Confidentiality Policy

This Privacy Policy contains essential information on the methods and purposes with which Magaldi Power S. p. A. (the "Data Controller" or "Magaldi"), owner of this website store.magaldi.com (the "Site") and the Data Controller of the personal data it collects through the Site, processes such personal data, as well as on the rights of the data subjects.

This is a privacy notice pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "GDPR").

Each user of the Site is strongly encouraged to read this document when first using the Site, and to periodically check any changes that may have been made by Magaldi.

This Privacy Policy is provided solely for this Site, including for use of the Magaldi Customer Reserved Area, which is linked to this Site. Magaldi is not responsible for any other Site to which you may be redirected via hyperlinks on this Site.

1. Data controller

Magaldi is the controller of the personal data collected through and in connection with the use of this Site:

Name: Magaldi Power S.p.A.

Registered office: Piazza di Pietra 26, 00186 Rome, Italy.

VAT and Fiscal Code: 03854270653.

REA number: RM - 1400591.

Email address: group@magaldi.com

PEC address: magaldipower@pec-mail.it.

2. Categories of personal data collected

1. Navigation data
  
  Through this Website, the Controller may collect, in the course of its normal operation, navigation data whose communication is implicit in the use of Internet communication protocols.
  
  This category of data includes the IP addresses or domain names of the devices used by users, the Uniform Resource Identifier (URI) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the system of the user's device.
  
  These data are necessary for the use of the Site and are also used for the purpose of checking the correct functioning of the services offered and obtaining statistical information on their use. They are not collected to identify users of the Site but, by their very nature, could, through processing and association with data held by third parties, allow users to be identified.
  
  This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.
  
  Through this Website, the Controller may collect, in the course of its normal operation, navigation data whose communication is implicit in the use of Internet communication protocols.
  
  This category of data includes the IP addresses or domain names of the devices used by users, the Uniform Resource Identifier (URI) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the system of the user's device.
  
  These data are necessary for the use of the Site and are also used for the purpose of checking the correct functioning of the services offered and obtaining statistical information on their use. They are not collected to identify users of the Site but, by their very nature, could, through processing and association with data held by third parties, allow users to be identified.
  
  This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.
2. Data provided voluntarily by the user
  
  Magaldi may acquire the personal data that may be provided by the user through the Website in order to access certain services (e.g. filling in the contact form or subscribing to the newsletter), or to forward requests by e-mail. By way of example, the site will acquire the name, surname, e-mail address and any other information that will be communicated directly by the interested party.
3. Data acquired when using services through the Reserved Area of the Site
  
  The Data Controller may also acquire some personal data relating to the registered user when using the services offered by Magaldi Power S.p.A. through the Reserved Area of the Site.
  
  This data may include identification data (such as first name and surname), the name of the company for which the data subject works and his or her job position, address or telephone number, and email.
4. Cookies and other tracking tools
  
  Please refer to the appropriate section at the following link: store.magaldi.com/en/cookie-policy.

3. Purposes and legal bases of the processing: provision of the requested services

The data indicated in paragraph 1 letter a) are processed by the Data Controller to allow users technical and functional access to the site, the analysis of aggregate traffic data and IT security. The legal bases for such processing are the fulfilment of legal obligations and the legitimate interest of the Controller.

The data indicated in paragraph 1 letter b) are collected by the Data Controller to allow users to interact with the Site's functionalities and to benefit from the services specifically related to it (e.g. data communicated through contact forms). The legal basis for such processing is the execution of requests made to the Controller by the data subjects.

Subject to the consent of the data subject, Magaldi may process personal data, such as contact data, to send commercial communications through automated (e.g. e-mail, SMS, app notifications) and traditional (e.g. paper mail) systems. The legal basis for such processing is the consent freely given by the data subject, who may revoke it at any time by writing to the Controller, and/or the legitimate interest of the Data Controller. Consent may also be revoked with reference to automated contact systems only.

The data indicated in paragraph 1 letter c) are processed by the Data Controller to allow users to use the Reserved Area and to provide the services that can be accessed through it (such as the e-commerce service dedicated to Magaldi Customers). The legal bases for such processing are the fulfilment of legal obligations (e.g. accounting obligations), the performance of contractual agreements and the execution of pre-contractual measures towards the Customers (e.g. to follow up Orders issued by the Customers or to provide requested quotations) and the legitimate interest of the Data Controller (e.g. to manage the relationship of Magaldi with one of its Customers).

With regard to the data indicated in paragraph 1 letter d), please refer to the appropriate section at the following link: store.magaldi.com/en/cookie-policy.

4. Categories of persons to whom personal data may be communicated and purposes of communication
The Data Controller may also communicate, for the same purposes, some personal data to third parties, who will process the personal data as Data Processors on behalf of Magaldi.

These Data Processors may include the following categories of subjects:

banking institutions, for the handling of collections and payments, including providers of remote electronic payment services;
companies in charge of logistics and shipping activities;
consultants and collaborators in charge of providing assistance in tax, accounting and legal matters;
parties that provide services for the management of operating systems, databases and telecommunications networks;
parties carrying out control, audit and certification tasks.

The list of Data Processors can be requested from the Controller at any time by writing to info@magaldi.com.

5. Period of data retention and duration of processing

Without prejudice to any storage obligation under the law, Magaldi will only store personal data for the time necessary to fulfil the purpose of the processing.

Data required for the performance of contractual agreements and pre-contractual measures will be retained for the duration of the contractual relationship. Following termination of the relationship, for whatever reason, the data will be retained for the period strictly necessary, exclusively for the protection of the Data Controller's rights and the fulfilment of legal obligations.

For marketing activities, such as the Magaldi newsletter, data will be retained and processed for a reasonable period of time from the data subject's last action that evidences the data subject's interest in Magaldi and its products (such as purchasing a product or service, requesting information about it, or consenting to receive such communications). Due to the nature and durability of Magaldi's products, this period may extend considerably in time, but will in no case exceed 24 months.

The data subject's right to object to the processing of his or her personal data at any time in accordance with the following paragraph remains unaffected.

6. Rights of the data subject

We would like to inform you that, in accordance with current legislation, you have the following rights expressly recognized by the GDPR:

the right to ask the data controller for access to personal data (Art. 15);
the right to have one's personal data corrected or deleted (Art. 16 and 17);
the limitation of processing in the cases identified by Article 18 GDPR (Art. 18);
the right to data portability (Art. 20);
the right to object to their processing (Art. 21),
the right not to be subject to a decision based solely on automated processing, including profiling (Article 22).

Such requests, as well as any request for clarification or further information, may be addressed to the Data Controller by writing to Magaldi Power S. p. A. , Piazza di Pietra, 26 - 00186 - Rome, or to group@magaldi.com.

For users who have access to the Restricted Area, the right to object to processing, and thus to obtain the deletion of personal data stored by Magaldi, may also be exercised via the Restricted Area, through the "Privacy Settings" section.

We also inform you that, in accordance with current legislation, you may lodge any complaints regarding the processing of your personal data with the Personal Data Protection Authority, whose site you should consult for more information (https://www.garanteprivacy.it/home).