(in accordance with article 13 Re.UE 2016/679 and the Provision of the Authority for the Protection of Personal Data n.229 08.05.2014)
The companies of Gruppo Profilati consider of fundamental importance the protection of the personal data of the Users of the website www.gallianindustrie.com (hereinafter named "the Site") of their existing and/or potential customers and of the subjects with whom they have, for various reasons, a contractual relationship. Therefore, with this declaration, in line with art. 13 Reg.UE 2016/679 (General Data Protection Regulation), the companies of Gruppo Profilati intend to share their personal data processing policy.
1) Type of data processed by the Profilati Group
The computer systems and software procedures used to operate the Site acquire, during their normal operations, personal data whose transmission is implicit in the use of Internet communication protocols (internet domain and IP protocol, type of browser and operating system of the computer being used, date, period spent on the site, pages viewed, and the search engine from which the site is entered). Such information is not collected for other interested parties or interests, yet nevertheless, by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by the Users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the response status given by the server (correct receipt, error etc.) and other parameters relating to the operating system and the user's IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and shall be deleted immediately after processing, unless expressly requested by a legal authority.
Processing of customer and supplier user data
The companies of the Profilati Group guarantee that the data of their existing and/or potential customers, suppliers and partners, as well as the personal data of candidates for job offers, is processed in full compliance with current legislation on the protection of personal data.
2) Purpose of processing, legal basis and retention period
The website serves as a mere redirect page to the websites of the companies belonging to the Profilati Group. For more information, the User should view the privacy policies published on the respective websites listed below:
https://www.profilati.com/it/ - Profilati S.p.a. and Trafilerie emiliane Sud S.p.a.
http://www.eku.it/ - Eku Sistemi S.r.l. and C&S Profilati Puglia S.r.l.
https://pietrogalliani.com/ - Pietro Galliani S.p.a.
3) Data Controller
The Data Controllers of the respective websites are:
- Profilati S.p.a, in the form of its legal representative pro tempore, with registered office in Medicina (BO) Via P. Galliani 135, P.I. 00642201206. Co-Holders of the Treatment are: Trafilerie Emiliane Sud S.p.a., in the person of its legal representative pro tempore, with registered office in Basciano (TE), Piazzale Pietro Galliani, P.I. 00749360673; Eku Sistemi S.r.l. in the person of its legal representative pro tempore, with registered office in Segrate (MI), Via E. Fermi 20, P.I. 04803010968; Eku Sistemi Roma S.r.l. in the person of its legal representative pro tempore, with registered office in Guidonia Montecelio (RM), Via Monte Nero 85, P.I. 11295261009; C&S Profilati Puglia S.r.l., in the person of its legal representative pro tempore, with registered office in Massafra (TA), Strada Statale Appia Km 632 + 250, P.I. 0216190736.
- Pietro Galliani SpA in the person of its legal representative pro tempore, with registered office in Vergato (BO), Via Molino Malpasso n.65, P.I.00640581203.
4) Scope of data communication
The personal data provided by Users may be communicated to public, institutional or professional subjects authorized by law to request the acquisition as well as, exclusively for the purposes set forth in Article 1, to a third-party of which the companies make use of in the performance of their respective business activities, such as, for example and not limited to, commercial agents, authorized resellers, accounting and tax consultants, legal and sector consultants, independent auditors, computer supply and assistance companies and banking institutions. It is specified that such "third parties", not being the Data Controllers, in accordance with the provisions of Art. 28 of the EU Regulation 2016/679, have the role of Data Processors and consequently, in accordance with a specific contractual agreement, have to respect the security standards regarding the processing of the data communicated to them. The list of third parties is available when expressly requested to the addresses indicated in the individual privacy policies of the sites indicated in Article 3.
6) Rights of interested parties
In accordance with the provisions of articles 15ss of the EU Reg. 2016/679, the interested parties can, at any time, exercise their rights to each Data Controller: "Right of access" which allows the interested party to access their personal data and obtain a copy. "Right of rectification" which allows the interested party to obtain the rectification of their data, should it prove to be inaccurate, or the integration of their own data, should it be incomplete; "Right of cancellation" which allows the interested party to obtain the cancellation of their data in the cases set out in art.17 EU Reg. 2016/679; "Right to treatment limitation" which allows the interested party to obtain the limitation of the processing of their data in the cases set out in art.18 EU Regulation 2016/679; "Right to data portability" which allows the interested party to receive their personal data in a structured format, that can be commonly used and readable electronically, and to request the transmission, by the companies of the Profilati Group, to another Data Controller; "Right of opposition" which allows the interested party to object, at any time, for reasons related to their personal situation, to the processing of personal data concerning them, in accordance with Article 6, paragraph 1, lett. e) or f) EU Reg. 2016/679, as well as to oppose the processing of data carried out for direct marketing purposes; "Right to make a complaint" which allows the interested party to lodge a complaint with the Authority for the Protection of Personal Data pursuant to and for the purposes of art. 77 Reg.UE 2016/679.
It is explicitly specified that, before being able to provide, or modify any information, it may be necessary to verify the identity of the interested party.