Information notice concerning the processing of data pursuant to Regulation EU 679/2016

Metalmeccanica snc, with registered office at 13 Via U.Masotto, 36020 Campiglia Dei Berici (VI), with VAT no. 01567500242 (hereinafter the “Controller”), in its capacity as data controller, would like to inform you, pursuant to art. 13 of (It.) Legislative Decree of 30.6.2003 no. 196 (hereinafter the “Privacy Code”) and art. 13 of Regulation EU no. 2016/679 (hereinafter the “GDPR”) that your data will be processed by the following means and for the following purposes:


1. Object of the processing 

The Controller processes personal data, identification data (for example, biographical data, company name, address, telephone number, e-mail address, banking and payment details - hereinafter “data”) that you have disclosed when signing the contract or thereafter and for all other services that you have requested from the Controller.


2. Purpose of the processing

Your personal data are processed:

A) without your express content (art. 24 letters a), b), c) of the Privacy Code and art. 6 letters b), e) of the GDPR), for the following Service Purposes:

-          to conclude contracts for the services of the Controller;

-          to fulfil precontractual, contractual and tax obligations deriving from existing relationships with you;

-          to fulfil obligations deriving from law, regulations, the EU regulatory framework or the order of an Authority (e.g. in anti-money laundering matters);

-          to exercise the rights of the Controller, e.g. its right to defend itself in Court;

B) Only with your prior and express consent (art. 23 and 130 of the Privacy Code and art. 7 of the GDPR), for the following Marketing Purposes:

-          to send you e-mail, mail and/or SMS and/or to contact you by phone, to send you newsletters, commercial messages and/or advertising material on products and services offered by the Controller and to enquire regarding your degree of satisfaction with the quality of the services.


3. Means of processing

Your personal data are processed with the operations mentioned in art. 4 of the Privacy Code and art. 4 no. 2 of the GDPR and specifically: collection, recording, organisation, storage, consultation, treatment, modification, selection, extraction, comparison, use, interconnection, restriction, disclosure, erasure and destruction of the data. Your personal data are processed by paper-based and electronic means. The data will be processed, treated and stored in our IT systems. The Controller will process the personal data for the time necessary for the achievement of the aforementioned processes and, in any case, for no longer than 10 years from the end of the relationship for administrative service purposes.


4. Access to the data

Your data may be rendered accessible for the purposes of art. 2.A) and 2.B):

-                      to employees and collaborators of the Controller in their capacity as persons tasked with processing and/or internal data processors and/or system administrators;

-                      to third-party companies or other persons (including but not limited to credit institutions, professional firms, external consultants and lecturers, etc.) that carry out outsourced activities on behalf of the Controller, in their capacity as external data processors.


5. Disclosure of the data

Without requiring express consent (pursuant to art. 24 letters a), b), d) of the Privacy Code and art. 6 letters b) and c) of the GDPR), the Controller may disclose your data for the purposes of art. 2.A) to judiciary Authorities, in case they request them, as well as to persons to whom disclosure is mandatory by law for the achievement of said purposes. These persons will process the data in their capacity as independent data controllers. Your data will not be disseminated.


6. Transfer of data

The personal data are stored in our IT system with a local server located at the registered office of the Controller, inside the European Union. Your data will not be transferred to Member States of the European Union nor to third Countries that do not form part of the European Union.

7. Nature of the provision of the data and consequences of a refusal to reply

The provision of data for the purposes of art. 2.A) is mandatory. Should they not be provided, we cannot guarantee the Services of art. 2.A).

The provision of data for the purposes of art. 2.B), instead, is optional. You may, therefore, refuse to consent to the use of your data, also in the future; in that case, you will be unable to receive our commercial messages and information on new products. You will, however, continue to have a right to the services of point 2.A).


8. Rights of the data subject

In your capacity as data subject, you have the rights of art. 7 of the Privacy Code and of art. 15 of the GDPR and, specifically, the right to:

i.                    obtain the confirmation of the existence or otherwise of personal data that concern you, even if they have not yet been registered, and their communication in an intelligible format;

ii.                  obtain information on: a) the origin of the personal data; b) the purposes and means of processing; c) the logic applied in the case that processing is performed by electronic means; d) information regarding the identity of the controller, of the processors and of the representative who has been appointed pursuant to art. 5(2) of the Privacy Code and art. 3(1) of the GDPR; e) the persons or categories of persons to whom the personal data may be disclosed or who may become aware thereof in their capacity as representatives appointed in Italy, as processors or persons tasked with processing; iii. obtain: a) the update, the rectification or, when necessary, the completion of the data; b) the erasure, the anonymisation or the restriction of the data processed in violation of the law, including those the retention of which is not necessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations of letters a) and b) were notified, also with regard to their content, to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort;

iii.       object, in whole or in part: a) on legitimate grounds to the processing of the personal data that concern you, even if they are pertinent for the purpose of the collection; b) to the processing of personal data that concern you for the purpose of being sent advertising material. Please bear in mind that the data subject’s right to object, as per point b) above, for direct marketing purposes by automated means extends to traditional means; in any case, the data subject has the possibility to exercise the right to object even if only in part. The data subject, therefore, may decide to only receive messages by traditional means or only automated messages or neither of the two types of messages.


Where applicable, you also have the rights of art. 16-21 of the GDPR (The right to rectification, the right to be forgotten, the right to limit processing, the right to the portability of data, the right to object), as well as the right to lodge a complaint with the Data Protection Authority. Please also bear in mind that it will be your duty to update us promptly on changes to your data via e-mail.


9. Means of exercise of the rights

You may at any time exercise these rights by sending:

-  an e-mail to the address:


10. Controller, processor and persons tasked with processing

The Data Controller is Metalmeccanica snc, 13 Via U.Masotto, 36020 Campiglia Dei Berici (VI), VAT no. 01567500242. The updated list of processors and of the persons tasked with processing is kept at the registered office of the Data Controller.