The company Exonsteel S.r.l., as Data Controller of your personal data, would like to inform you that European Regulation no. 679/16 on “Data Protection“ (or “GDPR“) provides for the protection of persons and other subjects regarding the processing of personal data which, in this specific case, is necessary in response to your request for information.
The Data Controller informs you that the use of your personal data by our staff will take place according to the purposes and with the methods indicated in this statement.

Name of the Data Controller: Exonsteel S.r.l.
Contact details of the Data Controller:
Address: Viale dell'Industria 32 San Martino Buon Albergo (VR) Italy
Telephone: +39 348 268 5007
Representative of the controller and contact details: not present for it is not applicable DPO and contact details: not present

A) Types of personal data processed and purposes for the processing
Through the present form, Exonsteel S.r.l. will acquire and process information, even of a "personal" nature (qualified by the aforementioned GDPR). This data may be provided directly by the user or collected automatically.
The first case occurs in the presence of a request by the user for information and/or contact with Exonsteel Srl, for the fulfillment which is essential for the Data Controller in order to obtain data pertaining to the user.
This concerns, in particular, "common" personal data, such as name and surname, e-mail address and telephone number, for "private" natural persons, name and surname or company name, VAT number, address of registered headquarters, name of company contact, e-mail address and telephone number, for professionals and/or companies.
Any acquisition, through the present form, of personal data of third parties, for example, those of family members or friends of the user, will impose the latter the obligation to have them adequately and preemptively informed on the methods of processing described by the present statement, as well as having obtained their consent.
Minors will not be allowed to provide Exonsteel S.r.l. with personal data, nor send e-mail to the company.
In any case, Exonsteel S.r.l. will not assume any responsibility for any false statements provided by users. If Exonsteel S.r.l. is aware of the existence of false statements, it will proceed with the immediate cancellation of any personal data acquired.
As for the automatically collected data, this will occur simultaneously and through the use of the services by users. This concerns, in particular, technical data such as, for example, IP address or type of browser.
Other data is collected using cookies or similar technologies. For more complete information, please refer to the "Cookie Policy" section.
The processing of these types of personal data will be carried out for the following purposes:
1. For consultation, processing and consequent response to your request for information, which does not regard any contractual relationship with Exonsteel S.r.l.; the legal basis for such processing is your specific express consent (Article 6, paragraph 1, letter a of the GDPR);
2. for consultation, processing and subsequent response to your request for information, however pertinent or related to the contract/contractual agreements already in place with Exonsteel S.r.l.; the legal basis for such processing is the need to fulfill your own request for the carrying out of the existing contract (Article 6, paragraph 1, letter b of the GDPR). In this regard, the Data Controller makes it known that any further purposes for processing, for example, those related to future marketing activities, will be implemented only upon request by specific consent. In any case, they will not be implemented by Exonsteel S.r.l. by profiling its clients, or adopting automated decision-making procedures for this purpose.

B) Nature of the conferment and consequences of the refusal to answer.
The communication of personal data through the present form is essential for the pursuit of each of the aforementioned purposes, but will not integrate any legal obligation, and any refusal to provide them will have no consequence, if not the impossibility for Exonsteel S.r.l. to fulfill your requests.

C) Method and duration of the data processing
Your personal data will be processed, mainly with IT tools, by the "appointed-authorized" subjects of Exonsteel Srl, and will be stored both in a paper archive as well as in an electronic company database in order to fulfill the obligations and purposes indicated in paragraph A) of the present informative note. The data contained in the aforementioned automated information system will be processed using appropriate security measures, so as to minimize the risk of deletion or loss, unauthorized access or processing that does not comply with the purpose of the collection.
The data relating to the e-mail address and other data provided during the first contact request will be stored up to 10 days after the fulfillment of your request. In the case of user data already in possession by Exonsteel S.r.l., on the basis of existing contractual relations with the same company, this data will be stored for the time necessary for the performance of the mutual services provided for in the contract and, also subsequently, for the 10-year prescription period required by Italy‘s Civil Code for the archives and documents of entrepreneurs. On the methods and limits of the processing of personal data within the contractual relationship, Exonsteel S.r.l. will releases to the interested party, when the report is activated, suitable and specific information requesting, where required by the law, the consent as well to the processing.

D) Communication of data to third parties
Personal data collected for the purposes listed in paragraph A) will be disclosed to third parties only if it is necessary to fulfill any obligations established by law, or in the carrying out of the obligations arising from the contract/relationship which the interested party is a part of.
The personal data may also be communicated to all other subjects responsible for the carrying out, even partially, of activities related to your request and/or the task assigned to Exonsteel S.r.l.. In all cases it would be necessary to entrust the processing of personal data to third parties, the Data Controller will regulate the obligations of these subjects in terms of the processing methods and the adoption of appropriate data protection measures, assessing from time in time, in strict observance of the rules indicated by the GDPR, the possible necessity of the appointment of third parties to Managers of the processing, in relation to what is provided for in the specific agreement. In any case, personal data will not be communicated to subjects residing in non-EU countries.

E) Rights of the interested party
At any moment, you may exercise your rights towards the Data Controller in accordance with Chapter III of the GDPR and, in particular:
- obtain information from the Controller about the existence of their personal data, the origin of the same, the purposes and methods of processing and, if present, to obtain access to the personal data and information referred to in Article 15 of the GDPR ;
- request the updating, correction, integration, deletion, limitation or blocking of data processing, under the conditions established by the GDPR, as well as its transformation into an anonymous form; the deletion of data will be carried out in the expected technical times and in compliance with the retention period previously specified;
- to object, in whole or in part, for legitimate reasons, to the processing of data, even if it is pertinent to the purpose of the collection, and the processing of personal data provided for the purposes of commercial information or the sending of advertising material or commercial communications; each user also has the right to withdraw the consent at any moment without prejudice to the lawfulness of the processing based on the consent given prior to the revocation;
- receive personal data, knowingly and actively provided or through the use of the service, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without obstacles;
- to file a complaint with Italy‘s Data Protection Authority. In order to exercise these rights, the interested parties are required to send a specific request at the following e-mail address:

Exonsteel s.r.l. C.F.-P.IVA 04601970231 | Capitale sociale 40.000€ interamente versati