Privacy Policy Newsletter

INFORMATION IN ACCORDANCE WITH REGULATION (EU) 2016/679, hereinafter also GDPR

1. General Information: Metalarredo s.r.l. (hereinafter also referred to as the “Data Controller” or “Company”) hereby informs you that it will process the personal data provided by you in the form or after filling in the form for the purposes indicated below. Only data required to achieve the purposes of this privacy policy shall be requested and processed.
2. Purposes and legal basis: The Data Controller may process data:

1. In order for the Company to carry out marketing communications about its products/services/initiatives, all by the Company to the e-mail address you have indicated (please note that e-mail and SMS/MMS may also be sent electronically with the help of automated tools); the processing has as its legal basis the consent which is always revocable at any time and free of charge by contacting the Company at the addresses indicated in point 6;
2. to fulfill an obligation required by law, regulation or EU legislation; the legal basis for processing is the fulfillment of legal obligations;
3. for legitimate interests such as those of asserting or defending a right of Society. The processing is based on the following legal basis: pursuit of legitimate interests. In considering such legitimate interests, it has been analyzed that the same do not compromise or interfere with the interests or fundamental rights and freedoms of the data subject (legitimate interest has been assessed based on a Triple Test available by contacting the Company).

3. Mandatory or optional nature of data provision: The provision of data for the purposes of point 2 letter A of this notice is optional and failure to provide data and consent will result in the inability to receive communications. The provision of data for the purposes of point 2 letter B and C of this information is required and failure to provide it will result in the inability to receive the communications referred to in point 2 letter A.
4. Categories of data recipients: The data for the purposes of point 2 letter A above will not be disclosed to third parties.

For the purposes of point 2 lett B above, the data may be disclosed to public agencies, judicial bodies and law enforcement agencies.

For the purposes of point 2 lett C above, the data may be communicated to lawyers-legal advisors, public agencies, judicial organs and police organs, and to the post office (as they may see the address for sending any written communications).

Only data that are indispensable for the pursuit of the individual purposes indicated in this information will be communicated.

They may then be delegated by the Company to process data on its behalf, all the subjects specifically delegated to the treatment (marketing employees, site management employees also external to the Socxiety, consultants also external to the Company - e.g. legal consultants, computer technicians, - site management employees also external to the Company, various internal subjects belonging to the sector to which the request is addressed) and data processors (always appointed by the Owner) such as companies outsourcing computer and site management. The list of data processors can always be found by contacting the Data Controller.

3. Data Retention: Data will be retained and processed by the Data Controller for the time necessary to pursue the purposes contained in this information. The data retention period is as follows:

- for legal obligations, regulations and community legislation, data may be kept for the periods imposed by these regulatory sources;

- for the purposes indicated in point 2(A), until the revocation of consent or the request for deletion without prejudice to the retention for the purposes indicated in point 2(B) 2(C) ; in any case, every 2 years you will be sent a communication to understand whether there is still your interest in being subject to the activities referred to in point 2(A) and therefore to the retention of data by the Company for the purposes indicated in that point and if this interest ceases, the data will be deleted without prejudice to the retention for the purposes indicated in point 2(B) and 2(C). If, on the other hand, there is still your interest in being subjected to the activities referred to in 2(A) and thus to the retention of data by the Company for the purposes indicated in that point, you will be sent a further communication of the same nature after 2 years and so on as long as your interest remains.

- in any case, all data may be retained for a period necessary to assert or defend a right of the Company, according to Italian civil and criminal law, and then for a maximum of 10 years from the fulfillment of the request, unless litigation or disputes make an additional retention period necessary.

Data Controller: The Data Controller is METALARREDO S.R.L based in Via Marco Polo no. 15, San Fior (TV) Tel. 0438.430198 email This email address is being protected from spambots. You need JavaScript enabled to view it.

3. Rights: we inform you that the GDPR provides for the possibility for the data subject to request from the Company (at the above-mentioned contact details) access to and rectification of personal data, deletion of data or restriction of the processing concerning him/her, data portability; the data subject may also have the possibility, again by contacting the Company, to object to the processing of data and to exercise the other rights contained in Chapter 3 section 1 of the GDPR among which is mentioned that of revoking consent, where provided: revocation of consent does not affect the lawfulness of the processing based on the consent given before revocation.
4. Complaints: Where you believe that data processing is taking place in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Italian Supervisory Authority (whose references can be found at www.garanteprivacy.it), as provided for in Article 77 of the GDPR, or to take appropriate legal action (Article 79 of the GDPR). You may also appeal to the Control Authority of the state where you normally reside or work. A list of the Supervisory Authority can be found at the link www.garanteprivacy.it/home/footer/link
5. Processing methods: the data may be processed by the Data Controller on paper, manually and using computer and/or automated systems (therefore, it may store and process data on paper and computer). The Data Controller shall retain and process the data by adopting all the measures necessary for the protection of said data, in compliance with all the regulations in force (and therefore also in compliance with the principles of fairness, lawfulness, transparency and protection of the confidentiality and rights of data subjects) and with logics strictly related to the purposes indicated in this policy. Data will be processed exclusively to achieve the purposes indicated in this policy. The data will be stored, as far as the Data Controller is concerned, at the offices of the Data Controller and at the Data Processors appointed by the Data Controller (as well as third parties indicated in this policy to whom the data are communicated and who process them in their capacity as independent data controllers). The data will also be entered in databases, including computer databases.

Disclosure updated as of 09/10/2024. Earlier versions of the disclosure can be found by contacting the Company at the contact information in Section 6.