Privacy

Privacy policy

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the internet offer of Carpenterie Metalliche di Colzate srl con socio unico , which is accessible under the domain cmc-texpan.com as well as the various subdomains ("our website").

Who is responsible and how can I reach them?

Controller

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Carpenterie Metalliche di Colzate srl con socio unico

via L. Rodigari, 10

24020 COLZATE (BG) Italia

Data Protection Officer

Group Data Protection Officer of the Siempelkamp Group

Mail info@cmc-texpan.com telefono +39 035 737111.

If you wish to exercise your rights or request information on the processing of personal data, please contact the Data Protection Officer directly.

What is it about?

This privacy policy meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We will inform you in the individual processing operations about the specific storage periods or criteria for storage. Irrespective of this, we store your personal in individual cases for the assertion, exercise or defense of legal claims and if there are statutory retention obligations.

Who receives my data?

We only disclose your personal data that we process on our website to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis in the individual case (e.g. consent or protection of legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website, who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 GDPR, they may be recipients of your personal data. For more information on the use of processors and web services, please refer to the overview of the individual processing operations.

Do you use cookies?

Cookies are file snippets that are sent by us to the browser of your end device during your visit to our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. You can find detailed information about the cookies used in the cookie settings or in the Consent Manager of this website.

Domain	Name	Storage duration
cmc-texpan.com	1e4541e63b131d687bf8cb3d975f6419	Session
cmc-texpan.com	95ed1139e85747b1d091b626e9bb4c60	ca. 12 month
cmc-texpan.com	cookieconsent_status	ca. 12 month
cmc-texpan.com	nrid	ca. 3 years
cmc-texpan.com	pwebcontact140_openauto	ca. 30 days

Which rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

Access pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
Correction according to Art. 16 GDPR of incorrect or incomplete data stored by us;
Deletion pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.
Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) a GDPR or on the basis of a contract pursuant to Art. 6 (1) b GDPR and these have been processed by us with the aid of automated processes. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.
Opposition according to Art. 21 GDPR against the processing of your personal data, insofar as this is carried out on the basis of Art. 6 para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the assertion, exercise or defense of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
Revocation according to Art. 7 para. 3 GDPR of your given consent with effect for the future.
Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

How is my data processed in detail?

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

Nature and scope of processing

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is stored temporarily in a so-called log file:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest to display our website and ensure security and stability on the basis of Art. 6 para. lit. f GDPR. The collection of data and storage in log files is mandatory for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as the further storage of log files is required by law, the processing is based on Art. 6 (1) lit. c GDPR. There is no legal or contractual obligation to provide the data, however, calling up our website is technically not possible without providing the data.

Storage duration

The aforementioned data will be stored for the duration of the website display and for technical reasons beyond that for a maximum of 14 days.

Contact form

Nature and scope of processing

On our website we offer you to contact us via a provided form. The information collected via mandatory fields is required to process the request. Furthermore, you can voluntarily provide additional information that is necessary from your point of view for processing the contact request.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

The processing of your data by using our contact form is carried out for the purpose of communication and processing of your request on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Insofar as your inquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, but the processing of your request is not possible without providing the information of the mandatory fields. Insofar as you do not wish to provide this data, please contact us by other means.

Storage duration

If you use the contact form on the basis of your consent, we store the collected data of each request for a period of three years, starting with the completion of your request or until you revoke your consent.

If you use the contact form in the context of a contractual relationship, we store the collected data of each request for a period of three years from the end of the contractual relationship.

Contact for applicants

Nature and scope of processing

We collect and process the personal data of applicants. Corresponding data processing may also take place electronically, for example, when applicants submit application documents to us by e-mail or via a web form on our website. On our website, we offer you the option of sending us applications for advertised vacancies by e-mail.

Your data will also only be stored in an applicant database beyond the scope of the current application process if you have given us your separate consent to do so.

Purpose and legal basis

The processing of your data in connection with your application is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship. In the event that your application documents are forwarded to third parties, in particular to companies affiliated with us, and your data is stored beyond the current application process, the processing of your data will be based on Art. 6 (1) sentence 1 lit. a GDPR. There is no legal or contractual obligation to provide your data, but the processing of your application is not possible without the provision of the information.

