An up-to-date list of appointed Data Processors may always be requested from the Data Controller;
3. public or private entities that may access the Data in compliance with legal obligations;
4. parties performing ancillary and instrumental tasks in relation to the Data Controller’s activities;
5. external parties, such as partners involved in organising initiatives and events promoted and/or sponsored by the Data Controller, where communication of the Data is necessary for organisational reasons;
6. subject to the Data Subject’s consent, the parties referred to in point 5(g) of this Privacy Policy.

2. DATA VOLUNTARILY PROVIDED BY THE USER

The optional, explicit and voluntary sending of emails, including through the Contact Form or to the addresses listed on this Website, results in the subsequent acquisition of the sender’s email address, which is necessary to respond to requests, as well as any other Personal Data included in the email. The User’s consent to provide Data is necessary for inclusion in the Data Controller’s databases and for establishing and properly carrying out the services offered to Users, as well as for enabling third parties to perform the individual activity requested. Failure to provide the Data may therefore prevent registration in the Data Controller’s databases, the conclusion of any contracts, their performance and any other related activity. Consequently, failure by the User to provide certain Personal Data may prevent this Website from delivering its services. The User assumes responsibility for any Personal Data relating to third parties that are published or shared through this Website and guarantees that they have the right to communicate or disclose such Data, releasing the Data Controller from any liability towards third parties.

3. PLACE OF PROCESSING

The Data are processed at the Data Controller’s operating premises. For further information, the Data Controller may be contacted.

4. RETENTION PERIOD

As expressly provided for by Article 5(1)(e) of the GDPR, Data are retained for the period necessary to process them in connection with the service requested by the User or with the purposes described in this document.

In particular:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until that contract has been fully performed;
• Data collected for purposes attributable to the Data Controller’s legitimate interest will be retained until that interest has been satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller;
• Data collected on the basis of the User’s consent may be retained until that consent is withdrawn;
• Data collected to comply with tax and administrative obligations will be retained for the period necessary to fulfil those purposes and in accordance with the law, and in any event for no longer than the period prescribed by civil law;
• Data may be retained by the Data Controller for a longer period in order to comply with legal obligations or an order issued by an authority.

The User may always request the interruption of Processing or the deletion of Data not connected with the performance of a contract.

At the end of the retention period, Personal Data will be deleted. Once that period has expired, the rights of access, erasure, rectification and data portability may no longer be exercised.

5. PURPOSES OF PROCESSING THE DATA COLLECTED

The User’s Data are collected to enable the Website to provide its services and for the following purposes: contacting the User, managing addresses and sending email messages, interacting with external platforms and carrying out statistical analysis. More specifically:

1. to fulfil any obligations contemplated and required by applicable laws, regulations and rules connected with commercial practices, particularly in relation to tax and fiscal matters;
2. to respond to specific requests submitted by the User to the Data Controller through the Website and its communication tools, including contact forms, information request forms and similar tools;
3. to send informational communications relating to the Data Controller’s services following requests for information submitted by email, through the contact form or through other communication tools;
4. for other ancillary purposes connected with those indicated above and, in any event, falling within the scope of the Website’s activities;
5. to send information and promotional or commercial offers;
6. to carry out profiling activities for marketing purposes;
7. to transfer Data to companies and/or third parties with which the Data Controller collaborates or has entered into agreements, which may use the Data Subject’s Data to send communications and/or informational material concerning events organised by them or services provided by them.

The types of Personal Data used for each purpose are specified in the relevant sections of this document.

For the purposes referred to in point a), Processing is necessary for the performance of a contract to which the Data Subject is a party, for the implementation of pre-contractual measures or to comply with a legal obligation to which the Data Controller is subject.

For the purposes referred to in points b), c) and d), Processing is optional. However, failure to provide one or more items of Data will make it impossible to respond to the request for information and to use the services offered by the Data Controller.

For the purposes referred to in points e), f) and g), Processing is based on the freely given consent of the Data Subject.

ADDITIONAL INFORMATION ON PROCESSING

LEGAL DEFENCE

The User’s Personal Data may be used by the Data Controller for legal defence in court or during the preparatory stages of possible legal proceedings arising from improper use of the Website or related services by the User. The User acknowledges that the Data Controller may be required to disclose the Data at the request of public authorities.

NATURE OF THE DATA PROCESSED AND CONSEQUENCES OF REFUSAL TO PROVIDE THEM

The provision of browsing data by Users for the purposes described above depends on the level of privacy that the User has enabled or disabled through their browser. In some cases, disabling certain settings may adversely affect navigation on this Website. For certain forms on this Website, the provision of browsing data and/or the use of technical cookies is mandatory for the Website to function correctly. The provision of certain personal data is in any event necessary due to the structure of the Website and its procedures. In particular, by way of example:

• to send messages through the contact form, the minimum data requested in that form must be provided.

Without those Data, the procedure cannot be completed.

Any request for other optional Data will instead be preceded by a specific consent checkbox. The provision of all other Data is optional, depending on the type of information that the User wishes to provide to the Website.

EXERCISE OF THE DATA SUBJECT’S RIGHTS

The Data Subject is entitled to exercise the rights provided for under Articles 7 and 15–22 of European Regulation 2016/679.

