INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users visiting the website: www.generalmecsrl.it
Pursuant to Article 13 of EU Regulation 2016/679
This document aims to provide maximum transparency regarding the information collected through the website www.generalmecsrl.it and the ways in which such information is processed. This document does not apply to information collected through channels other than those indicated.
This privacy policy describes how Generalmec S.r.l. manages its website concerning the processing of personal data relating to customers/users/visitors accessing it.
For individual processing activities on specific channels, please refer to the detailed notices related to the specific services requested.
PREMISE
This Digital Privacy Policy describes, in compliance with European Regulation 2016/679 (hereinafter “Regulation”), as well as current national legislation, the methods of processing personal data of customers/users/visitors who use the institutional website of Generalmec S.r.l. (www.generalmecsrl.it).
IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
The Data Controller (hereinafter also “Controller” and/or “Company”) is Generalmec S.r.l., with registered office at 35020 – Brugine (PD), Via Dell’Industria 42, VAT No.: 02266830286, R.E.A. PD 218266, represented by its legal representatives pro tempore, available at the following contacts: e-mail info@generalmecsrl.it, PEC: generalmec@internetpec.it.
CATEGORIES OF PERSONAL DATA PROCESSED RELATING TO THE WEBSITE
The personal data processed are those provided by you or lawfully obtained by the Controller. The types and processing methods of data related to websites are described below:
Browsing data/website functionality: The IT and telematic systems and software procedures responsible for the operation of websites acquire, during their normal operation, certain data whose transmission is implicit in the use of web communication protocols. This category of data includes, for example, IP addresses, date and time of access, visited pages (URI/URL), numerical codes indicating the server response status, the method used to submit the request to the server, device names used to connect to the sites, and other parameters related to the user’s operating system and computing environment.
Data voluntarily and spontaneously provided: In certain sections of the websites, some personal data may be requested, for example, to allow registration in the “CONTACT” SECTION (for which an appropriate notice will be provided pursuant to Article 13 of the Regulation).
Data collected through tracking (cookies and other tracking tools): Tracking occurs through code executed within the website at both the server level (e.g., services, procedures) and client level (e.g., tags, pixels), also with the support of code installed on your browser (e.g., cookies). Regarding the purpose and management of consents related to tracking, please refer to the specific “Cookie Policy” section of the website.
Location data: The websites may collect, following your specific authorization, approximate location data provided by your IP address.
DATA PROVISION
Except as mentioned above regarding browsing data and notices provided in individual sections of the aforementioned channels, providing data for additional purposes is optional. Failure to provide such data may result in the inability to pursue those additional purposes beyond those listed in Article 4 below.
PURPOSE OF PROCESSING, LEGAL BASIS, AND RETENTION PERIOD
The Personal Data you provide through the website will be processed, depending on your requests, for the following purposes:
a) Website functionality.
The legal basis for processing your personal data for website functionality is the execution of a contract to which you are a party.
The data will be retained for the time necessary to provide website functionality services and then deleted or anonymized.
b) Responding to your request for information.
The legal basis for processing your Personal Data for the purposes indicated in b) is Article 6(1)(b) (processing is necessary for the execution of a contract to which the data subject is a party or for pre-contractual measures requested by the data subject).
Personal data processed for responding to your request for information will be retained for the time necessary to fulfill your request. Subsequently, they will be deleted or anonymized.
RECIPIENTS AND AUTHORIZED PROCESSORS
Your Personal Data is processed by employees, collaborators of the Controller, or external parties acting as authorized processors who perform technical and organizational tasks on behalf of the Controller based on specific instructions.
TRANSFER OF PERSONAL DATA OUTSIDE THE EU
Your personal data will not be transferred outside the EU.
However, if such an event occurs and data is transferred to third parties outside the EU (e.g., USA), the transfer will be carried out in accordance with the provisions of the GDPR, Chapter V, Articles 44 et seq. Specifically, the transfer will occur to a third country deemed adequate under Article 45 GDPR or to a third country that ensures an adequate level of Personal Data protection, subject to verification by the Controller and application of the guarantees provided by Article 46 GDPR.
DATA SUBJECT RIGHTS
The legislation grants the Data Subject the exercise of specific rights listed in Articles 15 to 22 of the GDPR, including the right to obtain confirmation of the existence of their personal data (i.e., access), their availability in an intelligible form, as well as their rectification, deletion, restriction of processing, or objection to processing for legitimate reasons and/or withdrawal of consent to processing at any time (subject to the indicated consequences), or to request data portability concerning data based on specific consent, as well as updates.
The data subject has the right to be informed about the source of the data, the purpose and methods of processing, the logic applied to processing, and the identification details of the Controller and the recipients of the data.
The Data Subject also has the right to request anonymization, restriction, or blocking of data processed in violation of the law and may file a complaint regarding unauthorized data processing with the Data Protection Authority, as published on the Authority’s website (http://www.garanteprivacy.it/).
Requests related to the exercise of these rights can be addressed to the Data Controller at the above contacts, without formalities or by using the model provided by the Data Protection Authority at: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924.
The Data Protection Authority is based in Rome, Piazza Monte Citorio No. 121; Fax: (+39) 06.69677.3785; Telephone switchboard: (+39) 06.696771; e-mail: garante@gpdp.it; certified email: protocollo@pec.gpdp.it.
RIGHT TO COMPLAIN
If you believe that your personal data is being processed in violation of the Regulation, you have the right to lodge a complaint with the Data Protection Authority (by e-mail at: garante@gpdp.it, or by mail at: Garante per la protezione dei dati personali, located in Rome (Italy), Piazza Venezia 11 Scala B, CAP 00187), as provided by Article 77 of the Regulation, or to take appropriate legal action as provided by Article 79 of the Regulation.
CHANGES TO THIS NOTICE
This notice may be subject to changes over time due to new regulations, updates and/or provision of new services, or technological innovations.
Last updated on 27/02/2025