Valsecchi Roberto Srl Privacy Policy

Data Protection. EU Regulation No. 2016/679 pursuant to Articles 13 on the protection of personal data (GDPR) and request for consent to process personal data collected from the data subject

EU Regulation No. 2016/679 (on the protection of personal data), hereinafter referred to as the GDPR, and, where relevant, Italian Legislative Decree No. 196 of 30.06.2003 (Personal Data Protection Code), as amended and/or supplemented by adaptation regulations, provides for the protection of individuals and other subjects with regard to the processing of personal data.

According to the applicable legislation, such processing—whether on paper, electronically, or digitally—shall be based on the principles of fairness, lawfulness, transparency, and the protection of the confidentiality and rights of the data subject, as well as the respect for fundamental freedoms.

Pursuant to Articles 12, 13, and 15 of the GDPR, we hereby provide the following information:

Data Controller and Data Processor Identification Details

The data you provide will be processed at the company’s registered office.

The Data Controller is Valsecchi Roberto S.r.l., VAT and Tax Code 02514160130, with registered and production office located at Via Calvenzana Inferiore No. 8, Rogeno (LC), Italy. The legal representative and sole director, Mr. Mario Valsecchi, may be contacted at the email address: info@valsecchiforging.com, solely in the case of information requests via the contact form on the website: valsecchiforging.com.

We also inform you that the company has appointed an External Data Processor, being a certified accountant, as well as the provider of its management software services.

The data may be processed by authorized individuals, collaborators, or external entities duly authorized, working either at our offices or on behalf of the Company.

Types of Data Collected

Among the personal data collected by this website are: phone number, first name, last name, email address, city and address, company name, content of the message or email, message date and time, message sender, unique device identifiers for advertising (e.g., Google Advertiser ID or IDFA), referrer URL, and pageviews.

Personal data may be freely provided by the user or, in the case of usage data, collected automatically while using the website.

Unless otherwise specified, all data requested by this website is mandatory. Failure to provide such data may make it impossible for the website to provide the requested services. In cases where this website indicates certain data as optional, users are free to withhold such information without affecting the availability or operation of the service.

Users unsure about which data is mandatory are encouraged to contact the Data Controller.

The possible use of cookies—or other tracking tools—by this website or by third-party service providers used by this website is intended to provide the service requested by the user, as well as for additional purposes described in this document and in the Cookie Policy.

Purpose and Legal Basis for Data Processing

The personal data provided will be processed exclusively for the purpose of managing orders and executing contracts. The legal basis for the processing is the contract itself or, where applicable, the user’s consent, in the case of information requests via the form on the website valsecchiforging.com.

Details on Personal Data Processing

Personal Data is collected for the following purposes and using the following services:

Telephone Contact (this website)
Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this website, or to fulfill support requests.
Data processed: phone number.

Contact Form (this website)
By filling in the contact form with their data, users consent to their use in responding to information requests, quotes, or any other inquiries.
Data processed: first name, last name, email, phone number, city and address, company name.

Nature of Data Provision and Consequences of Refusal

Data will be processed on paper, electronically, and digitally. Personal data will be stored in relevant databases, accessible only to authorized personnel. No profiling activities will be performed.

As part of the processing activities described, it is necessary to collect and store information relating to identifying data, including personal details, tax code, VAT number, as well as accounting and banking data, and electronic contact details. Only personal details and electronic contact information are collected in the case of information requests submitted via the dedicated form on the website valsecchiforging.com.

Failure to provide or incorrect provision of such data may result in:

• The inability of the Data Controller to ensure proper processing aligned with contractual obligations;

• The potential non-compliance of the processing results with the obligations imposed by the applicable tax and/or administrative regulations to which it is directed.

Providing personal data is mandatory for the proper execution of contractual obligations. Failure to provide such data may prevent the initiation or continuation of the contractual relationship and the fulfillment of related legal or fiscal requirements.

