NILA

With the present, in consideration of the fact that, following the consultation of the website www.exonsteel.com (hereinafter the “Site“), data that may be qualified as “personal“ by EU Regulation no. 2016/679 (or "General Data Protection Regulation" - "GDPR"), that is, relating to natural persons that have been identified or are identifiable, Exonsteel S.r.l. intends to inform users-visitors, also pursuant to article 13 of the aforementioned Regulation, of the adopted Policy with regards to the protection of personal data, emphasizing its commitment and attention with reference to the protection of the privacy of the subjects involved.
With reference to such processing of personal data, the following information has been rendered available:
Name of the Data Controller: Exonsteel S.r.l.
Contact details of the Data Controller: Address: Viale dell'Industria 32 San Martino Buon Albergo (VR) Italy
E-mail: info@exonsteel.com
Telephone: +39 348 268 5007
Representative of the controller and contact details: not present for it is not applicable DPO and contact details: not present

Exonsteel S.r.l. is committed to protecting the privacy of users. In particular, the Data Controller will protect personal data that has been processed, through appropriate security procedures aimed at minimizing the risks of:
improper use or disclosure of data;
unauthorized modification of data;
loss or accidental destruction of data, or caused by unlawful acts;
unauthorized access to data.

Navigation within the site is free and does not require registration, with the exception of some areas where the user can freely and expressly provide a series of data concerning him or herself for contacting us or sending requests, or for subscribing to the newsletter. Therefore, wherever a visitor intends to provide personal data, he/she will be expressly informed pursuant to article 13 of the GDPR with indication (by way of example) of the purposes and methods of the use of the data by Exonsteel Srl, as well as the right to request the deletion of the data or its update at any time.
In cases where it is required by current legislation, the user-visitor may also be asked for prior consent to the processing of personal data.
In the present “Privacy Policy“, general information will be given regarding the adopted mechanisms for the collecting and processing of data by the Site, with reference to the processing of both the data of the users who consult it, as well as the data that should be spontaneously sent by the same.
With the continuation of navigation, and with the adherence to the proposals of services located in various parts of the Site (subscription to our newsletter, filling out forms to request information, etc.), this general information on the processing will be provided, to the user who explicitly consents to it.

PROCESSED DATA
When the visitor accesses this Site, he/she accepts that Exonsteel S.r.l. will collect some of their personal data. This page aims to inform them of what data we collect, why and how we use them. Through the Site, Exonsteel S.r.l. will acquire and process personal data, which can be provided directly by the user, or automatically collected.

Data provided voluntarily by the user
This case occurs in the presence of a request by the user for information and/or contact with Exonsteel Srl, for the fulfillment which is essential for the Data Controller in order to obtain data pertaining to the user. This concerns, in particular, "common" personal data, such as name and surname, e-mail address and telephone number, for "private" natural persons, name and surname or company name, VAT number, address of registered headquarters, name of company contact, e-mail address and telephone number, for professionals and/or companies.
Specific summary information will also be reported or displayed in the sections of the site that is set up for particular services on request and subject, if necessary, to the consent of the interested party (for example, subscribing to the newsletter).
Any acquisition of personal data of third parties, for example, those of family members or friends of the user, will impose the latter the obligation to have them adequately and preemptively informed on the methods of processing described by the present statement, as well as having obtained their consent.
Minors will not be allowed to provide Exonsteel S.r.l. with personal data, nor send e-mail to the company. In any case, Exonsteel S.r.l. will not assume any responsibility for any false statements provided by users. If Exonsteel S.r.l. is aware of the existence of false statements, it will proceed with the immediate cancellation of any personal data acquired.

Navigation data
As for automatically collected data, it will occur simultaneously and through the use of services by users. The computer systems and software procedures used for the operations of this site acquire, during their normal operations, personal data whose transmission is implicit in the use of internet communication protocols.
It is considered "internet history", or information that is not collected to be associated with identified data subjects, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, IP addresses or domain names of PCs or other tools used by users who connect to the Site, URI addresses ("Uniform Resource Identifier") of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and to the user's computer status.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to verify its correct functioning and is deleted immediately after the processing.

Cookies
Other data is collected using “cookies“ or similar technologies.
A cookie is a small text file saved on the hard disk by a web page server. Cookies can not be used to run programs or send viruses to the user's computer. Cookies are assigned to the user in a unique way and can only be read by the web server of the domain that sends them. Personal data of the users is not acquired by the Site in this regard. Cookies are not used to transmit information of a personal nature, nor are the cookies so-called "persistent" of any kind, or systems for tracking users. The present site does not use so- called "Session" cookies (which are not stored permanently on the user's PC and disappear when the browser is closed).
For more complete information, please refer to the "Cookie Policy" section.

