PRIVACY POLICY

This Privacy Policy is provided in accordance with Article 13 of the European Regulation No. 679/2016 and applies exclusively to all data collected through the website grasselli.com. This Privacy Policy is subject to updates, which will be promptly published on the website. This Privacy Policy, along with the Cookie Policy, establishes the basis on which the personal data of the data subject will be processed.

Data Controller

The Data Controller of the data collected through this website is Grasselli S.p.A., with registered office at Via S. D’acquisto, 2/c – 42020 Albinea (RE), email: info@grasselli.com.

Personal Data

Personal data refers to any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Categories of Processed Personal Data

Among the personal data processed by this website, either independently or through third parties, there are common data such as: cookies, usage data, contact data including name, email, and phone number.

Methods of Personal Data Processing

The personal data provided or acquired will be processed in accordance with the principles of fairness, lawfulness, transparency, and protection of confidentiality under the applicable regulations. The Data Controller processes the personal data of the users by adopting the appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of the personal data. The processing is carried out using computers and/or IT-enabled tools, with organizational methods and logic strictly related to the purposes indicated.

Purposes of Personal Data Processing and Legal Basis

Personal data may be collected independently by the Data Controller or through third parties. In this case, the computer systems and software procedures used for the operation of this website acquire certain personal data of the users, of a technical and IT nature (e.g., IP address, browser type, operating system, domain name, URLs of the websites visited, etc.), the transmission of which is inherent in the use of Internet. This data may be processed for the sole purpose of obtaining anonymous statistical information about the use of the website and to ensure its proper functioning, and will be deleted immediately after processing. The data voluntarily provided by the data subject will be processed in compliance with the conditions of lawfulness under Article 6 of the GDPR and will be processed to enable the website to provide its services, as well as for the purposes indicated below, and will be kept for the time necessary to fulfill these purposes. The purposes of the processing are as follows:

1. Responding to inquiries and providing information
The data will be processed in order to be contacted or to follow up on specific requests made by the data subject to the Data Controller, for communications related to the services and/or contents provided by the Data Controller, through email or other communication tools such as telephone.
Legal basis: This processing is optional and based on the data subject’s consent, although the provision of data is necessary to achieve the specified purpose.
Data retention period: Until the data subject withdraws their consent.
2. Pre-contractual information and fulfillment
The data will be processed in order to be contacted or to follow up on specific requests made by the data subject to the Data Controller, for communications through email or completion of other communication tools such as contact forms.
Legal basis: This processing is optional and based on the data subject’s consent, although the provision of data is necessary to achieve the specified purpose.
Data retention period: Until the data subject withdraws their consent.
3. Statistics
The data will be processed to conduct statistical analysis on aggregated and anonymous data in order to analyze the behaviors of the data subject, improve the products and services provided by the data controller, and meet the expectations of the data subject.
Legal basis: This processing is based on the freely given consent of the data subject.
Data retention period: Until the data subject revokes their consent.
4. Work with us
The data will be processed in order to be contacted again or to follow up on specific requests for spontaneous applications and/or for a particular job position addressed to the data controller by the data subject.
Legal basis: This processing is optional and based on the consent of the data subject; however, providing the data is necessary to achieve the stated purpose.
Data retention period: Until the data subject revokes their consent.

Data Disclosure

In addition to the data controller, in some cases, the data may be accessed by: a) Categories of specifically trained employees involved in the organization of the website (administrative, commercial, marketing, legal, system administrators); b) External parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the data controller according to Article 28 of the GDPR. The updated list of Data Processors, if appointed, can always be requested from the data controller; c) Public or private entities that may access the data in compliance with legal obligations; d) Entities that perform ancillary and instrumental tasks related to the activities of the data controller.

Processing Time

As expressly provided in Article 5(1)(e) of the GDPR, the data will be stored for the time necessary for processing them in relation to the provision of the requested service or the purposes described in this document. At the end of the retention period, personal data will be deleted, and therefore, the rights of access, erasure, rectification, and portability of the data cannot be exercised.

Cookies

This website uses cookies. Cookies are small text files that can be used by websites to make the user’s experience more efficient, personalize content and ads, provide social media features, and analyze traffic.
Cookie Policy

Location of Processing and Data Transfer Abroad

The data is processed at the operating headquarters of the data controller. For further information, you can contact the data controller. The data may be processed by individuals and/or legal entities operating on behalf of the data controller and subject to specific contractual obligations, located in EU member states or non-EU countries. In the event that the data is transferred outside the European Economic Area (EEA), the data controller will adopt all appropriate contractual measures to ensure adequate protection of the data.

Exercise of Data Subject’s Rights

The data subject has the right to exercise the rights provided for in Articles 7, 15-22 of the European Regulation 679/2016. In particular, the data subject has the right to revoke their consent at any time and, upon simple request to the data controller, may request access to personal data, receive the personal data provided to the data controller, and, where possible, transmit them to another data controller without hindrance (so-called data portability), obtain updates, restrict processing, rectify data, and delete data processed in violation of applicable regulations. The data subject has the right, for legitimate reasons, to object to the processing of personal data concerning them and to the processing for the purposes of sending advertising material, direct sales, and conducting market research. The data subject also has the right to lodge a complaint with the Privacy Guarantor, the supervisory authority for the protection of personal data, or to take legal action. The data subject may exercise their rights by contacting the data controller via email at: info@grasselli.com

Tools Used for the Processing of Personal Data

CONTACT FORM
By filling out the Contact Form with their Data, the data subject consents to their use to respond to information requests or any other purpose indicated in the form header. Personal Data collected through the Contact Form: Email, Name, and Surname.

EMAIL ADDRESS MANAGEMENT
These services allow the management of a database of email contacts, phone contacts, or contacts of any other type used to communicate with the data subject. These services may also collect data concerning the date and time when the data subject viewed the messages, as well as their interaction with them, such as information on clicked links included in the messages.

STATISTICS
Statistical services allow the data controller exclusively to monitor and analyze traffic data, tracking the behavior of the data subject.

INTERACTION WITH SOCIAL NETWORKS
These services allow for interactions with social networks directly from the pages of this website. The interactions and information acquired by this website are always subject to the data subject’s privacy settings for each social network. In the event that an interaction service with social networks is installed, it is possible that, even if users do not use the service, it may collect traffic data relating to the pages on which it is installed.

Changes to this Privacy Policy

The data controller reserves the right to make changes to this Privacy Policy at any time by giving notice to users on this page. Therefore, please consult this page frequently, referring to the date of the last modification indicated at the bottom. If the data subject does not accept the changes made to this Privacy Policy, they are required to discontinue the use of this website and may request the data controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected until that point.

Updated Privacy Policy as of June 2023.