This Privacy Policy describes the management of personal data relating to the user or visitor ("data subject") collected by MV Extrusion S.p.A. ("Company") through the website www.mvextrusion.it ("Website"), in compliance with EU Regulation No. 2016/679 and applicable national legislation on personal data protection (hereinafter referred to as "Privacy Legislation").
DATA CONTROLLER
The data controller is MV Extrusion S.p.A., headquartered in 75012 Bernalda (MT), Italy – Zona P.I.P. (VAT No. IT00503900771). The data subject may contact the Data Protection Officer (DPO) at the following address: Bernalda (MT), Italy – Zona P.I.P.
CATEGORIES OF DATA PROCESSED
Data voluntarily provided by users/visitors
The optional, explicit, and voluntary sending of emails to the addresses indicated on the Website entails the subsequent acquisition of the sender’s address, as well as any other personal data included in the communication, necessary to fulfill a specific request for information or collaboration, or to provide the requested service. Specific summary notices may be displayed in sections of the Website prepared for particular requests and services and may be subject, where applicable, to the data subject’s consent.
Browsing data
The IT systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. These data are not collected to be associated with identified data subjects, but by their nature could, through processing and association with data held by third parties, allow the identification of the computers connecting to the Website. This category includes IP addresses or domain names of the computers used by users connecting to the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (success, error, etc.), and other parameters related to the user’s operating system and IT environment. These data may be used solely to obtain anonymous statistical information on the use of the Website and to ensure its proper functioning. They may also be used to ascertain liability in the event of hypothetical cybercrimes against the Website.
Cookies
Cookies are small text files that may be sent to and stored on the user’s computer by visited websites, to be retransmitted to the same websites upon subsequent visits. For further details, please refer to the Cookie Policy available on the website www.mvextrusion.it.
PURPOSES AND LEGAL BASIS OF DATA PROCESSING
| Purpose | Legal Basis |
|---|---|
| A. The Company processes the user’s personal data to provide the requested service and/or product, to respond to or fulfill a user’s request, including pre- and post-sales support. | A. Processing is necessary for the performance of a contract and/or pre-contractual measures requested by the user. |
| B. The Company processes personal data to send the user information about its own or third-party products, with the user retaining the right to object to such communications at any time, including selecting preferred contact methods. | B. Processing is based on the user’s prior consent. |
| C. The Company processes personal data for profiling purposes for advertising and/or commercial use, to personalize services based on user preferences, such as presenting content aligned with interests and developing tailored services. The user may withdraw consent at any time. | C. Processing is based on the user’s prior consent. |
| D. The Company processes personal data to ensure the Website is up-to-date and meets user needs, to analyze, review, and improve products or services offered, to provide a user-friendly browsing experience, to ensure compliance with Website terms of use, and to protect the Company’s rights and assets. Data used for these purposes will remain strictly anonymous and will not be used to identify users or be aggregated with personal data. | D. Processing is based on the Company’s legitimate interest in protecting its assets, business, and rights. |
| E. The Company processes personal data to comply with legal, regulatory, or EU obligations. | E. Processing is necessary to comply with legal obligations. |
NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL
Providing data for purposes A, D, and E is mandatory, and refusal will prevent the Company from fulfilling contractual obligations and providing requested functionalities, services, and information. Data provision for purpose E is automatic and implicit in Internet transmission protocols.
Providing data for purposes B and C is optional, and refusal will not affect the provision of services, functionalities, or information requested via the Website.
METHODS OF DATA PROCESSING
Data may be processed using paper-based, automated, or electronic methods, including ordinary mail, email, telephone (e.g., automated calls, SMS, MMS), fax, and any other IT channel (e.g., websites, mobile apps).
OTHER ENTITIES THAT MAY PROCESS DATA
Data may be processed by entities acting on behalf of the Company under specific contractual obligations, within EU or non-EU countries. Data may be disclosed to third parties to comply with legal obligations, respond to public authority orders, or exercise the Company’s rights in legal proceedings.
DATA TRANSFER OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
In the context of the Company’s contractual relationships, data may be transferred outside the EEA, including storage in databases managed by third-party companies acting on behalf of the Company. Database management and data processing are bound to the purposes for which the data were collected and are carried out in full compliance with applicable data protection laws.
Whenever data are transferred outside the EEA, the Company will adopt all appropriate and necessary contractual measures to ensure an adequate level of data protection, including – among others – agreements based on Standard Contractual Clauses approved by the European Commission.
LINKS TO THIRD-PARTY WEBSITES
Third-party websites accessible from this Website are under the responsibility of those third parties. The Company disclaims any responsibility regarding requests and/or provision of personal data to third-party websites.
DATA RETENTION
Data processed to provide requested information and services will be retained by the Company for the period strictly necessary to achieve those purposes.
However, the Company may retain such data for a longer period to manage any disputes related to the provision of services.
USER RIGHTS
The user/visitor is entitled to the following rights (Articles 15–22 of the GDPR):
- Right of access: to obtain confirmation from the Company as to whether or not personal data are being processed and, if so, access to such data;
- Right to rectification and erasure: to obtain the correction of inaccurate data and/or completion of incomplete data or the deletion of data for legitimate reasons;
- Right to restriction of processing: to request suspension of processing for legitimate reasons;
- Right to data portability: to receive data in a structured, commonly used, and machine-readable format, and to transmit such data to another controller;
- Right to object: to object to data processing for legitimate reasons, including processing for marketing and profiling purposes, if applicable;
- Right to lodge a complaint with the competent data protection authority in case of unlawful data processing.
The user/visitor may exercise the above rights by contacting the Data Protection Officer (DPO) at the following address: Bernalda (MT), Italy – Zona P.I.P.
CHANGES
Last updated: May 24, 2018.
The Company reserves the right to partially or fully modify this Privacy Policy or simply update its content (e.g., following changes in applicable law). Users are advised to regularly check this web page and refer to the most recent version of the notice provided herein.