Privacy Policy

Tomasetto.com Website Policy

This information notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) to users accessing the tomasetto.com website and its subdomains (hereinafter the “Website”).
This document describes the methods of processing personal data of users who consult the Website and, where applicable, provide their consent to the processing of personal data.
Data processing is carried out in compliance with the principles of lawfulness, fairness, transparency, purpose limitation and storage limitation, data minimisation, and confidentiality.
This information refers exclusively to the Website and not to any other websites that may be consulted through links.

Data Controller
Tomasetto Achille S.p.A.
Via del Progresso n.47/53, Castegnero Nanto (VI)
Tel. +39 0444 638326
info@tomasetto.com

Processed data types

• Contact data: users may voluntarily provide their personal data (e.g. name, company, country, email) through the contact form in order to receive information.
• Browsing data: the computer systems and software procedures used to operate the website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, URI, request time, method used).
  Such data are used solely for the purpose of obtaining anonymous statistical information on the use of the website and to check its proper functioning, and may also be used to ascertain liability in case of unlawful activities.
• Cookies: The website uses technical cookies and, subject to consent, analytical and/or third-party cookies. For further information, please refer to the Cookie Policy.

Purpose and legal basis of processing

Personal data are processed for the following purposes:

• Responding to users’ requests through the contact form → legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR)
• Statistical analysis and improvement of the website → legal basis: legitimate interest of the controller (Art. 6.1.f GDPR), where data are anonymised, or consent where required
• Compliance with legal obligations → legal basis: legal obligation (Art. 6.1.c GDPR)

Processing methods

Data processing is carried out using IT and organisational tools suitable to ensure the security and confidentiality of the data.
The following subjects may have access to the data:

• authorised personnel of the Data Controller;
• technical service providers (hosting providers, IT companies), appointed, where necessary, as Data Processors.

The updated list of Data Processors may be requested from the Data Controller.

Luogo del trattamento e trasferimento dei dati

Data are processed at the premises of the Data Controller and at service providers connected with the operation of the website.

Should data be transferred to third countries, such transfer shall take place in compliance with the safeguards provided for in Articles 44 et seq. of the GDPR (e.g. standard contractual clauses).

Retention period

Personal data are retained for the time strictly necessary for the purposes for which they are collected and, in particular:

• contact form data: up to 12 months from the request;
• technical data: for the time necessary for the operation and security of the website;
• further retention may take place in compliance with legal obligations.

Rights of the data subject

The data subject may exercise the rights provided for in Articles 15–22 of the GDPR, including:

• access to personal data;
• rectification or erasure thereof;
• restriction of processing;
• objection to processing;
• data portability (where applicable).

The data subject also has the right to lodge a complaint with the Data Protection Authority (Art. 77 GDPR). Requests may be sent to: info@tomasetto.com.

Updates

This information notice may be subject to changes. Users are invited to periodically consult this page.