Privacy Policy

Privacy Policy

MECCANICA42 S.R.L.

Information for data subjects (website users) pursuant to Article 13 of the European General Data Protection Regulation (GDPR) No. 679/2016 and related provisions issued by National and European Authorities.

Privacy Protection

Meccanica 42 S.r.l. (hereinafter also referred to as M42 or the Data Controller) is committed to consistently providing visitors with a web experience that fully respects and protects their privacy and welcomes you to the website www.meccanica42.com

We invite you to review our Privacy Policy and to read this notice provided pursuant to Article 13 of the GDPR (General Data Protection Regulation) No. 679/2016 – EU Privacy Regulation; it is addressed to those who interact with the web services directly provided by the Association and accessible online from the address www.meccanica42.com. This notice describes the management of the aforementioned website and does not apply to other external websites that may be accessible to the user through hyperlinks published on the site but refer to resources outside the Meccanica 42 S.r.l. domain. Additional information may be provided through different access channels.”

1. DATA CONTROLLER

The data controller is: Meccanica 42 S.r.l. – Registered Office via Venti Settembre n. 50, 50129, Firenze – Administrative Office Via Ezio Tarantelli n. 15, 50019, Sesto Fiorentino (FI). Tel. +39 055 628 3216 – E-mail address: privacy@meccanica42.com – PEC amministrazione@pec.meccanica42.com.

2. DATA PROTECTION OFFICER

Summary

A DPO has not been voluntarily appointed as of the date of this notice.

Details

As of this date, the Data Controller, after carrying out the appropriate assessments, has not appointed a Data Protection Officer (DPO) pursuant to Articles 37 and following of the GDPR No. 679/2016. The right to amend this notice remains reserved should the situation change in the future.

3. DATA PROCESSORS AND LOCATION OF DATA PROCESSING

Summary

External parties to the Data Controller who may handle your personal data on our behalf. A list is available at our office and can be requested using the contact details provided above.

Details

The list of appointed Data Processors, as well as the System Administrator(s), is available at the office. The data processing related to the web services offered by this site takes place at the Meccanica 42 S.r.l. headquarters (as identified above), and, if applicable, at the locations of external Data Processors and other appointed and authorized parties (as further detailed below). The processing is carried out by individuals and/or legal entities responsible for managing the requested services, data storage and processing activities, as well as the necessary maintenance operations.

With the consent of the data subjects, if required by law, and in any case following proper notice specifying the various purposes, personal data may be disclosed to third parties, both public and private, unrelated to M42, who will process them as independent Data Controllers (or, where applicable, Data Processors). In this regard, Meccanica 42 S.r.l. is in no way responsible and does not accept any liability for:

The rules and methods of managing personal data of other websites, accessible through links and/or references on the pages of the website www.meccanica42.com;
The content of any email services, web spaces, or chat forums provided to users.

4. PURPOSES AND LEGAL BASES FOR PROCESSING

Summary

The Data Controller processes your personal data for specific purposes and only when there is a legal basis provided by the applicable laws on privacy and personal data protection. The list detailed in the “Details” section covers all processing activities carried out by Meccanica 42 S.r.l. to allow you to use the website and to ensure the proper functioning and compliance of the processing activities by the Data Controller.
In summary, your personal data may be processed for the following purposes:

Statistical analysis;
User contact;
Compliance with legal and/or regulatory requirements;
Sending of newsletters;
Evaluation of the data subject’s application for purposes related to recruitment and personnel selection.

Details

Personal data is collected for the following purposes and using the following services:

Statistics

The services in this section allow the Data Controller to monitor and analyze traffic data and track User behavior.

Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the personal data collected to track and examine the use of this application, compile reports, and share them with other services developed by Google.
Google may use the personal data to contextualize and personalize ads within its advertising network.

Location of processing: USA – [Privacy Policy] – [Opt-out]
Legal basis for processing: legitimate interest of the Data Controller
Data retention period: 26 months

User Contact – Contact us

This type of service allows the management of a database of email, phone, or other types of contacts used to communicate with the User. These services may also collect data related to the date and time messages are viewed by the User, as well as the User’s interaction with them, such as information about clicks on links included in the messages.

