Pursuant to GDPR n. 679/2016
This Website Privacy Policy aims to describe the content and manner in which the Danieli C. Officine Meccaniche S.p.A. processes personal data (hereinafter the “Data”), in accordance with Art.13 of EU Regulation 679/2016 (hereinafter - for the sake of brevity - “GDPR”), for the purpose of using this website in an informed manner.
Listed below are: the Data Controller, the Data Handler, the Data Protection Officer, the type of personal Data processed, the purpose and legal basis of processing, how Data are provided and how long they are stored, compulsory Data, data recipients, transfer of Data outside the EU, authorized Data handlers, rights of Data Subjects.
DATA CONTROLLER
Danieli & c. Officine Meccaniche S.P.A.
Address: Via Nazionale n. 41, 33042 Buttrio (UD) Italy
(hereinafter Danieli)
DATA PROTECTION OFFICER (DPO)
dpo@danieli.com
TYPE OF DATA PROCESSED
When Data Subjects browse this website, the Company only collects their common data (first name, surname, country of origin, e-mail address, reference company, telephone number, requests made by the customer on the portal, log of activities done on the CRM system).
Purpose of data processing
|
Legal basis for processing
|
Providing your data
|
Data retention period
|
Data collected through WEB browsing
|
Legitimate Interests pursuant to Art. 6, par. 1, letter f of the GDPR
|
The system automatically collects the Data during browsing
|
2 years
|
Managing customer requests
|
Performance of a contract or the application of pre-contractual measures
|
Data are provided directly by you
|
No more than 10 years after the termination of the relationship with the customer
|
If necessary, to ascertain, exercise and/or defend the Controller’s rights in a court of law
|
Legitimate Interest
|
Data are provided directly by you and collected by the system automatically during the browsing
|
In the case of a legal dispute, for its entire duration until the time limit to object has lapsed
|
COMPULSORY DATA
Failure to provide your Data makes it impossible for Danieli to respond to your requests.
DATA RECIPIENTS
The Data can be processed by external individuals acting as independent controllers, such as supervisory and monitoring authorities and bodies, and subjects in general, whether public or private, who are entitled to request the Data.
The Data can also be processed on behalf of the Company by other subsidiaries or companies belonging to the Group, including Danieli, and/or by external companies designated as data handlers and who may also be the recipients of processing instructions. These subjects are basically divided into the following categories:
Danieli group companies involved in rendering services and fulfilling customer requests;
CRM SaaS Service Provider;
IT assistance;
Suppliers offering website maintenance services.
NO TRANSFER OF DATA TO COUNTRIES OUTSIDE THE EU
The Data are not transferred to countries that do not belong to the European Union. They can be transferred to Subsidiaries of the Group (i.e. Danieli Automation S.p.A and Danieli Centro Combustion S.p.A.). The transfer is occasional and necessary for the execution of pre-contractual and contractual measures of work with the interested parties and therefore admitted under art. 49.1, lett. b) of the GDPR.
AUTHORIZED DATA HANDLERS
The Data are only handled by subjects tasked with pursuing the above-mentioned purposes, who have been explicitly authorized to handle the Data and have received the necessary instructions.
RIGHTS OF THE DATA SUBJECT AND COMPLAINTS TO THE SUPERVISORY AUTHORITY
By e-mailing the DPO at dpo@danieli.com, Data Subjects may ask the Company for permission to access their Data, or to cancel, correct and add to their Data, and to limit processing in the cases specified in Art. 18 of the GDPR, and to object to processing for the Company’s legitimate interests.
Moreover, in cases where Data handling is based on consent or is done using automated tools, Data Subjects are entitled to receive the Data in a commonly used structured, readable format, and, if technically feasible, to transfer them to another data controller without impediment.
Data Subjects have the right to revoke any consent granted at any time.
Finally, Data Subjects have the right to lodge a complaint with the Supervisory Authority by following the instructions found on the site Garante Privacy.
Modified: February 2022