Privacy policy pursuant to Legislative Decree 196/03 and EU Regulation no. 679/2016

Pursuant to art. 13 of Legislative Decree 196/03 and following the entry into force of EU Regulation no. 679/2016 in accordance with the provisions of art. 13 of the aforementioned European Regulation, we wish to inform you of the following:

Purpose of the treatment

Your personal data, freely communicated and acquired by us due to the activity carried out by: Metal Group srl Via Busano 47, 10080 Rivara Canavese – Turin VAT number: 08816700010 Tax Code: will be processed lawfully and correctly for the following Purpose: The data processed are updated, relevant, complete and not in excess of the purposes listed above for which they are collected and subsequently processed.

Processing methods

The data will be processed, in compliance with the necessary security and confidentiality, through the following methods: data collection from the data subject, collection and recorded for specific, explicit and legitimate purposes, used in further processing operations in terms compatible with these purposes , processing carried out with the aid of electronic and automated tools (data collection electronically, directly from the interested party).

Legal basis of the treatment

The legal basis for the processing of your personal data is based on registration on the web portal http://www.metalgroup.it. Legitimate interests pursued by the Data Controller: The legitimate interests pursued by the Data Controller in the processing of data is given by having to respect and honor the contractual obligations signed between the parties. Pursuant to art. 6 the lawfulness of the treatment is based on the consent clearly expressed by the interested party, documented in writing. Mandatory or optional nature of the provision of data and consequences of a refusal to respond: the nature of the provision of data by you is mandatory so that the data controller can provide the requested services.

Disclosure of data to third parties

Your personal data will be processed by the Data Controller, by the Data Processors appointed by him and by the strictly authorized processors. Your personal data are not disclosed.

Conservation times

Your personal data will be kept for nr. 10 years, from the termination of the service / product supply relationship at the computer archives owned by Metal Group srl.

Intention of the Data Controller

The Data Controller will not transfer your personal data to a third country or to an international organization.

Owner and manager of the treatment

The data controller is Metal Group srl. Contact details of the Data Controller, mail: metalgroup@metalgroup.it The interested party may at any time exercise the rights reserved to him, sanctioned by art. 7 of which the full text is reported: art. 7 Legislative Decree 196/2003 and art. 15 EU Regulation 679/2016 – Right of access to personal data and other rights – “The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form. The interested party has the right to obtain the indication: of the origin of the personal data; the purposes and methods of treatment; the logic applied in case of treatment carried out with the aid of electronic instruments; the identity of the data controller, of the manager and the representative appointed pursuant to art. 5 paragraph 2; of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents. The interested party has the right to obtain: updating, rectification, that is, when there is interest, integration of data; the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; the attestation that the operations referred to in letter a. and b. have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right. The interested party has the right to object in whole or in part: for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection; to the processing of personal data concerning him for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication “. In particular, the interested party can at any time ask the Data Controller for access to personal data and for rectification or cancellation except for the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right. The interested party has the right to object in whole or in part: for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection; to the processing of personal data concerning him for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication “. In particular, the interested party can at any time ask the Data Controller for access to personal data and for rectification or cancellation except for the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right. The interested party has the right to object in whole or in part: for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection; to the processing of personal data concerning him for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication “. In particular, the interested party can at any time ask the Data Controller for access to personal data and for rectification or cancellation for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection; to the processing of personal data concerning him for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication “. In particular, the interested party can at any time ask the Data Controller for access to personal data and for rectification or cancellation for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection; to the processing of personal data concerning him for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication “. In particular, the interested party can at any time ask the Data Controller for access to personal data and for rectification or cancellation

of the same or the limitation of the processing concerning him or to oppose their treatment, in addition to the right to data portability. The interested party has the right to withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation and has the right to lodge a complaint with a supervisory authority. The exercise of rights can be exercised by writing to the email address metalgroup@metalgroup.it.