Policy Privacy

PRIVACY POLICY IN ACCORDANCE WITH EU REGULATION 2016/679

This policy (hereinafter “Privacy Policy”) provides information on the processing of personal data collected by the company, Zanardi Fonderie S.p.A. (hereinafter “Company” or “Data Controller”) via the website www.zanardifonderie.com (hereinafter “Website”) and therefore constitutes the policy for data subjects pursuant to current legislation and the provisions of Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “Regulation”). In the sections of the Website where the user’s personal data are collected, a specific privacy policy is normally published which, in any case, supplements this Privacy Policy.

DATA CONTROLLER

Zanardi Fonderie SpA, with registered office in Minerbe (VR) (Italy), Via Nazionale 3, VAT number IT00822690236, email privacy@zanardifonderie.com

TYPES OF DATA PROCESSED

Data collected automatically

Browsing data

The computing systems and software procedures employed to operate this Website acquire, during the normal course of operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

It concerns information that is not collected to be associated with specific individuals, but by its very nature could, through the processing and association with data held by third parties, allow users to be identified.

This category of data includes, for example, IP addresses or domain names of computers and other instruments used by users who connect to the Website, URI addresses (Uniform Resource Identifier) of requested resources, the time of the request, the method employed to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters related to the user’s operating system and IT environment.

These data are only used to obtain anonymous statistical information about Website use and to check its correct functioning and are deleted immediately after processing.

Cookies

The Website uses cookies to improve the user’s browsing experience. For further information on the type of cookies used and the purposes, you can consult the cookie policy.

Data submitted voluntarily by the user

Data entered in the contact form through the Website

Filling out the contact form:

Personal data provided by the user when interacting with the Website’s features, including browsing data or requesting to use the services offered on the Website (e.g., requests for information and reports, including contact forms, etc.), may be processed.

Spontaneous sending of emails present on the Website:

The optional, explicit, and voluntary sending of electronic mail to the addresses indicated on the Website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

Data sent spontaneously through the form in the “Work with us” section

Personal data included in the application and included in the CV that the user voluntarily submits via the form on the Website may be processed; providing such data is necessary to fulfill the contract or potential contract entered into with the candidate, and the legal basis for the processing is the performance of a contract or pre-contractual measures taken at the data subject’s request.

Contact data for marketing purposes

If the interested party fills out dedicated forms for data collection in specific areas for marketing purposes, with prior consent and until objected, the Data Controller may use this data for direct marketing activities, market research, customer satisfaction surveys, sending newsletters and promotional, commercial, and advertising materials, or materials relating to events and initiatives, via automated email.

Specific summary information is also reported or displayed in the sections of the Website set up for particular services on request and subject, where appropriate, to the user’s consent.

PURPOSE OF THE PROCESSING

The personal data acquired through the Website will be processed by the Data Controller for the following purposes:

carrying out the operations strictly necessary to provide the services you may request through the contact forms on the Website, including your navigation between the pages of the Website;
respond to specific requests for information sent spontaneously to the email addresses on the Website;
evaluate the application and CV that the user spontaneously sends through the form on the “Work with us” website page;
the provision of technological services (e.g., mailing lists, etc.), even by specifically authorized third parties, only with the user’s explicit consent;
management of requests to exercise data subjects’ rights;
statistical processing of aggregated data in relation to the performance of the Website.

LEGAL BASIS

The processing of your personal data will be carried out on the basis of one or more of the following conditions. In particular, the processing carried out for the purposes described above, which concern:

Points 1 and 2 have as their legal basis the need to fulfill your express requests to receive a service directly available through the Website: this therefore involves the provision of data that is strictly necessary and connected to activities functional to responding to your specific request. As such, the data collected from time to time is mandatory and, if you do not intend to provide it, it will not be possible to provide the service or respond to your requests;
punto 3, ha come base giuridica l’esecuzione di un contratto di cui l’interessato è parte o all’esecuzione di misure precontrattuali adottate su richiesta dello stesso – (C44) art. 6 par. 1 lett. b) del GDPR.

For any additional purposes related to the recruitment and selection process, reference should be made to the specific privacy notice available, where applicable, in the dedicated section of the Website.

Point 4 has as its legal basis the data subject’s consent pursuant to Article Art. 6, paragraph 1, letter a) of the GDPR: The data subject has provided consent to the processing of his or her personal data. The provision of such data is voluntary, and the legal basis for the processing is the consent that may be granted by the data subject.
point 5 has as its legal basis the fulfillment of a legal obligation to which the data controller is subject (C45) Art. 6 par. 1 lett. c) of the GDPR;
Point 6, since this data is anonymized, i.e., data from which it is not possible to re-identify, even indirectly, a natural person, such data is no longer personal data, therefore the related processing is exempt from the application of privacy legislation and a specific legal basis is not required.

