Steel & Co. S.r.l. hereinafter, for the sake of brevity, “Steel & Co.” or the “Data Controller” informs users that the personal data acquired through browsing this website will be processed in compliance with the applicable personal data protection laws.

With reference to the methods used to manage and process the personal data of users who browse this website, pursuant to Article 13 of EU Regulation No. 679/2016, Steel & Co. S.r.l. provides the following information:

Types of data collected, purposes and legal basis of processing

Browsing data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the terminals used by users connecting to the website, MAC Media Access Control addresses, URI Uniform Resource Identifier addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response successful, error, etc., and other parameters relating to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of the website and to check that it is functioning correctly, and is deleted immediately after processing. The data may also be used to ascertain liability in the event of hypothetical cybercrimes against the website. The legal basis that legitimizes the processing of personal data for this purpose is the case provided for by Article 6, paragraph 1, letter b of EU Regulation No. 679/2016, namely to allow the user to use the requested service. The same data may also be used to comply with legal obligations or requests from judicial authorities. The legal basis that legitimizes the processing of personal data for this purpose is the case provided for by Article 6, paragraph 1, letter c of EU Regulation No. 679/2016, namely where processing is necessary to comply with a legal obligation to which the Data Controller is subject.

Data voluntarily provided by the user

Following the voluntary sending of e-mail messages to the e-mail addresses available on the website, Steel & Co. S.r.l. may process the sender’s e-mail address and any further personal data contained in the message in order to reply, again by e-mail, to the requests made by the user. The legal basis that legitimizes the processing of personal data for this purpose is the case provided for by Article 6, paragraph 1, letter b of EU Regulation No. 679/2016, namely to provide the user with the requested service. The same data may also be used to comply with legal obligations or requests from judicial authorities. The legal basis that legitimizes the processing of personal data for this purpose is the case provided for by Article 6, paragraph 1, letter c of EU Regulation No. 679/2016, namely where processing is necessary to comply with a legal obligation to which the Data Controller is subject.

The data subject is invited not to enter or send, through the tools available on the website, “special categories of personal data”, “biometric data”, “genetic data”, “health-related data”, or “data relating to criminal offences or convictions”, as defined by the legislation in force.

Such data, if provided by the data subject, will be deleted immediately.

Cookies

The website uses technical cookies session and browsing cookies to ensure normal browsing and use of the website, allowing, for example, authentication to access restricted areas. The website also uses third-party analytical cookies with reduced identification potential in order to monitor the use of the website by users for web platform optimization and statistical analytical purposes, as well as profiling cookies. For all information relating to the processing of personal data carried out through cookies, please refer to the extended cookie policy, which can be accessed from every page of the website.

Data retention period

The personal data collected and processed as a result of browsing this website will be retained for the entire period during which the service is provided and, in any case, will be deleted or anonymized within 7 days. The personal data sent independently by users through the tools available on the website will be deleted after the requested service has been provided or after replying to them and, in any case, within a maximum period of 15 days from the completion of such activity, except for data required to comply with tax, accounting and administrative regulations or to comply with other legal obligations and to document the activities carried out.

Processing methods

The personal data collected will be processed, stored and handled using electronic tools and will be stored both on IT media and paper media, organized in databases and on any other suitable type of medium.

Specific security measures are adopted to prevent data loss, unlawful or incorrect use and unauthorized access.

The processing of personal data carried out by Steel & Co. S.r.l. does not involve automated decision-making processes.

Communication of personal data

The communication of browsing data is a necessary requirement for providing the requested service browsing the website and is therefore mandatory for this purpose: failure by the data subject to provide personal data will make it impossible for Steel & Co. S.r.l. to allow browsing of this website. The communication of data for further purposes is optional: failure to provide data in such cases will have no consequences for the data subject, but may make it impossible to provide the user with the requested response.

Subjects to whom personal data may be communicated

The personal data collected will not be disclosed and may be communicated, in addition to subjects who are granted the right and interest to access your personal data by law or by secondary and/or EU regulations, to internal personnel authorized by the Data Controller, as well as to companies, associations or professional firms that provide services and activities on behalf of the Data Controller as Data Processors for the fulfilment of legal obligations and for any organizational and administrative requirement necessary to provide the requested services.

The names of any further subjects who may become aware of your personal data as “Data Processors” are listed in an updated register available at Steel & Co. S.r.l.

Transfer of data abroad or to international organizations

Steel & Co. S.r.l. does not transfer the personal data of data subjects collected through this website and the tools provided therein abroad or to international organizations.

Links to third-party websites or services

This policy is provided only for the processing of personal data carried out through this website or the tools provided by it, and not for any other websites that may be visited by the user through links, whose operators act as independent data controllers.

Rights of the data subject

In relation to the above-mentioned processing of personal data, the data subject has the right to exercise, at any time, the rights provided for by EU Regulation No. 679/2016.

If the data subject believes that the processing concerning them violates the legislation in force, they have the right to lodge a complaint with a supervisory authority.

Data Controller – Contact details

Steel & Co. S.r.l.

Corso Vittorio Emanuele 12

26100 Cremona CR

Tel: +39 0372 800186

Fax: +39 0372 801868

VAT No.: 01580350195