Steel & Co. S.r.l. hereinafter, for the sake of brevity, “Steel & Co.” or the “Data Controller” informs users that the personal data collected through the contact form on this website will be processed in compliance with the applicable personal data protection laws.

With reference to the methods used to manage and process the personal data of users who browse this website, pursuant to Article 13 of EU Regulation No. 679/2016, Steel & Co. S.r.l. provides the following information:

Types of data collected

Data voluntarily provided by the user

When submitting a contact request through the “Contacts” section, the data voluntarily entered by the user in the form on the page will be collected, including:

The data subject is invited not to enter or send, through the tools available on the website, “special categories of personal data”, “biometric data”, “genetic data”, “health-related data”, or “judicial data”, as defined by the legislation in force.

Such data, if provided by the data subject, will be deleted immediately.

Purposes and legal basis of processing

The data provided by the data subject and collected by the Data Controller through the contact form on this website will be processed in order to:

send the user, who has expressly requested them, the replies and information requested. The legal basis that legitimizes the processing of personal data for this purpose is the case provided for by Article 6, paragraph 1, letter b of EU Regulation No. 679/2016, namely where the requested service is provided to the user.

comply with any obligations provided for by laws or regulations, or with requests from judicial authorities. The legal basis that legitimizes the processing of personal data for this purpose is the case provided for by Article 6, paragraph 1, letter c of EU Regulation No. 679/2016, namely where processing is necessary to comply with a legal obligation to which the Data Controller is subject.

establish, exercise or defend a legal claim in court. The legal basis that legitimizes the processing of personal data for this purpose is the case provided for by Article 6, paragraph 1, letter f and Article 9, paragraph 2, letter f of EU Regulation No. 679/2016, namely where processing is necessary to establish, exercise or defend a legal claim in court.

Data retention period

The personal data collected and processed following their submission through the contact form on this website will be retained only for the time necessary to reply to the user’s request and will be deleted within a maximum period of 60 days from the completion of such activity, except for data required to comply with tax, accounting and administrative regulations or to comply with other legal obligations and to document the activities carried out.

Processing methods

The personal data collected will be processed, stored and handled using electronic tools and will be stored both on IT media and paper media, organized in databases and on any other suitable type of medium.

Specific security measures are adopted to prevent data loss, unlawful or incorrect use and unauthorized access.

The processing of personal data carried out by the Data Controller does not involve automated decision-making processes.

Communication of personal data

The communication of personal data is a necessary requirement in order to receive a reply to contact requests and is therefore mandatory for this purpose: failure by the data subject to provide personal data will make it impossible for the Data Controller to respond to messages received through the completion of the contact form.

Subjects to whom personal data may be communicated

The personal data collected will not be disclosed and may be communicated, in addition to subjects who are granted the right and interest to access your personal data by law or by secondary and/or EU regulations, to internal personnel of the Data Controller, as well as to companies, associations or professional firms that provide services and activities on behalf of the Data Controller as Data Processors for the fulfilment of legal obligations and for any organizational and administrative requirement necessary to provide the requested services. The names of any further subjects who may become aware of your personal data as “Data Processors” are listed in an updated register available from the Data Controller, upon request using the contact details provided in point 9.

Transfer of data abroad or to international organizations

Steel & Co. S.r.l. does not transfer the personal data of data subjects collected through this website and the tools provided therein abroad or to international organizations.

Rights of the data subject

In relation to the above-mentioned processing of personal data, the data subject has the right to exercise, at any time, the rights provided for by EU Regulation No. 679/2016.

If the person to whom the data refers believes that the processing concerning them violates the legislation in force, they have the right to lodge a complaint with a supervisory authority.

Data Controller – Contact details

The Data Controller is:

Steel & Co. S.r.l.

Corso Vittorio Emanuele 12

26100 Cremona CR

Tel: +39 0372 800186

Fax: +39 0372 801868

VAT No.: 01580350195