Privacy Policy

Introduction

The aim of this Policy is to describe the operational methods relating to the processing of the data of users and visitors to this website which can be accessed at https://www.chimpex.it. Users are asked to read this document carefully before providing their personal data. The following information is provided in accordance with the European Union legislation on the processing of personal data (General Data Protection Regulation 2016/679 – RGPD), with the Personal Data Protection Code (Legislative Decree 196/2003) and with the standards established by the measures of the Italian Data Protection Authority and the European Data Protection Committee.

Data controller

The Data Controller (hereinafter ‘the Controller’) is the company Chimpex Industriale S.p.A. – P.IVA 01364871218 with registered office in Milan (MI), via dei Valtorta, 48 – CAP 20127 – represented by its legal representative pro tempore (hereinafter ‘the Controller’).

Field of application of this Policy

This Policy applies exclusively to this website and not to other websites owned by third parties that the User may reach by clicking on links (so-called redirects). Interactions with such sites and the information acquired from them are subject to the privacy policies adopted by the individual site and the privacy settings chosen by the User in those sites.

Specific information in relation to the individual services offered by the site

This website is used to provide information regarding the services offered and the activities carried out by Chimpex Industriale S.p.A.

In order to log in to the site and receive the newsletter, the User is required to fill in a form to gather the personal data required to be able to use the requested service.

In the sections that include consent forms for the collection of personal data, guidelines are provided related to the processing of personal data in order to guarantee transparency and ensure awareness among Users, specifying the characteristics of the processing and all the other types of legally required information (art. 13 RGPD). These guidelines are aimed at defining the limits and forms of data processing for each service, on the basis of which the User may freely express their consent (if required) and eventually authorise the collection of data and their subsequent use. The User is therefore invited to read this information before providing their personal data.

Browsing data

The computer systems and software procedures set up to manage this website collect information during standard website operations, and the sharing of various information is implicit in the use of Internet communication protocols. This category of data includes: IP address, type of browser used, operating system, domain name and website from which the user accesses or leaves the site, information on the pages of the website visited by the user, time of access, time spent on each page, internal path analysis and other parameters related to the user’s operating system and computer environment. This technical and informational data is collected and used only on an aggregate basis and is not immediately identifiable. It may be used to assess liability in the event of a hypothetical cybercrime against the site or at the request of public authorities.

Cookies

For more information on the installation of cookies by this website, please refer to the Cookie Policy.

Data processing and storage methods

Data processing is mainly carried out using electronic procedures. Users’ personal data are kept for the time strictly necessary to pursue the purposes indicated above, in compliance with legal (civil and fiscal) retention obligations and the limits provided for by law. Once these terms have elapsed, since the Controller no longer needs to retain the information, the data is destroyed, cancelled or transformed into an unintelligible form, unless there are further requirements that justify their retention (e.g. pending legal disputes). The exact retention periods are indicated in the information documents for each service.

Optional supply of data

The provision of personal data requested from Users is optional, unless otherwise specified; however, failure to provide such data may result in the impossibility of obtaining the requested service or carrying out the requested activities.

Data processing location

The management and storage of personal data will take place on servers of the Data Controller and the third party company entrusted with managing and maintaining the website, duly appointed as Data Processor, located within the European Union. However, it is understood that, should it become necessary to make further transfers to non-EU countries, such transfers will always be made in compliance with Art. 45 et seq. of the GDPR, stipulating, where necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses set out by the European Commission.

Data movement and disclosure

The personal data acquired through this website can only be accessed by duly authorised and trained persons acting on behalf of the Data Controller, as persons in charge of and responsible for managing the requested service.

Moreover, the User’s personal data may be shared with suppliers of services directly related to the services rendered by Chimpex industriale S.p.A. (e.g. site maintenance and technical management companies, mail marketing agencies, hosting providers, communication agencies, etc.). The latter will operate as data processors, on the basis of specific agreements laid down in Art. 28 GDPR.

Such data will not be disclosed to unspecified recipients.

Further information on data processors can be requested by writing to: privacy@chimpex.it

Foreign data flows

Users’ personal data will not be transferred outside the European Economic Area.

Data protection: individual rights

Data subjects are entitled to exercise the rights recognised by Articles 15-22 of the GDPR. In particular, they have the right to access their data, find out its content and origin, check its accuracy or request that it be supplemented, updated or corrected. Moreover, data subjects have the right to request the deletion, anonymisation or blocking of processed data in the event of violation of the law, and to object to the processing in any case, for legitimate reasons.

We would also remind you that, in the event of failure or partial response by the Data Controller to the aforesaid requests, the data subject shall have the right to lodge a complaint with the Italian Data Protection Authority (link to the Guarantor’s page) or appeal to the competent judicial authority in accordance with the procedures provided for by the national legislation in force.

Requests should be addressed to privacy@chimpex.it

Changes to the guidelines

If a new regulation in the sector comes into force, in addition to the constant review and updating of the services for the User, it may become necessary to change the characteristics and methods of the processing of personal data. It is therefore possible that this legislation may be subject to modifications over time. We therefore invite Users to consult this page at regular intervals. To this end, the policy document indicates the respective revision date.

Last updated: December 12, 2024