Privacy and Legal Information

It is possible for the following categories of data containing personal details about yourself to be collected:

• Contact details - information about name, place and date of birth, tax code, address, telephone number, mobile phone number, email address.
• Interests - information you provide about your interests, including the products you are interested in.
• Other personal data - information you provide about your date of birth, education or professional situation.
• Website use - information about how you use the website and open or forward our messages, including information collected through cookies (please consult our Cookie Policy Cookie Policy for more details).

The Company collects and processes your personal data in the following circumstances:

• if you register on the website;
• if you contact us in order to request our services;
• if you respond to our marketing campaigns, for example by filling in a response form, or by entering data on this website in the "Contact" section;
• if you offer your services as suppliers and you are natural persons.

If you provide personal data on behalf of someone else, it must first be ensured that those concerned have read this Privacy Policy.
We ask that you please help us keep your personal data up to date by notifying us of any changes.

In order for personal data to be processed, doing so must be deemed justified by one of the legal conditions specified in the current legislation on the protection of personal data, as described below.

1. Establishment and execution of contractual relations and any resulting obligations, including those arising from telephone requests for services.
   The Company may process your contact data for the purposes of establishing and executing contractual relations, providing the services requested and replying to reports and complaints.
   The Company may also use your contact details, and your email address in particular, to provide you with information relating to the service.
   Condition for data processing: fulfilment of contractual obligations.
   It is necessary for data to be provided in order to manage the contractual relationship, otherwise we would not be able to proceed.
2. Customer Satisfaction Surveys
   The Company may use your contact data in order to conduct surveys to measure how satisfied customers are with the service provided.
   Condition for data processing: consent.
   Failure to give your consent shall not impact contractual relations.
   You may revoke your consent at any time by contacting the Company.
   
3. Marketing to meet your needs
   The Company may process your contact data for marketing and advertising purposes in order to inform you about sales promotions. The Company may contact you via automated methods of contact (email, text messages and other mass messaging tools, etc.) or traditional methods of contact (for example, telephone call from an operator). They may also contact you for market research and statistical surveys, if you have given us consent to do so.
   The Company may also process your contact data, interests and other personal data in order to send you commercial communications in line with your preferences based on a specific customer profile, if you give us consent to do so.
   Condition for data processing: consent.
   Failure to give your consent shall not impact contractual relations.
   You may revoke your consent at any time by contacting the Company.
4. Compliance with legally binding requests in order to comply with legal obligations, regulations or orders by judiciary authorities, as well as to defend a right in court
   The Company may collect your contact data to fulfil a legal obligation and/or to defend its rights in court
   Conditions for data processing: legal obligations which the Company is obliged to comply with.

The Company implements a wide range of security measures in order to ensure increased levels of protection and maintenance for the security, integrity and accessibility of your personal data.
All your personal data are stored on our secure servers (or on secure paper copies) or on our suppliers’ or partners’ servers, and can be accessed and used in accordance with our security standards and policies (or equivalent standards for our suppliers or partners).
We take the following measures, among others:

• access to your personal data is strictly limited. It is permitted only in the event of necessity and only for the purposes communicated;
• perimeter security systems to prevent unauthorised access from external parties;
• access to information systems is under constant observation.

We only store your personal data for the time required to achieve the purposes for which it was collected, or for any other related and authorised purposes. Therefore, if personal data are processed for two different purposes, this data will be stored for as long as is required by the purpose with the longest term. However, data will no longer be processed for the purpose which has ceased to be relevant.
Access to your personal data is restricted to those who need to use it for relevant purposes.
If we no longer need your personal data or if there is no longer legal grounds for its storage, this data will be made irreversibly anonymous (and can thus be stored) or securely destroyed.
Please find below the conservation times related to the different purposes listed above:

1. Fulfilment of contractual obligations: data processed in order to fulfil contractual obligations may be stored for the entire duration of the contract, including any extensions, but no more than 10 years after. Data is stored in order to verify any outstanding matters and includes accounting documents (such as invoices), unless required otherwise by law.
2. Operational management and purposes strictly related thereto for access to the website: the data processed for this purpose may be kept for the duration of the contract and no more than 10 years after.
3. Customer satisfaction surveys: the data processed for this purpose may be kept for 24 months from the date on which you last gave your consent to take part in these surveys (unless you notify us that you no longer wish to be contacted).
4. Marketing purposes, including profiled: personal data processed for marketing purposes may be stored for 24 months from the date on which you last gave your consent for these purposes (unless you notify us that you no longer wish to be contacted); data processed in order to send marketing according to customer profile will, however, be retained for 12 months.
5. In the event of a dispute: in the event that we need to defend ourselves, take action or even make claims against you or any third party, we may keep personal data which we deem necessary (within reason) to process for such purposes, for as long as such a claim may be pursued.

