PRIVACY AND COOKIE POLICY

NOTICE ON THE PROCESSING OF DATA

This Privacy Policy sets out which data are collected and how they are used, disclosed, transferred and/or stored by the company.

This notice is provided pursuant to Arts. 13–14 of Regulation (EU) 2016/679 — hereinafter, GDPR — to those who interact with the web services accessible online from the address: www.officineroveda.it

This notice is subject to updates, which will be promptly published on the website.

DATA CONTROLLER

The Data Controller of the data collected through this site is Officine Meccaniche Roveda srl, with registered office at Via Roma 41, 10085 Pont Canavese (TO) Italy, VAT No. 00800200016, email: info@officineroveda.it

METHODS OF PROCESSING PERSONAL DATA

The Personal Data provided or acquired will be processed in accordance with the principles of fairness, lawfulness, transparency and confidentiality protection under the applicable regulations.

The Controller processes Users’ Personal Data by adopting appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated. Among the Personal Data collected by this website, independently or through third parties, are: Cookies, Usage Data, Email, and Name. Additional Personal Data collected may be indicated in other sections of this Privacy Policy or by means of specific information displayed at the time of collection. Personal Data may be provided voluntarily by the User, or collected automatically during the use of this website.

1. DISCLOSURE AND DISSEMINATION OF DATA

In addition to the Controller, in some cases, the following may have access to the Data:

a) categories of authorized personnel, specifically trained, involved in the organization of the website (administrative, sales, marketing staff, legal, system administrators);
b) external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Processors by the Controller pursuant to Art. 28 GDPR. The up-to-date list of any appointed Processors can always be requested from the Controller;
c) public or private entities that may access the Data by virtue of legal obligations;
d) parties performing ancillary and instrumental tasks with respect to the Controller’s activity;
e) external parties such as partners in organizing initiatives and events promoted and/or sponsored by the Controller, to whom the communication of Data is necessary for organizational reasons;
f) with the data subject’s prior consent, the parties indicated in section 5) letter g) of this Privacy Policy.

2. DATA VOLUNTARILY PROVIDED BY THE USER

The optional, explicit and voluntary sending of emails, including through the Contact Form or the addresses indicated on this website, entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the email. The User’s consent to provide Data is necessary to be entered into the Controller’s databases and for the establishment and proper performance of what the Controller offers to its Users, as well as to third parties for the fulfillment of the specific activity requested. Failure to provide Data therefore prevents registration in the Controller’s databases, the conclusion of any contracts, as well as their performance and any other related activity. Consequently, failure by the User to provide certain Personal Data may prevent this website from providing its services. The User assumes responsibility for Personal Data of third parties published or shared through this website and guarantees to have the right to communicate or disseminate them, holding the Controller harmless from any liability towards third parties.

3. PLACE OF PROCESSING

Data are processed at the Controller’s operating office. For further information, you may contact the Data Controller.

4. RETENTION PERIOD

As expressly provided by Art. 5(1)(e) of the GDPR, Data are kept for the time necessary to process them in relation to the performance of the service requested by the User, or required by the purposes described in this document.

In particular:

– Personal Data collected for purposes related to the performance of a contract between the Controller and the User will be retained until the performance of such contract has been completed;
– Data collected for purposes related to the Controller’s legitimate interest will be retained until such interest has been satisfied. The User may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller;
– Data collected on the basis of the User’s Consent may be retained until such Consent is withdrawn;
– Data collected for tax/administrative obligations will be retained for the time necessary to fulfill the aforesaid purposes and as provided by law, and in any case for a period not exceeding that laid down by civil-law provisions;
– Data may be retained by the Controller for a longer period to comply with legal obligations or by order of an authority;

The User may always request the cessation of Processing or the deletion of Data not related to the performance of the contract.

At the end of the retention period, Personal Data will be deleted. Therefore, upon expiry of such period, the rights of access, deletion, rectification and the right to Data portability can no longer be exercised.