DATA RETENTION PERIOD

The personal data processed will be retained in a form that permits identification of the data subjects for a period of time no longer than is necessary to achieve the purposes for which they are processed, unless further retention is required following requests from the competent authorities for the prevention and prosecution of crimes or, in any case, to assert or defend a right in court.

In particular for data relating to:

Point 1, browsing data will be stored at the Data Controller’s headquarters for the periods defined by the relevant legislation, in compliance with the principle of proportionality, limited to the period of time necessary to achieve the purposes for which the data were collected.
Point 2, personal data will be retained for the time strictly necessary to achieve the purposes indicated above and, at the end of this period, the data will be permanently deleted or otherwise rendered irreversibly anonymous.
Point 3: If you submit your CV through the “Work with us” section, your data will be retained until the end of the selection process and, in the case of unsolicited applications, for up to 12 months, subject to an extension of the period with your prior consent;
Point 4, the data will be retained for a period not exceeding 24 months from collection, unless the user revokes consent before then, and in any case without prejudice to the extension of the term with prior consent.
point 5, the retention period is 5 years from the closure of the request, barring disputes.

At the end of the established retention period, personal data will be deleted or anonymized, unless further processing is necessary to pursue other legitimate purposes of the Data Controller (for example: the resolution of pre-litigation or previously initiated disputes, the need to follow up on investigations by judicial authorities or competent authorities initiated before the expiration of the retention period).

PROCESSING METHODS AND SECURITY MEASURES

Personal data are processed using automated and non-automated tools with logic strictly related to the purposes of the processing and, in any case, with methods and procedures suitable for guaranteeing the security and confidentiality of the data.

The Data Controller undertakes to protect the security of the user’s personal data and comply with the security provisions provided for by the applicable legislation in order to avoid data loss, illegitimate or illicit use of data and unauthorised access to said data, with specific, but non-exclusive reference to Articles 25-32 of the Regulation. The company uses security technology and procedures aimed at protecting the users’ personal data.

CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Personal data will be processed by personnel specifically authorized by the Data Controller, as well as by third parties, only when necessary for the operation and maintenance of the Website and the services made available through the Website itself, without prejudice to any obligations laid down by law.

To pursue the aforementioned purposes, it may be necessary for the Data Controller to communicate your personal data to the following categories of recipients:

entities that provide services for managing the information system used by Zanardi Fonderie SpA and telecommunications networks, including email, newsletters, and Website management, as well as freelancers, firms, or companies providing assistance and consultancy services;
competent authorities to fulfill legal obligations and/or provisions of public bodies, upon request.

LINKS TO OTHER SITES

The Website may contain links to other websites (so-called third-party websites). The Company does not have any type of access or control over cookies, web beacons and other user tracking technology used by third-party websites that the user can access from the Website. The Company does not carry out any checks on the contents and materials published by or obtained through third-party websites, or on the methods related to the processing of the user’s personal data, and expressly declines any liability related to such eventualities. The user is required to check the privacy policies of any third-party websites accessed through the Website and to inquire about the conditions which apply to the processing of their personal data. This Privacy Policy applies only to the Website as defined above.

DATA TRANSFER OUTSIDE THE EUROPEAN UNION

Personal data will not be transferred to countries outside the EEA.

AUTOMATED PROCESS

No decision-making processes based on automatic processing, including profiling, are used.

RIGHTS OF INTERESTED USERS

The users, to whom the personal data refer, have the right, at any time, to obtain confirmation of the existence of said data and to know its content and origin, verify its accuracy or request its integration or updating, or the rectification, erasure or restriction, or to object to their processing, to lodge a complaint with a supervisory authority pursuant to Article 15 of the Regulation. Moreover, pursuant to Articles 7, 15, 16, 17, 18, 19, 20, 21, 22 and 77 of this Regulation, every user has the right to request information on the collection and use of their personal data and to access, correct and erase it (right to be forgotten), to restrict processing and notification in the event of rectification or erasure of personal data; the right to restriction of processing, data portability, transformation into anonymous form or blocking of data processed in violation of the law, as well as to object in any case, in the cases envisaged by law, to their processing, to lodge complaints relating to the collection and processing of personal information to the competent Data Protection Authority, to withdraw consent to the processing of personal data at any time without prejudice to the lawfulness of the processing hitherto carried out on the basis of the consent withdrawn.

For any request regarding the processing of personal data by the Company, to exercise the rights recognised by the applicable legislation, as well as to obtain the updated list of the subjects to have access to the data, the user can contact the Data Controller at the addresses indicated above.