Your personal data may be accessed by duly authorised, trained employees, as well as external collaborators, appointed, where necessary, as responsible for data processing and providing support for service provision.

It should be noted that this site does not include any automated decision-making process and, as such, there is no profiling system.

This site only uses technical or assimilated cookies to optimise the site. Therefore, you may disable cookies in your browser at any time, without any consequences in terms of navigating the site. However, we inform you that it is necessary for technical cookies to be used in order for the site to work properly. For more information about cookies, please refer to the following section on our website: https://www.esametal.com/CFIDE/scripts/WinTrade/html/cookie/wtcookie_en.cfm

The website may use social plug-ins. Social plug-ins are special tools that enable social network features to be directly incorporated into a website (e.g. the Facebook “Like” function).
All social plug-ins on the website are marked with the respective social network logo (e.g. Facebook, Google, Twitter).
When you visit a page on our website and interact with the plug-in (e.g. by clicking the "Like" button), or if you decide to leave a comment, the information is transmitted from your browser directly to the social networking platform, where it is stored by that platform. For information on the purposes, type and manner of collection, processing, use and storage of personal data by the social networking platform, as well as for information on how to exercise your rights, please see the privacy policy adopted by the relevant social network.
Below is an overview of the social plug-ins used:

• Facebook Plugin ("Share” button): You can recognise Facebook Inc. plug-ins, 1 Hacker Way, Menlo Park, California 94025, USA, with the Facebook logo or "share" button. For an overview of Facebook plugins, click here: http://developers.facebook.com/docs/plugins/. When using our online services, the plug-in establishes a direct connection between your browser and the Facebook server. Therefore, Facebook is notified that you are using our online services with the IP address. When you click the Facebook "share" button while logged into your Facebook account, you can link the content of our online services to your Facebook profile. Facebook can then associate the use of our online services with your user account. We would like to point out that we, as an online service provider, do not know the content of the data transmitted, nor do we know how it is used by Facebook. For more information, please refer to Facebook's privacy policy by visiting: https://www.facebook.com/policy.php. If you do not wish to allow Facebook to associate your use of our online services with your Facebook user account, please log out of your Facebook account.
  

Please find the access via links to other online services below:

• YouTube: YouTube is managed by Google, i.e. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you use one of our online services with a YouTube plug-in, you will be connected to YouTube's servers and the information about the online services you are using will be communicated to the YouTube server. When you are logged into your YouTube account, it allows YouTube to associate your browsing activity directly to your personal profile. You can prevent this by logging out of your YouTube account.

The data collected by the site are not generally provided to third parties, except in specific cases: if legitimately requested by judicial authorities and only in the instances provided for by law; when it is necessary to provide a specific service requested by the User; to perform security checks or site optimisation.

This site may share some of the data collected with services located outside of the European Union. These services include Google, Facebook and Twitter, in particular, through social plugins and the Google Analytics service. Data is authorised to be transferred due to specific data, in particular Resolution 1250/2016 (Privacy Shield), so no additional consent is required. The companies mentioned above guarantee that they comply with the Privacy Shield.

The contact details of the Company, as the data controller, are as follows:
ESAMETAL SRL - VIA QUARI RIGHT 19
37044 COLOGNA VENETA (VR)
info@esametal.com

If you have any questions about how we process your personal data, please use the web form in the "Contact" section on the site www.esametal.it, and specify "request about privacy" in the message. Alternatively, you can contact us on 0442 412753, and ask to speak to the person responsible for Privacy.

Under certain conditions, you have the right to ask us:

• to gain access to your personal data,
• for a copy of the personal data you have provided us with (portability),
• to edit the data in our possession,
• to delete any data for which we no longer have any legal grounds to process,
• to stop processing your data, where provided for by applicable legislation,
• for your consent to be revoked, if data is processed based on consent;
• to limit the way in which we process your personal data, within the limits specified by the legislation on the protection of personal data.

These rights may be exercised subject to certain exceptions, aimed at safeguarding the public interest (e.g. preventing or detecting crimes) and our interests (e.g. maintaining professional secrecy). In the event that you exercise any of the aforementioned rights, it will be our responsibility to verify that you are entitled to exercise them and we will normally respond within one month.
With regard to any complaints or reports on how we treat your data, we will make every effort to respond to your concerns. However, if you wish, you may submit your complaints or reports to the data protection authority using the relevant contact details: Guarantor for the protection of personal data
Piazza di Monte Citorio no. 121 - 00186 ROME, ITALY
Fax: (+39) 06.69677.3785 - Telephone: (+39) 06.696771
Email: garante@gpdp.it - Certified mail: .

This privacy policy is up-to-date as of the 12th July 2019.