{"id":3,"date":"2025-02-28T16:31:13","date_gmt":"2025-02-28T15:31:13","guid":{"rendered":"https:\/\/stage.demasteel.com\/?page_id=3"},"modified":"2025-06-27T16:08:31","modified_gmt":"2025-06-27T14:08:31","slug":"privacy","status":"publish","type":"page","link":"https:\/\/www.demasteel.com\/en\/privacy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"


PROCESSING OF PERSONAL DATA PURSUANT TO REGULATION (EU) 679\/2016 (“GDPR”)<\/strong><\/p>\r\n\r\n\r\n\r\n

\r\n\r\n\r\n\r\n\r\n
Data Controller<\/strong><\/td>\r\n<\/tr>\r\n
Demasteel S.r.l.<\/strong>
Via Stoppani sn \u2013 23081 Calolziocorte (LC) \u2013 P.I. 03611730130
Email:  info@demasteel.com<\/a> \u2013Tel. 039 9908183<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<\/figure>\r\n\r\n\r\n\r\n

Personal Data Processed<\/strong><\/p>\r\n\r\n\r\n\r\n

“Data” means information relating to natural persons, processed by our company for the performance of the contractual relationship with its suppliers and customers, the legal representative of the supplier-customer who signs the contract in the name and on behalf of the latter, as well as the employees\/consultants of the supplier-customer, involved in the activities referred to in the contract. In the latter case, the source from which the Data comes is the supplier-customer. Personal data includes those communicated through our web platform, sending emails or telephone contact.<\/p>\r\n\r\n\r\n\r\n

Persons Authorized to Process<\/strong><\/p>\r\n\r\n\r\n\r\n

The Data may be processed by our company, collaborators, consultants appointed to pursue the purposes indicated above, persons who have been expressly authorized to process by the Data Controller and who have received adequate operating instructions.<\/p>\r\n\r\n\r\n\r\n

Provision of Data<\/strong><\/p>\r\n\r\n\r\n\r\n

The provision of data is necessary for the conclusion of the contract and\/or for its execution, or for the provision of the services requested by the data subject. Refusal to provide the Data may therefore not allow the contractual relationship to be established and\/or the consequent obligations to be fulfilled.<\/p>\r\n\r\n\r\n\r\n

The provision of data is also necessary in order to be able to provide any answers to questions submitted through our portals, the sending of emails, or the making of contact via telephone or web-conference.<\/p>\r\n\r\n\r\n\r\n

Recipients of the Data<\/strong><\/p>\r\n\r\n\r\n\r\n

The Data may be communicated to external parties operating as data controllers: by way of example, to the Revenue Agency, INPS, INAIL or other Authorities and in general to public or private subjects entitled to request their content. The Data may be processed, on behalf of the Data Controller, by external parties designated as data processors pursuant to Article 28 of the GDPR, who carry out specific activities on behalf of the Data Controller: by way of example, accounting, tax and insurance obligations, sending correspondence, management of collections and payments.<\/p>\r\n\r\n\r\n\r\n

Moving to non-EU countries<\/strong><\/p>\r\n\r\n\r\n\r\n

Where necessary, Personal Data may be transferred to non-European countries whose level of protection and data has been deemed adequate by the European Commission pursuant to art. 45 of the GDPR, or upon signing the Standard Contractual Clauses adopted\/approved by the European Commission pursuant to art. 6, 2, letters c) and d) with the reference supplier, or subject to the adoption of the other guarantees referred to in art. 46 and 47 of the Presidential Decree. A copy of the documentation attesting to these guarantees can be obtained by sending a request by email to the address info@demasteel.com.<\/p>\r\n\r\n\r\n\r\n

Rights of the Data Subject<\/strong><\/p>\r\n\r\n\r\n\r\n

By contacting the Data Controller’s Office, by e-mail at the address info@demasteel.com, the data subject may request access to the Data concerning him\/her, the correction of inaccurate Data, the integration of incomplete Data, the erasure of Data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as object to the processing carried out for the legitimate interest of the data controller.<\/p>\r\n\r\n\r\n\r\n

