Privacy Policy Contacts

PRIVACY POLICY PURSUANT TO EU REGULATION 2016/679, hereinafter also referred to as GDPR

1. General Information: Metalarredo s.r.l. (hereinafter also referred to as the “Data Controller” or “Company”) hereby informs you that it will process the personal data provided by you in the form or after filling in the form for the purposes indicated below. Only data required to achieve the purposes of this privacy policy shall be requested and processed.
2. Purposes and legal basis: The Data Controller may process data:

1. In order to follow up on your request for information and, therefore, to do everything necessary to fulfil your request. The processing is based on the following legal basis: consent of the data subject.
2. to fulfill an obligation required by law, regulation or EU legislation; the legal basis for processing is the fulfillment of legal obligations;
3. for legitimate interests such as those of asserting or defending a right of Society. The processing is based on the following legal basis: pursuit of legitimate interests. In considering such legitimate interests, it has been analyzed that the same do not compromise or interfere with the interests or fundamental rights and freedoms of the data subject (legitimate interest has been assessed based on a Triple Test available by contacting the Company).

3. Mandatory or optional nature of data provision: Provision of data for the purposes referred to in point 2, letter A of the policy is optional. However, the failure to provide data may make it impossible to fulfil the request. Consent for the purposes referred to in point 2, letter A of this policy is optional (and can be withdrawn at any time by contacting the Data Controller). However, the failure to give consent will make it impossible to fulfil the request. Provision of data for the purposes referred to in point 2, letter B and C of this policy is necessary and the failure to provide such data will make it impossible to fulfil the request.
4. Categories of data recipients: the data collected and processed for the purposes referred to in point 2, letter A above may be communicated to forwarding agents if a request is made to send information material in paper form.

For the purposes of point 2 lett B of this notice, data may be disclosed to public agencies, judicial organs and police organs.

For the purposes of point 2 lett C of this information, the data may be disclosed to lawyers-legal advisers, public agencies, judicial organs and police organs, and to the post office (as they may see the address for sending any written communications).

The Company will only communicate data indispensable to pursue the single purposes indicated in this policy. The Company may then delegate the processing of data on its behalf to all those subjects specifically delegated to process data (marketing staff, staff in charge of managing the website, including those external to the Data Controller - e.g. legal advisors, IT technicians - staff in charge of managing the website including those external to the Company, various internal subjects belonging to the sector to which the request is addressed) and data processors (appointed by the Data Controller), including those external to the Data Controller (such as IT outsourcers and website management companies). The list of Data Processors is available by contacting the Data Controller.

3. Data Retention: Data will be retained and processed by the Data Controller for the time necessary to pursue the purposes contained in this policy. The data retention period is as follows:

- for legal obligations, regulations and community legislation, data may be kept for the periods imposed by these regulatory sources;

- for the purposes set forth in point 2 letter A of this policy, the data may be retained until the request for information has been fulfilled without prejudice to the right of the person concerned, to first request its deletion;

- in any case, all data may be retained for a period necessary to assert or defend a right of the Company, according to Italian civil and penal regulations, and then for a maximum of 10 years from the fulfillment of the request, unless litigation or disputes make an additional retention period necessary.

3. Data Controller: The Data Controller is METALARREDO S.R.L based in Via Marco Polo no. 15, San Fior (TV) Tel. 0438.430198 email This email address is being protected from spambots. You need JavaScript enabled to view it.
4. Rights: we inform you that the GDPR provides for the possibility for the data subject to request from the Company (at the above-mentioned contact details) access to and rectification of personal data, deletion of data or restriction of the processing concerning him/her, data portability; the data subject may also have the possibility, again by contacting the Company, to object to the processing of data and to exercise the other rights contained in Chapter 3 section 1 of the GDPR among which is mentioned that of revoking consent, where provided: revocation of consent does not affect the lawfulness of the processing based on the consent given before revocation.
5. Complaints: Where you believe that data processing is taking place in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Italian Supervisory Authority (whose references can be found at www.garanteprivacy.it), as provided for in Article 77 of the GDPR, or to take appropriate legal action (Article 79 of the GDPR). You may also appeal to the Control Authority of the state where you normally reside or work. A list of the Supervisory Authority can be found at the link www.garanteprivacy.it/home/footer/link
6. Processing methods: the data may be processed by the Data Controller on paper, manually and using computer and/or automated systems (therefore, it may store and process data on paper and computer). The Data Controller shall retain and process the data by adopting all the measures necessary for the protection of said data, in compliance with all the regulations in force (and therefore also in compliance with the principles of fairness, lawfulness, transparency and protection of the confidentiality and rights of data subjects) and with logics strictly related to the purposes indicated in this policy. Data will be processed exclusively to achieve the purposes indicated in this policy. The data will be stored, as far as the Data Controller is concerned, at the offices of the Data Controller and at the Data Processors appointed by the Data Controller (as well as third parties indicated in this policy to whom the data are communicated and who process them in their capacity as independent data controllers). The data will also be entered in databases, including computer databases.
7. Curriculum: if CVs are sent, they will be processed only for personnel selection purposes (by personnel management staff) and will not be communicated or disclosed to third parties. Special data (e.g. data that reveals state of health, religious beliefs, etc.) are not requested, and if present, will only be processed for assessment and if required by current legislation (e.g. protected categories). The data may be stored for one year unless a request for cancellation is made.

Disclosures updated as of 09/10/2024. This update is made within a policy of constant revision of the disclosures. Versions of previous disclosures can be found by contacting the Data Controller (contact details in section 6)