INFORMATION AND CONSENT ON THE PROCESSING OF PERSONAL DATA
Stakeholders: Customers and visitors to this corporate website
METALFILMS Srl - based in Via S.Pietro in Campo, 55051 Barga (LU), VAT 00973240468 Tel: 0583 711051, Fax: 0583 711053, info@metalfilms.it - as Data controller of your personal data, pursuant to and for the purposes of Legislative Decree 196/03 ('Personal Data Protection Code'), Regulation (EU) 2016/679 (also GDPR) and Legislative Decree 101/18, hereby informs you that the aforementioned legislation provides for the protection of persons and other subjects with respect to the processing of personal data and that such processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Your personal data will be processed in accordance with the legislative provisions of the above-mentioned legislation and the confidentiality obligations stipulated therein. The sites referred to are as follows:
Site security measures: Specific security measures have been taken to manage the site, aimed at ensuring secure user access and protecting the information contained on the same site from the risk of loss or destruction, even accidental.
For access to the restricted part of the site, an identification code and a password are assigned to companies that request them; these passwords are generated in such a way that they do not contain references that can be easily traced back to the member, in order to avoid possible abuse. Users are required to keep their passwords confidential.
Changes to this Privacy Policy: The owner reserves the right to make changes to this Privacy Policy at any time by publicizing them to Users on this page and ensuring in any case a similar protection of Personal Data. Therefore, please consult this page often, taking as reference the date of last modification indicated at the bottom.
Legal references: this privacy policy is prepared in fulfillment of the obligations set forth in Regulation (EU) 2016/679, Art. 10 of Directive No. 95/46/EC, as well as the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies.
Purpose of processing: in particular, your data will be processed for purposes described in the following paragraphs; if related to legislative or contractual obligations, it will be sufficient to read this policy, but if related to other purposes, the provision of data will be optional for you, and any refusal to process it will not compromise the continuation of the relationship or the appropriateness of the processing itself.
In general, the User's data are collected to enable the Owner to provide its services, as well as for the following purposes: contacting the user, sending email messages, interaction with social networks, Statistics purposes and displaying content from external platforms.
The types of Personal Data used for each purpose are indicated in the specific sections of this document. The Personal Data collected through this site refer to:
- Browsing and usage data, cookies
- Data voluntarily provided by the user
The Personal Data collected may refer either to the User or to third parties whose data the User provides.
The User assumes responsibility for the Personal Data of third parties published or shared through the site and warrants that he or she has the right to communicate or disseminate them, releasing the Data Controller from any liability to third parties.
For the purposes of the following processing operations, the Data Controller may become aware of data defined as special, i.e., sensitive or judicial within the meaning of the Privacy Code, when necessary for the purposes specified below, and in particular:
- Email address and other contact information,
- Name and other biographical data,
- Other data voluntarily disclosed by you (e.g., through delivery of CVs).
Your sensitive data subject to processing are only those that are strictly pertinent to the obligations, tasks or purposes described above and will be processed in accordance with the indications contained in the relevant General Authorizations of the Guarantor.
1. Navigation data.
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Cookie
Like virtually all websites, ours also uses some cookies. Cookies are small text files that the sites you visit (but also other sites or webservers) send and record on your computer (or mobile device), to be then vice versa re-transmitted to the same sites (or webservers), the next time you visit those, thus sending information.
Cookies are now essential tools as they enable modern sites to function at their best, allowing for maximum personalization, interaction and smooth navigation. But they can also be used to track user browsing and then send advertising messages in line with those.
Cookies can be:
- session (if they expire when the browser is closed) or permanent (they remain until a term, even years, has passed);
- first-party or third-party (in the latter case they are set up by a site or webserver other than the one the user is currently visiting);
- technical (necessary, sometimes indispensable, for a complete - or better - fruition of the site) or profiling (aimed at creating a profile of the user, in order to then send him or her advertising messages in line with the preferences expressed by the same during previous navigation).
The Privacy Guarantor considers session cookies, functionality cookies and - only under certain conditions - analytics cookies to be technical cookies; in particular, the Guarantor, in its May 8, 2014 order, specified that the latter can be assimilated to technical cookies only if they are used for site optimization purposes directly by the site owner, who may collect information in aggregate form on the number of users and how they visit the site.