Data Retention Period

Personal data will be stored and processed at the company’s operational headquarters, for the period prescribed by civil and tax laws, and in any case for the duration of the relationship and for ten years thereafter (standard statute of limitations), unless a shorter period is required by law or industry practice.

In the case of information requests via the website www.valsecchiforging.com, data will be retained only until the request is fulfilled.

Scope of Data Communication and Disclosure

The processed data will not be disclosed to parties lacking authorization granted by the Data Controller, without prejudice to the communication or disclosure of data requested, in accordance with the law, by police forces, judicial authorities, intelligence and security agencies, or other public bodies for purposes of State defense or security, or for the prevention, investigation, or prosecution of crimes.

Personal data may be disclosed for the purpose of fulfilling contractual or legal obligations to:

• all entities who are granted the right to access such data by statutory provisions;
• our collaborators, employees, agents, and suppliers, within the scope of their duties and/or any contractual obligations related to business relationships with the data subjects, as well as to banking institutions for the management of receipts and payments;
• postal services, shipping companies, and couriers, for the delivery of documents and/or materials;
• all natural or legal persons, public or private (e.g. legal, administrative and tax consultancy firms, judicial offices, chambers of commerce, etc.), whenever such communication is necessary or functional to the performance of our business activities and for the purposes outlined above.

Within the scope of the purposes outlined in this privacy notice, your personal data will not be disclosed or transferred to third parties established in countries outside the European Union.

Your data may be transmitted to a cloud service provider – in any case operating within the territory of the European Union, with verified technical reliability, proven professional integrity, and in full compliance with the GDPR – solely for the purpose of ensuring data integrity (backup copy).

Data Subject Rights under Articles 15, 16, 17, 18, 20, 21 and 22 of EU Regulation No. 2016/679

• At any time, you may exercise the following rights in relation to the Data Controller:
• Article 15 – Right of access – The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to access the personal data and information regarding such processing.
• Art. 16 – Right to Rectification: The data subject has the right to obtain from the data controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by providing a supplementary statement.
• Art. 17 – Right to Erasure (Right to be Forgotten): – The data subject has the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay, and the data controller is obliged to erase personal data without undue delay in certain cases.
• Art. 18 – Right to Restrict Processing: – The data subject has the right to obtain from the data controller restriction of processing where one of the following applies:
  a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims;
  d) the data subject has objected to processing pursuant to Article 21(1), pending the verification whether the legitimate grounds of the controller override those of the data subject.
• Art. 20 – Right to Data Portability: The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a data controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another controller without hindrance from the controller to which the data were provided. In exercising the right to data portability under paragraph 1, the data subject also has the right to have the personal data transmitted directly from one controller to another, where technically feasible.
• Art. 21 – Right to Object: – The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her based on Article 6(1)(e) or (f), including profiling based on those provisions.
• Art. 22 – Right not to be Subject to Automated Decision-Making, including Profiling: – The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

The aforementioned rights may be exercised by submitting a specific request to the Data Controller, through the designated contact person, using the contact details provided in Article 1 of this privacy notice.

You may lodge a complaint pursuant to Article 77 of the GDPR with the competent supervisory authority based on your habitual residence, place of work, or the place of the alleged violation of your rights. In Italy, the competent authority is the Garante per la protezione dei dati personali, which can be contacted using the information available on the website http://www.garanteprivacy.it.
However, we kindly ask that you contact our company first, so that we may have the opportunity to take appropriate corrective actions.

Requests to exercise your rights will be handled without undue delay and, in any case, within one month of receipt. In cases of particular complexity or if a high number of requests is received, this period may be extended by an additional two (2) months.

Withdrawal of Consent to Processing
The consent you have given for the processing of your personal data for any or all of the purposes described above may be withdrawn by you at any time. The exercise of this right shall not affect the lawfulness of processing based on consent before its withdrawal.

Disclaimer:

This translation has been carried out literally by an artificial intelligence system and is provided for informational purposes only. In case of discrepancies or disputes, only the Italian version shall prevail. The competent jurisdiction for any dispute shall be exclusively that of Italy.