5. PURPOSES OF THE PROCESSING OF THE COLLECTED DATA

User Data are collected to allow the website to provide its services, as well as for the following purposes: Contacting the User, Managing addresses and sending emails, Interaction with external platforms, and Statistics. Specifically:

a) to comply with any type of obligation contemplated and provided by applicable laws, regulations, and practices related to commercial uses, in particular tax/fiscal matters;
b) to follow up on specific requests addressed to the Controller by the User through the Website and its communication tools (Contact Forms, information request forms and the like);
c) for informational communications relating to the Controller’s services, following a request for information via email or by filling out the Contact Form and other communication tools;
d) for other purposes accessory or related to those indicated above and in any case falling within the scope of the website’s activities;
e) for sending promotional and commercial information and offers;
f) for profiling activities for marketing purposes;
g) for the transfer of Data to companies and/or third parties with whom the Controller collaborates or has entered into agreements, which may use the Data of the Data Subject to send communications and/or informational material relating to events organized by them or to services they provide;

The types of Personal Data used for each purpose are indicated in the specific sections of this document.

For the purposes under point a), processing is necessary for the performance of a contract to which the data subject is party, for the execution of pre-contractual measures, or to comply with a legal obligation to which the Controller is subject.

For the purposes under points b), c), d), processing is optional; however, failure to provide one or more data will make it impossible to respond to your request for information and to use the services offered by the Controller.

For the purposes under points e), f), g), processing is based on the data subject’s freely given consent.

FURTHER INFORMATION ON PROCESSING

DEFENSE IN COURT

The User’s Personal Data may be used by the Controller for defense in court or in the preparatory stages leading to possible legal action, in case of abuse in the use of the website or related services by the User. The User acknowledges that the Controller may be required to disclose Data upon request of public authorities.

NATURE OF THE DATA PROCESSED AND CONSEQUENCES OF ANY REFUSAL

The provision of browsing data by Users, for the purposes indicated above, depends on the degree of privacy that the User has enabled or disabled through their browser. In some cases, disabling may adversely affect browsing on this website. For certain sections of this website, the provision of browsing data and/or the use of technical cookies is mandatory for the proper functioning of the site. The provision of certain personal data is in any case necessary due to the very structure of the website and its procedures. In particular, by way of example:

• for sending messages via the Contact Form, the minimum data requested therein are in any case mandatory;

Failing that, the procedure cannot be completed.

Any request for other optional Data will be preceded by an appropriate approval checkbox. The provision of all other Data is optional, depending on the type of information that the User wishes to provide to the website.

EXERCISE OF DATA SUBJECT RIGHTS

The data subject is entitled to exercise the rights provided for in Arts. 7 and 15–22 of EU Regulation 679/2016.

In particular, the data subject has the right to withdraw their consent at any time and, upon simple request to the Data Controller, may request access to Personal Data, receive the Personal Data provided to the Controller and, where possible, transmit them to another Controller without hindrance (so-called portability), obtain the updating, restriction of processing, rectification of Data, and the deletion of those processed in breach of the applicable law. The data subject also has the right, on legitimate grounds, to object to the processing of Personal Data concerning them and to processing for the purpose of sending advertising material, direct sales, and for market research. The data subject also has the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali). The data subject may exercise their rights by contacting the Controller via email at: info@officineroveda.it

CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to make changes to this Privacy Policy at any time, notifying Users on this page. Please therefore consult this page frequently, referring to the date of the last modification indicated at the bottom. If you do not accept the changes made to this Privacy Policy, you must cease using this website and you may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that time.

The Data Controller is responsible for this Privacy Policy.

Privacy Notice updated in January 2023

COOKIE POLICY

This cookie policy, or extended notice regarding cookies and other tracking tools, concerns the use of Cookies by the website www.officineroveda.it

The Data Controller of the data collected through this site is Officine Meccaniche Roveda srl, with registered office at Via Roma 41, 10085 Pont Canavese (TO) Italy, VAT No. 00800200016, email: info@officineroveda.it

Cookies are small text files used by websites to make the browsing experience more efficient for the User and are sent to their browser, where they are stored and later reused by the same website upon the User’s next visit.

Cookies have different functions. There are Cookies that improve the functionality and navigation of this website (so-called technical or necessary Cookies). And there are Cookies that are used to track users while browsing, record information that reveals their interests by analyzing what they read, hobbies, in order to personalize the advertising shown when they open emails, browse a social network or other web pages (so-called profiling Cookies). Cookies are used to personalize content, provide social media features and analyze traffic.

