Limitation of Liability
Iron Spa constantly strives to ensure the accuracy of the information accessible through its website. However, it does not guarantee in any way that the information is accurate, complete and up to date. Iron Spa cannot be held responsible, under any circumstances, for any damage, direct or indirect, of any nature, arising from the consultation of its website.
The use of the website by the user implies acceptance of the provisions indicated in this section and in the Privacy Policy section.
INFORMATION NOTICE FOR THE PROCESSING OF PERSONAL DATA
Iron Spa., with registered office in Via dei Mugnai, 12, Zona Industriale S. Maria degli Angeli – 06081 – ASSISI (PG), Tax Code and VAT No. 01622860540 (hereinafter, the “Data Controller”), as data controller, informs you pursuant to Art. 13 of Legislative Decree 30.6.2003 no. 196 (hereinafter, “Privacy Code”) and Art. 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”) that your data will be processed according to the following methods and purposes:
1. Subject of Processing
The Data Controller processes personal and identification data (for example, name, surname, company name, address, telephone number, e-mail address, bank and payment details) – hereinafter referred to as “personal data” or also “data” – provided by you when entering into contracts for the services of the Data Controller.
2. Purposes of Processing
Your personal data are processed:
A) without your express consent (Art. 24 letters a), b), c) Privacy Code and Art. 6 letters b), e) GDPR), for the following Service Purposes:
– entering into contracts for the services of the Data Controller;
– fulfilling pre-contractual, contractual and tax obligations arising from existing relationships with you;
– fulfilling obligations established by law, regulations, EU legislation or an order issued by an Authority (such as, for example, anti-money laundering regulations);
– exercising the rights of the Data Controller, for example the right of defence in court;
B) for the following Marketing Purposes:
Only with your specific and separate consent (Arts. 23 and 130 Privacy Code and Art. 7 GDPR):
– sending you newsletters, commercial communications and/or advertising material regarding products or services offered by the Data Controller by e-mail, post and/or SMS and/or telephone contacts, and carrying out customer satisfaction surveys regarding service quality;
Please note that if you are already our customer, we may send you commercial communications relating to services and products of the Data Controller similar to those you have already used, unless you object.
3. Methods of Processing
The processing of your personal data is carried out through the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2) GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data are processed both in paper form and electronically and/or through automated systems.
The Data Controller will process personal data for the time necessary to fulfil the purposes described above and in any case for no longer than 10 years from the termination of the relationship for Service Purposes and no longer than 2 years from data collection for Marketing Purposes.
4. Access to Data
Your data may be made accessible for the purposes referred to in Art. 2.A) and 2.B):
– to employees and collaborators of the Data Controller, in their capacity as persons in charge and/or internal/external data processors and/or system administrators;
– to third-party companies or other entities (including, by way of example, credit institutions, professional firms, consultants, insurance companies providing insurance services, etc.) that carry out outsourced activities on behalf of the Data Controller, in their capacity as external data processors.
5. Data Disclosure
Without the need for express consent (pursuant to Art. 24 letters a), b), d) Privacy Code and Art. 6 letters b) and c) GDPR), the Data Controller may disclose your data for the purposes referred to in Art. 2.A) to Supervisory Bodies, Judicial Authorities, as well as to those entities to whom disclosure is required by law for the fulfilment of said purposes. These entities will process the data as independent Data Controllers.
Your data will not be disseminated.
6. Data Transfer
Personal data are stored on servers located in Italy.
It is understood that the Data Controller, if necessary, shall have the right to move the servers also to other European or non-EU countries. In this case, the Data Controller hereby guarantees that the transfer of data will take place in compliance with applicable legal provisions, subject to the signing of the standard contractual clauses provided by the European Commission.
7. Nature of Data Provision and Consequences of Refusal
The provision of data for the purposes referred to in Art. 2.A) is mandatory. Without such data, we will not be able to provide you with the Services referred to in Art. 2.A).
The provision of data for the purposes referred to in Art. 2.B) is optional. You may therefore decide not to provide any data or subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the Services offered by the Data Controller. You will, however, continue to have the right to the Services referred to in Art. 2.A).
8. Rights of the Data Subject
As a data subject, you have the rights referred to in Art. 7 of the Privacy Code and Art. 15 GDPR, specifically the rights to:
obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
obtain information regarding: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic tools; d) the identification details of the Data Controller, data processors and the designated representative pursuant to Art. 5, paragraph 2 Privacy Code and Art. 3, paragraph 1 GDPR; e) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them as designated representatives within the territory of the State, processors or persons in charge;
obtain: a) the updating, correction or, where interested, integration of data; b) the deletion, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) confirmation that the operations referred to in letters a) and b) have been brought to the attention, including their content, of those to whom the data have been communicated or disclosed, except where such fulfilment proves impossible or involves the use of means clearly disproportionate to the protected right;
object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising material or direct sales communications or for carrying out market research or commercial communications, through the use of automated calling systems without operator intervention by e-mail and/or through traditional marketing methods by telephone and/or paper mail. Please note that the data subject’s right to object, as set out in point b) above, for direct marketing purposes through automated methods also extends to traditional methods and that the possibility remains for the data subject to exercise the right to object only partially. Therefore, the data subject may decide to receive only communications through traditional methods, only automated communications, or neither type of communication.