Legal basis for processing: fulfillment of measures requested by the User
Data retention period: the time necessary to provide the requested services, after which the data will be deleted or anonymized

Legal and Regulatory Requirements

The processing of personal data of website users may be necessary to comply with legal and regulatory obligations to which the Data Controller is subject. These obligations may arise from tax, fiscal, health, occupational safety regulations, as well as other general, sector-specific regulations, or internal policies that require the collection and processing of data for specific purposes.

Data retention period: 10 years

Newsletter

By subscribing to the newsletter, the user’s email address is automatically added to a contact list to which emails containing our newsletters may be sent. The user’s email address may also be added to this list as a result of registration through the appropriate form on the website or after making a request (with prior authorization).

MailChimp (The Rocket Science Group, LLC.)
MailChimp is an email address management and messaging service provided by The Rocket Science Group, LLC.

Personal data collected: email address.
Location of processing: USA – [Privacy Policy]
Legal basis for processing: consent of the data subject
Data retention period: until consent is revoked

Evaluation of the Candidate’s Application for Recruitment and Selection Purposes – Work With Us

Data collection occurs through submission by the candidates by filling out the form in the “Work With Us” section of the website, providing information about their professional experience. To facilitate the recruitment process, we invite candidates to submit their information along with their CV (if a photograph is included, it will not be used in any way). The submitted CV should contain only common data, which will be processed strictly within the limits relevant to the obligations, tasks, and purposes outlined below:

To carry out activities related to the research and selection of candidates and any other connected or instrumental purposes, including future selections.
- Legal basis for processing: execution of pre-contractual measures adopted at your request for the data
- Data retention period: for the entire duration of the selection process and up to 24 months following the submission of the CV in the appropriate form on the website.
To comply with obligations or exercise rights provided by national or EU law regarding labor law, social security, and social protection, or by collective agreements, as well as by provisions issued by authorized authorities and supervisory bodies.
- Legal basis for processing: compliance with legal obligations
- Data retention period: for the entire duration of the selection process and up to 24 months following the submission of the CV in the appropriate form on the website.
To ascertain, exercise, or defend the rights of the Data Controller in the event of a complaint and/or out-of-court and/or judicial resolution, if necessary.
- Legal basis for processing: legitimate interest of the Data Controller
- Data retention period: for the entire duration of the complaint and/or the out-of-court and/or judicial process until the expiration of the terms for judicial protections and/or appeals.

5. CATEGORIES OF DATA PROCESSED AND VOLUNTARINESS OF PROVISION

Summary

Cookies (please refer to the Cookie Policy)
Browsing and usage data
Voluntarily provided data (Name, Surname – Email address – Phone contacts – Requests made via the website – CV)
System logs and maintenance
Interaction with social networks and external platforms

Details

A cookie is a small amount of data, often containing a unique anonymous identifier, that is sent to the browser by a web server and is subsequently stored on the user’s hard drive. The cookie is then read and recognized only by the website that sent it whenever a subsequent connection is made.
For more information about the cookies used by the site, please refer to the Cookie Policy.

Browsing and Usage Data

The computer systems, telematic services, and software procedures involved in the operation of this website acquire, during their normal functioning, certain data whose transmission is implicit in the use of web communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature, it could, through processing and associations with data held by third parties, allow for the identification of users. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response given by the server (success, error, etc.), and other parameters related to the user’s IT system and environment.

This data is used solely to obtain anonymous statistical information about the use of the site and to monitor its proper functioning, and is deleted immediately after processing. The data may be used to ascertain responsibility in the case of alleged cybercrimes against the site; barring this eventuality, the web contact data does not persist for more than 1 day.

Voluntarily Provided Data (Name, Surname – Email Address – Phone Contacts – Requests Made via the Website).

