PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

(Pursuant to Articles 13 and 14 of EU Regulation 2016/679 – GDPR)

We would like to inform you that EU Regulation 2016/679 (“General Data Protection Regulation” or “GDPR”) provides for the protection of individuals with regard to the processing of personal data. In accordance with the principles of lawfulness, fairness, and transparency, we are providing you with the following information:

1. Data Controller

• The Data Controller is METALLURGICA LEDRENSE SOC.COOP., with registered office at VIA AMPOLA No. 14 – 38067 LEDRO (TN), Tax ID/VAT No . 01084660222, which can be contacted at the email address info@metallurgicaledrense.net or via certified email (PEC) metallurgicaledrense@registerpec.it

2. Categories of Processed Data

The data processing activity involves the following types of data:

• Data collected directly from the data subject (Art. 13): [e.g., personal information, contact information, email address, billing information].
• Data Not Collected Directly from the Data Subject (Art. 14): [e.g., data from public sources / third-party companies, specifically: banks, accounting firms, etc.]

3. Purposes and Legal Basis for Data Processing

Your personal data will be processed for the following purposes:

• Fulfillment of contractual or precontractual obligations: [e.g., service management, order fulfillment, customer support].
  • Legal basis: The processing is necessary for the performance of a contract or for taking steps prior to entering into a contract (Art. 6, para. 1, subpar. b, GDPR).
• Compliance with legal obligations: [e.g., invoicing, mandatory accounting records, reports to authorities].
  • Legal basis: The processing is necessary to comply with a legal obligation to which the Data Controller is subject (Art. 6, para. 1, subpar. c, GDPR).
• Marketing activities and newsletters: [e.g., sending commercial and promotional communications].
  • Legal basis: The data subject’s explicit consent (Art. 6, para. 1, subpar. a, GDPR).
• Legitimate interest: [e.g., IT system security, fraud prevention].
  • Legal basis: The Data Controller’s legitimate interest (Art. 6, para. 1, subpar. f, GDPR).

4. Methods of Data Processing and Retention

The data will be processed using both manual and computerized/telematic means, in accordance with procedures strictly related to the purposes of the processing and in a manner that ensures the security and confidentiality of the data.
The data will be stored either in paper form in our archives or on our server

• For the entire duration of the contractual relationship and, thereafter, for a period of 10 years to comply with tax and civil obligations.
• For marketing purposes, until you revoke your consent or request that your data be deleted.

5. Recipients or Categories of Recipients of the Data

Your personal data will not be disclosed, but may be shared with third parties affiliated with the Data Controller for the purposes indicated above, such as: offers, pay stubs, tax matters, documents, and bank transactions.

• Professionals, consultants, or service providers (e.g., accountants, legal advisors, IT service providers).
• Banks or post offices for payment processing.
• Public entities or judicial authorities, when required by law.

These individuals will act, where necessary, as Data Processors specifically appointed by the Data Controller.

6. Transfer of Data Abroad

Personal data is stored on servers located within the European Union.

7. Rights of the Data Subject

As a data subject, you have the right to exercise the rights provided for in the GDPR (Articles 15–22) at any time, and in particular:

• Right of Access: Request confirmation of the existence of your personal data and obtain a copy of it.
• Right to Rectification: Request that inaccurate data be updated or corrected.
• Right to Erasure (Right to Be Forgotten): Request the erasure of data if it is no longer necessary or if it has been processed unlawfully.
• Right to restriction: Request a temporary suspension of processing in specific cases.
• Right to Data Portability: To receive your data in a structured, machine-readable format.
• Right to Object: Object to the processing of your personal data on legitimate grounds or for direct marketing purposes.
• Right to Withdraw Consent: You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

Requests should be sent by email to the Data Controller at the following address: [Email address provided in step 1].

You also have the right to file a complaint with the Italian Data Protection Authority