Where applicable, you also have the rights referred to in Articles 16-21 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
9. Methods for Exercising Rights
You may exercise your rights at any time by sending:
– a registered letter with return receipt to Iron Spa., Via dei Mugnai, 12 – Zona Industriale S. Maria degli Angeli – 06081 – ASSISI (PG)
– an e-mail to privacy@ironspa.com.
10. Data Controller, Processors and Persons in Charge
The Data Controller is Iron Spa., with registered office in Via dei Mugnai, 12 – Zona Industriale S.
Maria degli Angeli – 06081 – ASSISI (PG)
The updated list of data processors / persons in charge of processing is kept at the registered office of the Data Controller.
Cookies
No personal user data is acquired by the website in this regard.
No cookies are used for the transmission of personal information, nor are any so-called persistent cookies of any kind used, meaning systems designed to track users.
The use of so-called session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient browsing of the website.
The so-called session cookies used on this website avoid the use of other IT techniques that could potentially compromise the confidentiality of users’ browsing and do not allow the acquisition of personal identification data of the user.
Extended Cookie Policy
Cookies consist of portions of code installed within the browser that assist the Data Controller in providing the service according to the purposes described. Some of the purposes for installing Cookies may also require the User’s consent.
Technical Cookies and Aggregate Statistics Cookies
Activities strictly necessary for operation
This Application uses Cookies to save the User’s session and to perform other activities strictly necessary for its operation, for example in relation to traffic distribution.
Activities for saving preferences, optimization and statistics
This Application uses Cookies to save browsing preferences and optimize the User’s browsing experience. These Cookies include, for example, those used to set language and currency preferences or for the management of statistics by the website owner.
Other types of Cookies or third-party tools that may use them
Some of the services listed below collect statistics in aggregate form and may not require the User’s consent or may be managed directly by the Data Controller – depending on what is described – without the assistance of third parties.
If any of the tools listed below include services managed by third parties, these may – in addition to what is specified and even without the knowledge of the Data Controller – carry out User tracking activities. For detailed information, we recommend consulting the privacy policies of the services listed.
• Interaction with social networks and external platforms
These services allow interaction with social networks or other external platforms directly from the pages of the Application. The interactions and information acquired by this Application are in any case subject to the User’s privacy settings relating to each social network.
If a service allowing interaction with social networks is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages where it is installed.
• Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.
Google Analytics (Google)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize advertisements from its advertising network.
Personal data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out
• Displaying content from external platforms
Google Map Widget (Google)
Google Map is a map display service managed by Google Inc. that allows this Application to integrate such content within its pages.
Personal data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
• Contacting the User
Contact Form (This Application)
By filling in the contact form with their Data, the User consents to its use for responding to requests for information, quotations, or any other type of request indicated by the form heading.
Personal data collected: Surname, Email, Address, Name and Telephone Number.
How can I control the installation of Cookies?
In addition to what is indicated in this document, the User may manage Cookie preferences directly within their browser and prevent – for example – third parties from installing Cookies.
Through the browser settings, it is also possible to delete Cookies installed in the past, including the Cookie that may have stored consent for the installation of Cookies by this website. It is important to note that disabling all Cookies may affect the proper functioning of this website. The User can find information on how to manage Cookies in their browser at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Windows Explorer.
In the case of services provided by third parties, the User may also exercise their right to object to tracking by consulting the privacy policy of the third party, using the opt-out link if explicitly provided, or by contacting the third party directly.
Without prejudice to the above, the Data Controller informs the User that they may use Your Online Choices. Through this service, it is possible to manage tracking preferences for most advertising tools. The Data Controller therefore recommends that Users use this resource in addition to the information provided in this document.
Since the installation of Cookies and other tracking systems carried out by third parties through the services used within this website cannot be technically controlled by the Data Controller, any specific reference to Cookies and tracking systems installed by third parties should be considered indicative. For complete information, please refer to the privacy policy of any third-party services.
Optional Provision of Data
Except for what is specified regarding browsing data, the User is free to provide personal data included in request forms or otherwise indicated in specific sections of the website in order to request the sending of informational material or other communications.
Failure to provide such data may make it impossible to obtain what has been requested.
Methods of Processing
Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are adopted to prevent data loss, unlawful or incorrect use and unauthorized access.
Rights of Data Subjects
The subjects to whom the personal data refer have the right, at any time, to obtain confirmation of the existence or non-existence of such data and to know their content and origin, verify their accuracy or request their integration, updating, or correction (Art. 7 of Legislative Decree no. 196/2003).
Pursuant to the same article, they have the right to request the deletion, transformation into anonymous form or blocking of data processed in violation of the law, as well as to object, in any case, on legitimate grounds, to their processing.
This Privacy Policy may be modified periodically and the use of the information collected is subject to the Privacy Policy in force at the time of use.
This document, published at www.ironassisi.com, constitutes the “Privacy Policy” of this website and will be subject to updates (previous versions remain available at the same address).