The optional, explicit, and voluntary submission via email to the addresses indicated on this site or through the completion of forms contained within it results in the subsequent acquisition of data such as name, surname, email address, and phone contacts, which are necessary to respond to requests, as well as any other personal data included in the various forms.
The collected and processed data may include personal details, contact information, data related to current and past employment, educational and professional experience, contract details, professional skills, and teamwork capabilities, as well as images. For example, but not limited to: name, surname, place and date of birth, tax code, residence, gender, phone contacts, educational qualifications, work experience, and any additional data you provide in your CV.
Specific summary information is provided or displayed on the pages of the site prepared for particular services offered by Meccanica42 S.r.l. and also upon user request.

System Logs and Maintenance

For operational and maintenance purposes, this site and any third-party services used may collect system logs, which are files that record interactions and may also contain personal data, such as the user’s IP address.

Interaction with Social Networks and External Platforms

This site uses “Social Plugins” (hereinafter referred to as buttons) from social networks such as LinkedIn, Instagram, and YouTube. For more information, please refer to the Cookie Policy.
Except as specified regarding browsing and usage data, as well as system logs and maintenance, the user is free to provide personal data included in the forms on the site or otherwise indicated in communications with Meccanica 42 S.r.l., including but not limited to requests for the sending of informational materials or other communications, etc.
Failure to provide such data may result in the inability to obtain the requested information.
If you do not consent to the receipt of advertising information, direct sales, or interactive commercial communications, your details will not be used for this purpose. Any voluntary sending of emails to the addresses indicated on the site will result in the acquisition of the sender’s address as well as any other information contained in the message; such personal data will be used solely to respond to requests.

6. METHODS OF PROCESSING

Summary

Paper and electronic

Details

The processing of your data is carried out using manual and automated tools, in ways that are strictly related to the purposes indicated above and, in any case, to ensure the security and confidentiality of your data. If you would like to obtain further information, we remind you of the rights guaranteed to you as specified in this notice.

7. PROTECTION OF MINORS

Summary

The processing of minors’ data is not permitted.

Details

Meccanica 42 S.r.l. does not intentionally collect personal information from minors. We do not allow minors to provide their own data on our site. In any case, if a parent or guardian believes that a minor may have provided personal information, they should contact us promptly. If M42 becomes aware that it has inadvertently received personal information related to a minor, it will immediately delete such information from its databases and take the necessary actions. If false data is provided, Meccanica 42 S.r.l. considers itself exempt from any liability and/or claims, subject to the checks it undertakes. Finally, it is reminded that all minors must receive proper authorization from their parents or guardians before using or publicly disclosing information on any type of website, except as specified regarding our web space.

8. CATEGORIES OF RECIPIENTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED

Summary

Employees and similar personnel of Meccanica 42 S.r.l. classified as “authorized to process” (administrative staff, sales, marketing, system administrators, etc.) and duly trained and monitored by the Data Controller;
External parties (e.g., agents, legal and administrative consultants, industry regulatory experts, technical service providers, hosting providers, information service companies, communication agencies, business partners when necessary to fulfill specific obligations, companies within the “Group,” etc.).

Details

If necessary, in relation to additional and specific services or products requested, personal data may be communicated to third parties, who are independent data controllers (or, if applicable, processors), for functions closely related and instrumental to the provision of services and/or responses to specific requests. In addition to the above, we specify in accordance with the law that your personal data may also be communicated to parties (e.g., advertising agencies and similar) acting on behalf of Meccanica 42 S.r.l. (your data will not be transferred to third parties for their commercial purposes without your prior consent) for managing promotional campaigns, including (but not limited to) via social networks, platforms, chats, etc., always within the boundaries of legal and regulatory provisions. A list of the operators described above is available in an updated version at the premises of Meccanica 42 S.r.l. and upon request via email at privacy@meccanica42.com.
Personal data will not be disseminated, unless required by the desired service, but may be communicated to third parties to comply with legal obligations, in execution of orders from authorized public authorities, or to assert or defend a right in judicial proceedings.