PURPOSE OF PROCESSING AND AREAS OF DATA COMMUNICATION
Apart from what has been specified for navigation data and for "technical" cookies, the user is free to provide their personal data through the use of specific forms or modules on the Site to request the receiving of the newsletter, of material information or other communications and, more generally, for the purposes set out in the relevant and specific informative note.
The processing of personal data, in any case, of the "common" type, received by Exonsteel S.r.l. may be used, as the case may be, to send, in general, information requested by the user, at the time of the first contact, with the specific consent given by the same to the processing of your personal data.
If a contractual relationship has already been established with the user, and the request for information relates to or is related to the carrying out of existing agreements, Exonsteel S.r.l. will process the personal data collected to satisfy this request, without the need for any consent from the same user.
Exonsteel S.r.l. does not collect, nor obtain personal data or information obtained from the Site in order to engage in marketing or profiling activities with respect to its users, without the prior request for specific and express consent, nor will it send e-mails on behalf of third parties.
Furthermore, the Data Controller will disclose that, in any case, profiling activities of clients will not be carried out, and any automated decision-making procedures directed to this end will not be adopted.
The personal data acquired are mainly processed by personnel that is "appointed- authorized" by Exonsteel S.r.l., but can also be communicated to competent third parties for the carrying out, even partial, of activities related to the services requested, including: companies that perform functions that are strictly connected and instrumental to the technical operation of the service, such as, suppliers that provide "server housing" and "web hosting" services; bodies and administrative and judicial authorities, by virtue of legal obligations.
All third parties involved in the processing, for which Exonsteel S.r.l. will, from time to time, evaluate the conditions for any designation to the “Data Processor“, will, however, guarantee and assume responsibility for the security of personal data pertaining to the user, in accordance with the regulations set by the GDPR.

OPTION OF THE PROVISION OF DATA AND CONSENT TO PROCESSING
The provision of personal data on the Site of the user is not mandatory under any law but is essential to Exonsteel S.r.l. in order to meet the user's requests. In cases where it is expected by the GDPR, a free, specific and preventive consent will be requested to the user for the treatment of his/her personal data.
Any refusal by the user to transmit their data, or to authorize the related processing, will not, therefore, have any consequence, if not the impossibility to send information or to carry out the requested activities.

METHOD AND DURATION OF PROCESSING OF DATA
The personal data of the user will be processed by Exonsteel Srl, the Data Controller, mainly with IT tools, in order to fulfill the obligations and the purposes indicated above, as well as in paper form.
Personal data collected through the use of the Site and its various features that can be activated at the request of the user, will be stored and processed through the company's automated information system, in application of appropriate security measures, as required by article 32 of the GDPR, adopted with the purpose of minimizing the risks of deletion, loss, unauthorized access or processing that is not in accordance with the purposes of the collection.
The data provided by the user in the first request of contact (e-mail, telephone, etc.) will be kept for a period strictly necessary to comply with the request of the interested party and, in any case, up to 10 days after their communication.
In the case of user data already in possession of Exonsteel Srl, on the basis of existing contractual relationships with the same, this data will be stored for the time necessary for the carrying out of the respective services and, subsequently, within the fiscal and civil period of limitation, indicated by current tax legislation and the Civil Code, with regard to documents and records of the entrepreneur.

LINKS WITH THIRD PARTY SITES
The information provided with the present "Privacy Policy" does not refer to other sites, products or services not directly provided by Exonsteel Srl, online and offline, or to other websites that may be consulted by the user through links and/or activities placed by third parties.
Exonsteel S.r.l. cannot be held responsible for personal data provided by users to third parties or to any websites linked to the present Site.

RIGHTS OF THE INTERESTED
Subjects whose personal data have been processed, that is, the “interested parties“ regarding the processing, are guaranteed all the rights referred to in articles 15, 16, 17, 18 of the GDPR.
At any time, the interested parties may:
- obtain access to personal data and any information on the purposes and methods of processing;
- request the updating, rectification, integration, deletion, limitation or blocking of the processing, under the conditions established by the GDPR, as well as the transformation into an anonymous form; the deletion of data will be carried out in the expected technical periods and in compliance with the retention period previously mentioned;
- object, in whole or in part, for legitimate reasons, to the processing of data, even if it is pertinent to the purpose of the collection, and the processing of personal data provided for the purposes of commercial information or the sending of advertising material or commercial communications; each user also has the right to withdraw the consent at any moment without prejudice to the lawfulness of the processing based on the consent given prior to the revocation;
- receive personal data, knowingly and actively provided or through the use of the service, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without obstacles;
- to file a complaint with Italy‘s Data Protection Authority. In order to exercise these rights, the interested parties are required to send a specific request at the following e-mail address: info@exonsteel.com

Exonsteel s.r.l. C.F.-P.IVA 04601970231 | Capitale sociale 40.000€ interamente versati