Storage duration

We store the data collected for a period of six months from the date the position is filled.

Newsletter

Nature and scope of processing

If you register on our website to receive our newsletter, we collect your e-mail address and your name and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you must confirm your registration for the newsletter (double opt-in). If you do not confirm the registration within 12 hours, it will automatically expire and the data will not be processed for the newsletter mailing.

To send the newsletter, we use a service of a service provider who process your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.

Purpose and legal basis

We process your data for the purpose of sending the newsletter based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future pursuant to Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but sending the newsletter is not possible without the provision of your data.

Storage duration

After registration for the newsletter, we store the data for a maximum of 12 hours until the registration is confirmed. After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter) and for technical reasons beyond that for a maximum of 30 days.

Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to provide you with information and offers also within social networks and to offer you further ways to contact us and to inform yourself about our offers. In the following, we inform you about which data we or the respective social network process from you in connection with the call and use of our fan pages/accounts.

Data that we process from you

If you wish to contact us via messenger or direct message via the respective social network, we generally process your user name via which you contact us and, if necessary, store other data provided by you insofar as this is required to process/respond to your request.

The legal basis is Art. 6 para. 1 sentence 1 f) DSGVO (processing is necessary to protect the legitimate interests of the controller).

(Static) usage data that we receive from the social networks

We receive automated statistics regarding our accounts via Insights functionalities. The statistics include, among other things, the total number of page views, likes, page activity and post interactions, reach, video views, and the percentage of men/women among our fans/followers.

The statistics only contain aggregated data that cannot be related to individual persons. You are not identifiable to us through this.

What data the social networks process from you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and, in this respect, no user account for the respective social network is required.

Please note, however, that the social networks also collect and store data from website visitors without a user account when the respective social network is called up (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no control. Details on this can be found in the privacy policy of the respective social network (see the corresponding links above).

Insofar as you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required.

We have no influence on the data processing by the social networks within the scope of their use by you. To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies), on the basis of which advertising based on your interests is played both within and outside the respective social network. It cannot be ruled out that your data will be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the privacy policy/cookie policy of the social networks. There you will also find information on your rights and objection options.

LinkedIn page

LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Businesses can create profiles where photos and other company information are uploaded. Other LinkedIn users have access to this information and can write their own articles and share this content with others.

The focus is on professional exchange on specialist topics with people who have the same professional interests. In addition, LinkedIn is often used by companies and other organizations to hire employees and present themselves as an interesting employer.

For more information on LinkedIn, please visit: https://about.f54db463750940e0e7f7630fe327845e-gdprlock/

Further information on data protection at LinkedIn can be found at: https://www.f54db463750940e0e7f7630fe327845e-gdprlock/legal/privacy-policy

We do not collect or process any personal data via our LinkedIn company page.

Wistia

Nature and scope of processing

We have integrated Wistia on our website. Wistia is a component of the video platform of Wistia, Inc. where users can upload content, share it over the Internet and get detailed statistics.

Wistia allows us to integrate content from the platform into our website.

Wistia uses cookies and other browser technologies to analyze user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to create reports.

When you access this content, you connect to servers of Wistia, Inc. and your IP address and, if applicable, browser data such as your user agent are transmitted.

Purpose and legal basis

The use of the service is based on our legitimate interests, i.e. interest in a platform-independent provision of content pursuant to Art. 6 para. 1 lit. f. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Wistia, Inc. Further information can be found in the privacy policy for Wistia: https://wistia.com/privacy.

Cookies & You – Consent Management

Nature and scope of processing

We have integrated Cookies & You on our website. Cookies & You is a consent solution of the Osano, Inc., A Public Benefit Corporation, 3800 N Lamar Blvd Ste, 200 Austin, TX 78756, with which consent to the storage of cookies can be obtained and documented. Cookies & You uses cookies or other web technologies to recognize users and to store the consent given or revoked.

Purpose and legal basis

The use of the service is based on the legally required consent to receive the use of cookies in accordance with Art. 6 sec. 1 lit.c. GDPR.