In their browser, the user can set Privacy preferences so as not to store Cookies, to delete them after each visit or each time the browser is closed, or to accept only Cookies from www.officineroveda.it and not those from third parties.

Depending on how long Cookies remain on the browser, they are distinguished as follows:

Session cookies: temporary cookies that remain on the device until the User leaves the site.

Persistent cookies: cookies that remain on the device for a longer period until they are deleted.

This site uses various types of Cookies

Technical cookies

Technical cookies are those whose use does not require the User’s consent. These Cookies are used solely for the purpose of carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested. On this website, technical Cookies are used to store the User’s decision regarding the use of Cookies on the website itself. The retention period of technical cookies corresponds to the duration of the browsing session on the site.

SOCIAL NETWORK BUTTONS AND WIDGETS

To allow the contents of a site to be shared on social networks by visitors, it is possible to integrate into the pages the tools (widgets) made available by the social networks themselves. These tools (usually blocks of code embedded in the pages of the host site) may collect third-party Cookies installed by the social networks.

The website does not share any information with such widgets and has no access to the data that are independently collected and processed by the operators of the social network platforms.
For further information regarding third-party Cookies used by the website, you can visit the following sites:
Facebook: https://www.facebook.com/policies/cookies/
Instagram: https://help.instagram.com/519522125107875
Telegram: https://telegram.org/privacy
Linkedin: https://www.linkedin.com/legal/cookie-policy
Vimeo: https://vimeo.com/cookie_policy
Youtube: https://policies.google.com/privacy?hl=it
Twitter: https://help.twitter.com/it/rules-and-policies/twitter-cookies

DELETE OR DISABLE COOKIES

With the exception of technical cookies that are strictly necessary for normal browsing, the provision of Data is left to the User’s will, who decides to browse the site after having read the short notice contained in the specific banner and to use third-party services that entail the installation of cookies. The User may therefore avoid the installation of Cookies by keeping the banner (thus refraining from closing it by clicking the “OK” button), by removing the check mark from some or all categories of cookies used by the website, as well as through the appropriate functions available on their browser.

The user can manage preferences related to Cookies directly within their browser and prevent third parties from installing them.

It is important for the User to know that by disabling all Cookies, the functioning of this website may be compromised. Each browser has different procedures for managing settings.

To disable third-party cookies, it is also possible to use Your Online Choices, http://www.youronlinechoices.com/it/le-tue-scelte, a web service managed by the non-profit association European Interactive Digital Advertising Alliance (EDAA) that provides information on behavioral advertising based on profiling cookies and allows users to easily opt out of their installation. By deleting all cookies from your browser or removing them through services such as Your Online Choices, third-party cookies will be generally blocked, not only within the perimeter of this site.

FURTHER INFORMATION ON PROCESSING

Specific notices

Upon the User’s request, in addition to the information contained in this Cookie Policy, this website may provide additional and contextual notices regarding specific services, or the collection and processing of Personal Data.

System logs and maintenance

For operational and maintenance purposes, this website and any third-party services it uses may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this Cookie Policy

More information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

EXERCISE OF DATA SUBJECT RIGHTS

Pursuant to Arts. 15–22 of European Regulation No. 679/2016, the data subject has the right to obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and communication of such data in an intelligible form.

The data subject thus has the right to obtain information regarding:

a) the origin of the personal data;
b) the purposes and methods of the processing;
c) the logic applied in case of processing carried out with the help of electronic tools;
d) the identification details of the Controller and the Processors of Personal Data;
e) the parties or categories of parties to whom the Personal Data may be communicated or who may learn of them as a designated representative in the State’s territory, as processors or appointees.

The data subject has the right to obtain:

a) the updating, rectification, or, where interested, the integration of the Data;
b) the deletion, transformation into anonymous form, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed.

The data subject has the right to object, in whole or in part:

a) on legitimate grounds, to the Processing of Personal Data concerning them, even if relevant to the purpose of the collection;
b) to the Processing of Personal Data concerning them for the purpose of sending advertising material or direct sales or for conducting market research or commercial communication.

WARNING: The Controller is not responsible for updating all the links included in this Cookie Policy that refer to third-party sites. Therefore, if a link is not working or not up to date, Users acknowledge and agree that they should always refer to the document and/or section of the websites referred to by such link.