PRIVACY AND COOKIE POLICY FOR SITE USERS

IN ACCORDANCE WITH ARTICLE 13 OF REGULATION (EU) 2016/679 ON PERSONAL DATA PROTECTION

Dear user,
Thank you for visiting our website. In the following information, you will find all the necessary details to understand the purposes and methods of processing your personal data, as well as any other information required by Article 13 of the Regulation (EU) 2016/679 concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as "GDPR").

1. Identity and contact details of the Data Controller

The Data Controller for the data is PRIMA s.r.l., with registered office at Via Manta, 6 - 12033 Moretta (CN), represented by its Legal Representative. VAT/Tax code: 02190470043. Phone: (+39) 0172 94067, email: info@primameccanica.it

2. Types of data processed, purposes of processing, legal basis, and data retention period

2.1 Navigation data

You can access the site without providing any personal data. However, the computer systems and software used to operate the site acquire, during their normal operation, certain personal data, the transmission of which is implicit in the use of Internet communication protocols (IP address, type of browser, and device parameters used to connect to the site, name of the internet service provider, date and time of visit, origin and exit web page, etc.). These pieces of information are not collected to be associated with identified users, but by their very nature, they could allow for identification through processing and association with data held by third parties.

PRIMA s.r.l. processes this data to monitor the technical functioning and performance of the site, to obtain anonymous statistical information about the use of the site (such as the number of accesses), and to understand how to improve and evolve the services. These data, necessary to ensure the provision of the site, are deleted a few hours after processing.

The legal basis for processing this data is to pursue the legitimate interests of the Data Controller (Article 6, paragraph 1, letter f), GDPR).


2.2 Cookies

Cookies are pieces of information sent by a web server (in this case, from this site) to the user's browser and stored on their device (personal computer, tablet, mobile phone, etc.), automatically sent to the server upon each subsequent access to the site.

This website does NOT use any type of cookies and does not store your information.


2.3 Data collected through the contact form

If, by connecting to this site, you decide to send your personal data (name and surname, email address, phone number, company name, country) to make requests via the appropriate contact form, PRIMA s.r.l. will process your data exclusively to respond to your request, in accordance with this information.

No health data or, in general, special categories of personal data referred to in Article 9 of the GDPR will be requested. The provided data will be processed and stored for the time strictly necessary to respond to your inquiries and provide the requested information or to manage your specific requests.

The legal basis for processing this data is to perform a contract of which the data subject is a part or to take pre-contractual measures upon the data subject's request (Article 6, paragraph 1, letter b), GDPR).


2.4 Data collected through the contact form for marketing purposes

If, by sending your request via the contact form mentioned above, you decide to give your specific and distinct consent (Article 7, GDPR) to the processing of your data (name and surname, email address, phone number) for marketing purposes, the Data Controller will process this data to contact you via email or phone regarding services or products offered by the Data Controller, events, or fairs organized or participated in by the Data Controller.

The data will be processed and stored until your eventual revocation of consent to the use of your data for marketing purposes, which can be freely done at any time through the link at the bottom of each email message sent or following the procedures provided in point 6) of this information.

The legal basis for processing this data is the express consent of the data subject (Article 6, paragraph 1, letter a), GDPR). The subsequent revocation of consent does not affect the lawfulness of processing based on consent before revocation.

3. Processing methods

The data collected as indicated in point 2) will be processed with the support of paper, computer, and telematic means with organizational and processing logics strictly related to the purposes themselves and in a way that ensures the security, integrity, and confidentiality of the data in compliance with the organizational, physical, and logical measures provided by current regulations. Personal data will be processed internally by authorized persons, under the authority of the Data Controller and trained on regulatory principles and security procedures (Article 32, paragraph 4, GDPR).

4. Scope of communication and dissemination of data

Without prejudice to communications made in compliance with legal obligations or an order of the judicial or public safety authority, PRIMA s.r.l. may share your data with partners or IT suppliers who support it in providing this website. These recipients are selected by the Data Controller based on their competence in terms of data security and confidentiality. PRIMA s.r.l. enters into contracts with all these recipients to ensure that they provide a high level of security for the protection of your data.

Your data will never be disclosed.

5. Transfer of data outside the European Union

Your personal data will be processed by the Data Controller within the territory of the European Union. In any case, the Data Controller, if necessary, may have the option to move the servers outside the EU, for example, in the case of using Cloud services. In this case, the Data Controller ensures in advance that the transfer of data outside the EU will comply with the applicable legal provisions, after entering into the standard contractual clauses provided by the European Commission.

6. Rights of data subjects and how to exercise them

With regard to the processing of data described herein, you can exercise the rights provided by the GDPR (Article 7, paragraph 3, and Articles 15-22), including:

  • receive confirmation of the existence of your personal data and access their content (right of access);
  • update, modify, and/or correct your personal data (right of rectification);
  • request the deletion of your account or request the deletion or limitation of data processing carried out in violation of the law, including those for which storage is not necessary for the purposes for which the data was collected or otherwise processed (right to erasure and right to restriction);
  • unless processing is required in compliance with a legal obligation, object to the processing, in cases provided by the Regulation (right to object);
  • withdraw consent, if given, without affecting the lawfulness of the processing based on consent before the withdrawal, for all or part of the relevant processing;
  • receive a copy of the data concerning you in electronic format related to the contract and request that this data be transmitted to another data controller (right to data portability).
To exercise these rights or request further information regarding this information, you can contact the Data Controller by sending an email to info@primameccanica.it

In accordance with Article 77 of the GDPR, you also have the right to lodge a complaint with the Italian Data Protection Authority, located at Piazza Venezia, 11 - 00187 Rome (RM). The procedures and instructions for filing a complaint are published on the official website of the Authority (www.garanteprivacy.it).

7. Social Network

Like most of you, PRIMA s.r.l. is also present on Linkedin, Instagram, Facebook, and Youtube.

Each of these social networks has its privacy policy and provisions regarding the processing of personal data. Regarding the processing of personal data carried out by the managers of the social media platforms used by PRIMA s.r.l., please refer to the information provided by them through their respective privacy policies, which we invite you to consult.

PRIMA s.r.l. processes the personal data provided by users through the pages of the company's dedicated social media platforms - within the framework of the informative-promotional purposes of its products and services - solely to manage interactions with users (comments, public posts, etc.) and in compliance with the GDPR.

Personal data shared by users through private messages sent directly to PRIMA s.r.l. will be processed, in accordance with the GDPR and this information, for the time strictly necessary to respond to the user's inquiries and provide the requested information or to handle specific requests. Personal data and/or sensitive data entered in comments or public posts within PRIMA s.r.l.'s social media channels may be removed.

The profiles on social media and their respective messaging services of PRIMA s.r.l. are managed by authorized personnel for data processing, under the authority of PRIMA s.r.l., and trained on regulatory principles and security procedures (Article 32, paragraph 4, GDPR).

8. Changes and updates

This information may undergo changes over time - also related to the possible entry into force of new sector regulations, the updating or provision of new services, or technological innovations - so we invite you to periodically consult this page.