More information on the types of cookies, their characteristics and operation can be found at http://www.allaboutcookies.org, www.youronlinechoices.com, http://cookiepedia.co.uk and the specific Garante Provvedimento mentioned above.
On our site there are cookies indicated and analyzed on the appropriate Cookie Policy page.
2. Data voluntarily provided by the user.
Sending e-mails to the addresses given on the website
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender's address, which is necessary to respond to requests as well as any other personal data included in the message.
Filling out the data collection form (for information request or collaborations)
The website on the pages "CONTACTS" and "WORK WITH US", allows interested parties to send their CV and/or request information by entering some personal data (such as first and last name, e-mail address, etc.). These data will be processed, manually and also through the use of computer tools by the company staff, specially appointed, exclusively to respond to the user. The personal data introduced in the Form are divided into two categories: compulsory and optional, as reflected in the information request procedure. The provision of compulsory data and its processing for the purposes indicated above are strictly functional to the execution of what has been requested. The other data collected serve to help the Data Controller to offer an increasingly better service and will be kept for as long as strictly necessary. We specify that at any time you may exercise, by directly contacting the Data Controller, the rights explained in the appropriate section called "RIGHTS OF INTERESTED PARTIES".
Method of treatment: Processing is carried out by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. In particular, the processing is carried out by:
- Information technology tools, with organizational methods closely related to the purposes stated above;
- Outsourcing of processing operations to third parties.
All processing is carried out in accordance with the methods set out in Chapter II of Regulation (EU) 2016/679 and Articles 11, 31 et seq. of Legislative Decree 196/03.
Communication: Your data will be stored at our office and will be communicated exclusively to the competent parties for the performance of the services necessary for the proper management of the relationship, with guaranteed protection of the rights of the person concerned.
Your data will be processed only by personnel expressly authorized by the Data Controller and, in particular, by the following categories of appointees:
- Sales and marketing;
- Administration and human resources;
- Other personnel authorized by the Data Controller.
In addition to the owner and internal staff, in some cases, external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data. Your Data may be disclosed to third parties, in particular to:
- Constitutional or constitutionally important bodies;
- Consultants and freelancers, including in associate form;
- Anyone who is a legitimate recipient of communications required by law or regulation.
Diffusion: data, without prejudice to the absolute prohibition of the dissemination of data likely to reveal health status, may be disseminated, in the manner described above, at:
- The pages indicated in the preceding paragraph, solely relating to user presentation photographs, for which explicit consent has been requested.
Conservation: Processing related to the web services of this site takes place at the company's headquarters and is handled by technical personnel in charge of processing.
Your personal data will be kept in the manner indicated above, for the minimum time required by legislative and contractual nature or until the data subject requests deletion. At the time of collection, the data will be kept in the reference folders on company management systems and/or in paper files. At the time of deletion, it is possible that the data will still be retained but anonymized.
Rights of data subjects: The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or non-existence of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification.
You also have the right to obtain from the owner the cancellation, communication, updating, rectification, and integration of personal data concerning you, as well as in general you can exercise all the rights provided by Art.7 of the Privacy Code and Chapter III of the GDPR, Artt. 12 to 23, including the right to lodge a complaint with the supervisory authority.
More information on treatment:
Litigation defense
The User's Personal Data may be used for the defense by the Owner of the website in court or in the preparatory stages of its possible establishment, from abuse in the use of the same or related services by the User.
Specific disclosures
Specific disclosures may be presented on the pages of the Site in relation to particular services or processing of Data provided by the User or Data Subject.
Maintenance
The User's Personal Data may be processed in additional ways and for additional purposes related to site maintenance.
System Log
For operation and maintenance purposes, this site and any third-party services it uses may collect System Logs, which are files that record interactions - including navigation - and may also contain Personal Data, such as IP address.
Information not contained in this policy
More information in relation to the processing of Personal Data may be requested at any time from the Data Controller.
Linking to third-party sites
The Holder is not responsible for the processing of personal data that may be carried out by and through sites to which this site links.