In particular, the Data Subject has the right to withdraw consent at any time and, by simply submitting a request to the Data Controller, may request access to Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without hindrance (data portability), obtain the updating, restriction of processing, rectification and erasure of Data processed in breach of applicable legislation. On legitimate grounds, the Data Subject has the right to object to the Processing of Personal Data concerning them and to Processing for the purposes of sending advertising material, direct sales and market research. The Data Subject also has the right to lodge a complaint with the Italian Data Protection Authority, as the supervisory authority for the protection of Personal Data. The Data Subject may exercise these rights by contacting the Data Controller by email at: info@meccanicabaudano.com

CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to amend this Privacy Policy at any time by informing Users on this page. Users are therefore invited to consult this page regularly, referring to the date of the latest update indicated at the bottom. If the User does not accept the amendments made to this Privacy Policy, the User must stop using this Website and may request that the Data Controller remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that time.

The Data Controller is responsible for this Privacy Policy.

Privacy Notice updated in January 2023

COOKIE POLICY

This Cookie Policy, or extended information notice concerning cookies and other tracking tools, relates to the use of Cookies by the website www.meccanicabaudano.com

The Data Controller of the Data collected through this website is Meccanica Baudano S.p.A., with registered office at Via Legnano, 26 | 10128 Turin, ITALY, VAT No. 00884440017, email: info@meccanicabaudano.com

Cookies are small text files used by websites to make the User’s browsing experience more efficient. They are sent to the User’s browser, where they are stored and subsequently reused by the same Website during the User’s next visit.

Cookies perform different functions. Some Cookies are intended to improve the functionality and navigation of this Website, known as technical or necessary Cookies. Other Cookies are used to monitor Users while they browse, record information and reveal their interests by analysing their reading habits and hobbies, in order to personalise the advertising shown to them when they open an email, browse a social network or visit other web pages. These are known as profiling Cookies. Cookies are used to personalise content, provide social media functions and analyse traffic.

Users may configure their browser privacy preferences so that Cookies are not stored, are deleted after each visit or whenever the browser is closed, or so that only Cookies from www.meccanicabaudano.com, and not third-party Cookies, are accepted.

Depending on how long Cookies remain in the browser, they are classified as follows:

• Session Cookies: temporary Cookies that remain on the device until the User leaves the Website.
• Persistent Cookies: Cookies that remain on the device for a longer period until they are deleted.

This Website uses various types of Cookies.

TECHNICAL COOKIES

Technical Cookies do not require the User’s consent. They are used solely for the purpose of transmitting a communication over an electronic communications network or to the extent strictly necessary for the provider of an information society service explicitly requested by the User. This Website uses technical Cookies to store the User’s decision regarding the use of Cookies on the Website. Technical Cookies are retained for the duration of the browsing session on the Website.

DELETING OR DISABLING COOKIES

With the exception of technical Cookies that are strictly necessary for normal browsing, the provision of Data is left to the User’s discretion. The User chooses to browse the Website after reading the brief information notice contained in the relevant banner and may use third-party services that involve the installation of Cookies. The User may therefore prevent the installation of Cookies by leaving the banner open, without closing it by clicking the “OK” button, by removing the check mark from some or all categories of Cookies used by the Website, and through the appropriate functions available in their browser.

The User may manage Cookie preferences directly within their browser and prevent third parties from installing Cookies.

Users should be aware that disabling all Cookies may impair the operation of this Website. Each browser has different procedures for managing settings.

To disable third-party Cookies, Users may also use Your Online Choices, http://www.youronlinechoices.com/it/le-tue-scelte, a web service managed by the non-profit European Interactive Digital Advertising Alliance (EDAA). The service provides information on behavioural advertising based on profiling Cookies and allows Users to easily opt out of their installation. Deleting all Cookies from the browser or removing them through services such as Your Online Choices will generally disable third-party Cookies, not only within this Website.

ADDITIONAL INFORMATION ON PROCESSING

Specific information notices

At the User’s request, in addition to the information contained in this Cookie Policy, this Website may provide additional contextual notices concerning specific services or the collection and Processing of Personal Data.

System logs and maintenance

For purposes connected with the operation and maintenance of this Website, the Website and any third-party services used by it may collect system logs. These are files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this Cookie Policy

Further information concerning the Processing of Personal Data may be requested from the Data Controller at any time using the contact details provided.

EXERCISE OF THE DATA SUBJECT’S RIGHTS

Pursuant to Articles 15–22 of European Regulation No. 679/2016, the Data Subject has the right to obtain confirmation as to whether or not Personal Data concerning them exist, even if not yet recorded, and to receive such Data in an intelligible form.

The Data Subject therefore has the right to obtain information concerning:

1. the source of the Personal Data;
2. the purposes and methods of Processing;
3. the logic applied where Processing is carried out using electronic tools;
4. the identification details of the Data Controller and the Personal Data Processors;
5. the parties or categories of parties to whom Personal Data may be disclosed or who may become aware of them in their capacity as designated representatives in the territory of the State, Data Processors or authorised personnel.

The Data Subject has the right to obtain:

1. the updating, rectification or, where they have an interest, the completion of the Data;
2. the erasure, anonymisation or blocking of Data processed unlawfully, including Data whose retention is unnecessary for the purposes for which they were collected or subsequently processed.

The Data Subject has the right to object, in whole or in part:

1. on legitimate grounds, to the Processing of Personal Data concerning them, even where relevant to the purpose of collection;
2. to the Processing of Personal Data concerning them for the purposes of sending advertising material, direct sales, market research or commercial communications.

NOTICE: The Data Controller is not responsible for keeping all links included in this Cookie Policy, which refer to third-party websites, up to date. Therefore, where a link is not working or is not up to date, Users acknowledge and accept that they must always refer to the relevant document and/or section of the website to which that link refers.