9. DATA RETENTION PERIOD

Summary

10 years for legal retention purposes
Until revoked for the transmission of the newsletter authorized by your explicit consent
Time necessary for the provision of operational services related to digital channels, subsequently deleted or anonymized
Duration specified for each purpose as identified in the previous Article 4

Details

The aforementioned terms may be reduced and/or extended (with prior notification to the data subjects) in cases, for example, of indications from institutions and/or supervisory authorities. The possibility of revoking consent at any time remains, without affecting the lawfulness of the processing based on the consent given prior to the revocation.

10. TRANSFER TO NON-EU COUNTRIES

Summary:

The Data Controller may transfer your data to non-EU countries to use services, such as storage or for creating mailing lists; in such cases, M42 is committed to implementing appropriate safeguards.

Details:

The transfer of personal data to countries outside the European Union may involve greater risks and must be adequately monitored. If the Data Controller opts to exercise this possibility, they commit to collecting in advance and making available to the data subjects all supporting documentation in the same manner in which rights can be exercised.

11. COMPLAINT TO THE DATA PROTECTION AUTHORITY

Summary:

Possibility of filing a complaint with the supervisory authority.

Details:

The procedures available to you for protection (in addition to exercising your rights against us) are:
Accessing the website www.garanteprivacy.it in the dedicated section for complaints if the competent authority is the Italian Authority;
or
following the procedures established by the supervisory authority of the member state (if different from Italy) where the data subject regularly resides, works, or where the alleged violation occurred.

12. YOUR RIGHTS

Summary:

Access – Restriction – Rectification – Objection – Withdrawal of consent – Deletion (Right to be Forgotten) – Portability

Details:

Right of Access:

You can receive a copy of the personal data being processed at any time.

Right to Restriction:

This can be exercised not only in cases of violation of the conditions for lawful processing but also when you request rectification of the data or when you object to the processing; the Data Controller commits to marking the relevant data during the assessment period with appropriate organizational measures.

Right to Rectification:

You can obtain the rectification of inaccurate personal data concerning you without delay and may also request the completion of incomplete personal data by providing an additional declaration.

Right to Object:

You can object at any time, for reasons related to your particular situation, to the processing of personal data concerning you, even if used for direct marketing and/or profiling.

Right to Withdraw Consent:

Where consent has been given, for example, for marketing purposes and similar.

Right to Deletion (Right to be Forgotten):

You may request the deletion of your data in an enhanced form, including after withdrawing consent to the processing of personal data.

Right to Portability:

This does not apply to non-automated processing, such as paper records; only data provided by the data subject to the Data Controller and processed with the consent of the latter or based on a contract with the Data Controller are portable.

What references to use to exercise your rights?

Meccanica42 S.r.l.

Via Ezio Tarantelli n. 15, 50019, Sesto Fiorentino (FI)

e-mail privacy@meccanica42.com

PEC amministrazione@pec.meccanica42.com

13. TERMS AND MODALITIES FOR THE RESPONSE FROM THE DATA CONTROLLER TO THOSE WHO WISH TO EXERCISE A RIGHT REGARDING THEIR PERSONAL DATA:

Summary:

1 (one) month, extendable up to 3 (three) months in more complex cases, in writing.

Details:

Please be informed that if you exercise your rights, the Data Controller must provide a response in writing, including through electronic means that facilitate accessibility (orally only upon explicit request from the data subject), within 1 (one) month. In cases of particular complexity, this period may be extended to 3 (three) months, while still being obligated to provide a response within one month of the request, even in the case of denial.

The Data Controller, having assessed the complexity of the request made by the data subject, may determine the amount of any fee to be charged, but only if the requests are manifestly unfounded or excessive.

14. CHANGES TO THIS INFORMATION SHEET

Summary:

Right to modify.

Details:

The Data Controller reserves the right to make changes to this information page at any time, notifying users here. Therefore, please frequently consult this page, using the last modified date indicated at the bottom as a reference. If the user does not accept the changes made to this privacy policy, they are required to cease using this application and may request the Data Controller to delete their personal data. Unless otherwise specified, the previous information sheet will continue to apply to the personal data collected up to that point.

Questo documento è stato redatto il 3.07.2024