Furthermore, in the event that the processing is based on consent or contract and is carried out with automated tools, the data subject has the right to receive the Data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another controller without hindrance.<\/p>\r\n\r\n\r\n\r\n

The data subject has the right to revoke the consent given at any time and to object to the processing of the processed Data where there are no processing obligations.<\/p>\r\n\r\n\r\n\r\n

Complaint to the Supervisory Authority<\/strong><\/p>\r\n\r\n\r\n\r\n

The data subject has the right to lodge a complaint with the competent supervisory authority in the Member State in which he or she habitually resides or works or in the State in which the alleged violation occurred.<\/p>\r\n\r\n\r\n\r\n

The designated supervisory authority in Italy is the Italian Data Protection Authority<\/strong>, with headquarters in Rome, Piazza Venezia n. 11.<\/p>\r\n\r\n\r\n\r\n

The Authority’s website indicates how to lodge a complaint and protect your rights: www.garanteprivacy.it<\/a><\/p>\r\n\r\n\r\n\r\n

\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Purpose of the Processing<\/strong><\/td>\r\nLegal Basis of the Processing<\/td>\r\nData Retention<\/strong><\/td>\r\n<\/tr>\r\n
Purposes related to the establishment and execution of the contractual relationship between the supplier\/customer and the company.<\/td>\r\nExecution of the contract for the Data of the private customer, of the legal representative of the Supplier\/customer. Legitimate interest in the Data of the supplier\/customer’s employees\/consultants, involved in the activities referred to in the contract.<\/td>\r\nContract duration and, after termination, the ordinary limitation period of 10 years. In the case of judicial litigation, for the entire duration of the same, until the expiry of the terms of availability of appeal actions.<\/td>\r\n<\/tr>\r\n
Carrying out administrative-accounting obligations \u2013 such as accounting and treasury management, as well as invoicing (e.g. verification and recording of invoices), in accordance with the requirements of current legislation.<\/td>\r\nNeed to comply with a legal obligation to which the Firm is subject.<\/td>\r\nSame as above<\/td>\r\n<\/tr>\r\n
If necessary, to establish, exercise and\/or defend the Company’s rights in any venue.<\/td>\r\nLegitimate interest.<\/td>\r\nSame as above<\/td>\r\n<\/tr>\r\n
General communication purposes such as sending communications about products and offers<\/td>\r\nConsent of the data subject: the Client or the legal representative or business contact person of the Client Company (optional and revocable at any time).<\/td>\r\nUntil consent is withdrawn; in any case, 24 months from the provision of consent.<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<\/figure>\r\n\r\n\r\n\r\n

WEBSITE AND COOKIE MANAGEMENT<\/h2>\r\n\r\n\r\n\r\n

LIABILITY ON THE WEBSITE<\/strong><\/p>\r\n\r\n\r\n\r\n

Demasteel S.r.l. is not responsible for the contents of external sites, which can be accessed through links placed within the site www.demasteel.com and linked.<\/p>\r\n\r\n\r\n\r\n

EDPB REQUIREMENTS AND INDICATIONS (ex WP29)<\/strong><\/p>\r\n\r\n\r\n\r\n

The information is provided both for the www.demasteel.com site and for the transmission of data by email, other computer tool or in paper form.<\/p>\r\n\r\n\r\n\r\n

This information is also inspired by Recommendation No. 2\/2001 that the European authorities for the protection of personal data, gathered in the WP29 Group of Directive No. 95\/46\/EC, adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online, and in particular, methods, times, nature of the information that the data controllers must provide to users when they connect to web pages,  regardless of the purposes of the connection.<\/p>\r\n\r\n\r\n\r\n

PLACE OF DATA PROCESSING and THEIR TRANSFER<\/strong><\/p>\r\n\r\n\r\n\r\n

The site is accessible with SSL protocol and “Green” certificate, therefore with a high degree of anti-fraud protection.<\/p>\r\n\r\n\r\n\r\n

Our site may store browsing data: the computer systems and software procedures used to operate the sites acquire, during their normal operation, some personal data whose transmission is implicit in Internet communication protocols. This information is not collected to be associated with the identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes:<\/p>\r\n\r\n\r\n\r\n