Storage duration

The actual storage time of the processed data is not influenced by us, but is determined by Osano, Inc., A Public Benefit Corporation. For more information, see the privacy policy for Cookies & You: https://www.osano.com/legal/gdpr.

___________________________________________________________________________________________________________________________________________________________________________________________

Privacy notice for our business partners

(Information on the processing of your personal data)

In the course of the business relationship between you and Carpenterie Metalliche di Colzate S.r.l. con unico socio, personal data will be collected and processed from you. With the following information we would like to give you an overview of the processing and your rights:

a) Who is responsible for data processing and whom can I contact?

Carpenterie Metalliche di Colzate S.r.l. con socio unico, con sede legale Via L. Rodigari 10, 24020 Colzate (BG), C.F. e P.IVA 0229450168.

To implement your data subject rights or if you have any queries about the processing of your data, please contact our data protection officer directly:

Group Data Protection Officer

mail to info@cmc-texpan.com - telephone +39 035 737111.

b) What do we process your data for and on what legal basis?

The personal data collected directly from you will be processed by Carpenterie Metalliche di Colzate S.r.l. con unico socio for the purpose of planning, implementing or terminating the business relationship. Furthermore, your personal data will be collected and processed for the exercise or fulfillment of obligations arising from the law.

Such processing is carried out on the basis of:

- your consent (Art. 6 para. 1 lit. a GDPR)

- contractual obligations (Art. 6 para. 1 lit. b GDPR)

- legal obligations (Art. 6 para. 1 lit. c GDPR)

- our legitimate interests (Art. 6 para. 1 lit. d GDPR)

c) Who gets your data?

Within our company, access to your data is granted to those offices that need it to fulfill our contractual and legal obligations. In addition, the following recipients receive your data:

Who gets your data?	Which data?
Internal positions	Master data, contact data and inquiry data, insofar as this is necessary for the processing of the business relationship.
Companies of the Carpenterie Metalliche di Colzate S.r.l. con unico socio	Companies used for the execution of the contractual obligation.
External service providers (depending on necessity, e.g. freight carriers or subcontractors)	Master data, contact data, delivery data or contract data, insofar as this is necessary for the processing of the business relationship.
Authorities (depending on necessity, e.g. customs or tax authorities)	Company data, contract data, logistics information and contact information, insofar as this is necessary for the processing of the business relationship.

d) Is there a transfer to countries outside the EU?

The transfer of your personal data to countries outside the EU (so-called third countries) is not provided for by default. Should the corresponding transfer of personal data to third countries occur as a result of contractual obligations, this will take place exclusively within the framework of the contractual relationship.

e) How long will your data be stored?

We process and store your data for as long as is necessary for the fulfillment of our contractual and legal obligations. Please note that our business relationship with you may be a continuing obligation, which may last for years.

If your data is no longer required for the fulfillment of contractual or legal obligations, it will be deleted by us, unless its further processing or archiving is required for legal reasons. These legal reasons include, for example, retention obligations under commercial and tax law. The periods specified there for the retention of data are generally two to ten years.

Furthermore, we may need your data for evidentiary purposes in connection with warranty claims, the termination of the business relationship or regarding the rights and obligations under our contract. With regard to this data, it is usually deleted after the expiry of the limitation periods.

f) What rights do you have

You are entitled at any time to ask Carpenterie Metalliche di Colzate S.r.l. con socio unico for information about the data stored about you. Furthermore, you may at any time request Carpenterie Metalliche di Colzate S.r.l. con socio unico to correct, delete, restrict and transfer personal data or object to the processing. To do so, please contact our data protection officer as indicated above.

If you believe that the processing of your personal data is carried out unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

g) Obligation to provide personal data

Within the scope of our business relationship, you must provide the data that is required for the establishment, implementation and termination of the business relationship and for the fulfillment of the associated contractual obligations, or which we are required to collect by law. Without this data, we are generally not in a position to conclude a contract with you or your employer, to carry it out and to terminate it

h) Automated decision making and profiling

No automated decisions or other profiling measures are carried out.