Online Privacy Policy


PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA FOR THIS WEBSITE

 

PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679

 

Pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679, laying down provisions for the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter also referred to  simply  as the “GDPR”   , from the English acronym General Data  Protection   Regulation), we hereby inform you that the processing of the personal data of users and/or visitors to the website https://www.marposs.com/ita/ (hereinafter also referred to simply as the “Website”) is carried out in compliance with the legislation governing the protection of personal data and confidentiality, which forms the basis of our activities, for the purposes and in the manner set out in detail in this Privacy Policy. For a proper understanding of the following terms, please consult the Information Pages of the Italian Data Protection Authority: https://www.garanteprivacy.it/regolamentoue.

 

1.   WHO   IS   THE   DATA CONTROLLER   WHO   DECIDES   THE PURPOSES   AND   THE METHODS   OF   DATA PROCESSING?   HOW   AND   WHERE   CAN YOU CONTACT THEM?

 

The Data Controller, i.e. the party that determines the purposes and means of personal data processing, is Marposs S.p.A.., with its registered office at Via Saliceto 13, 40010 Bentivoglio (BO), Italy, Tax code : 03354081204, email: gdpr@marposs.com, certified email (PEC): marposs@legalmail.it, hereinafter also referred to simply as “MARPOSS” and/or the “Data Controller”).

The Data Controller has also appointed a Data Protection Officer who can be contacted at the following email address: dpo@marposs.com. 

 

2. WHAT ARE THE PURPOSES, METHODS, LEGAL BASIS, CONSEQUENCES AND DATA RETENTION PERIODS APPLICABLE TO THE PROCESSING?

 

The processing of the data you will be asked to provide will be carried out for the following purposes:

 

  1. browsing the website  (LEGAL BASIS: the Data Controller’s overriding legitimate interest in making the website available to the public; DURATION: for the entire duration of browsing and use of the website);

 

  1. providing information at the data subject’s request, via one of the Data Controller’s contact methods (form available on the website) – (LEGAL BASIS: processing of pre-contractual requests; DURATION:  for the entire   duration   necessary to assess and respond to the data subject’s requests and no later than 10 years from the conclusion of the contract);

 

  1. compliance with laws, regulations and EU legislation (LEGAL BASIS: regulatory obligation; failure to comply will result in legal consequences; RETENTION PERIOD: for the entire duration provided for by the applicable laws);

 

  1. any   investigation,   defence   or   exercise   of   a   right   in   legal proceedings (LEGAL BASIS: legitimate interest,   considered to take precedence   for self-defence  or   protection  of   a  third party in  legal proceedings; DURATION: for the entire limitation period provided for by applicable laws, e.g. 10 years in the case of contractual liability);

 

  1. to safeguard   the   security   of the   present   website   ,   of the   networks   and   of the   IT systems   of the Data Controller (LEGAL BASIS: legitimate interest, considered to take precedence as it complies with Recital 49 of the GDPR for the self-protection of its own security; DURATION: 6 months);

 

  1. registration and management of your account, the ‘members’ area’, on the website to access restricted content on the website (LEGAL BASIS: performance of contractual obligations or pre-contractual measures; DURATION: 10 years from the conclusion of the contract);

 

  1. sending   from   , communications   from   , and direct marketing      from   by the Data Controller, via email, including newsletters (LEGAL BASIS: specific consent; DURATION: 24 months from the date of consent, subject to revocation at any time via email);

 

  1. disclosure of data to third parties for marketing purposes, via email, including newsletters (LEGAL BASIS: specific consent; DURATION: 24 months from the date of consent, subject to revocation, which is always possible via email); such third parties may include both companies within the Marposs Group and third-party commercial partners.

 

The website also features a ‘Work with us’ section for job applications; data subjects are therefore referred to the specific privacy notice on the relevant data collection page.

With regard to the methods used to process the data subject’s personal data, such processing will be carried out in compliance with the security measures provided for by current legislation, both by automated means (involving the use of software, hardware and computer networks) and by non-automated means.

 

3. TO WHOM MAY YOUR DATA BE DISCLOSED?

 

In order to carry out its business activities, the Data Controller may in turn disclose your data to the following parties to the extent strictly necessary to achieve the aforementioned purposes; all of these parties are based in the European Community/European Economic Area unless otherwise stated:

 

  1. authorised and designated internal staff of the Data Controller responsible for processing, for the purpose of carrying out business activities and fulfilling orders, sales and bookings;

 

  1. organisations responsible for the coordination, supervision   and management   of   Internet networks, both domestic and international, as well as communication and telephone networks;

 

  1. payment and banking service providers (e.g. for credit or debit card payments, bank transfers, etc.) for transactions relating to online orders; it is understood that specific and detailed payment data will be accessed and processed solely by these third-party providers;

 

  1. to the companies   and professionals   of whom   the Data Controller   makes use of   for consultancy   or assistance in the conduct of its business activities, as well as the management of the Website, in particular with regard to providers of professional services (administrative, tax, legal, etc.), IT and telecommunications infrastructure and services, as well as the maintenance and management of the members’ area; 

 

  1. to third parties within the public administration (e.g. public bodies or state authorities) where this is necessary for the Data Controller to carry out its activities, in accordance with the aforementioned purposes.

 

Unless otherwise specifically stated, data will not be transferred or processed outside the EuropeanXor to any other location deemed not to comply with relevant EU legislation. Where applicable (e.g. for certain types of cookies), data transfers will generally take place on the basis of the European Commission’s standard contractual clauses or other appropriate safeguards (pursuant to Article 46 of the GDPR) or on the basis of one of the exceptions set out in Article 49 of the GDPR, unless otherwise specified. In particular, the transfer of data to the United States to entities participating in the so-called EU–US Data Privacy Framework is to be considered an adequate safeguard.

 

4. WHAT RIGHTS DO YOU HAVE REGARDING THE PROCESSING OF YOUR DATA?

 

You may contact the Data Controller to exercise the rights set out in Articles 15–22 of the GDPR. Your rights are as follows:

 

  1. the right to request access to your personal data from the data controller, asking for confirmation as to whether or not such data exists , as well as   the  rectification  or  the  erasure of   such data  or the restriction (temporary suspension) of the processing concerning you;
  2. the right to   object at   any   time to   their   processing for reasons relating to your particular situation in   the event   of:   i) processing necessary for the performance of a task carried out in the public interest or   in the exercise of official   authority,  or ii) the pursuit of the data controller’s legitimate interests;
  3. if consent has been given for one or more specific purposes, the right to withdraw that consent at any time;
  4. the right to   the portability of   personal data (for those   where the   legal basis   is the performance of a contract or consent) by submitting a request to the data controller, by means of a file in a commonly used format, or a similar open, interoperable format, depending on the type of data requested;
  5. the right to  lodge  a complaint   with the following   Data    Supervisory Authority:  “Garante  per  la  protezione  dei  dati personali” (http://www.garanteprivacy.it); you also have the right to lodge a complaint with the competent supervisory  authority   of the  Member   State  where   you  habitually reside,  work  or where the alleged infringement occurred.

 

Please also note that you may contact the Data Controller to request information regarding the balancing of interests test, where legitimate interests form the basis for processing.

 

5. FROM WHOM HAVE WE COLLECTED YOUR DATA AND WHAT TYPE OF DATA? WHAT HAPPENS TO THE DATA OF OTHER PEOPLE THAT I MIGHT PROVIDE TO YOU?

 

Data is collected directly by the Data Controller when you request information or make contact, when you browse the Website voluntarily, or when you register for or access the members’ area.

 

The data   provided by you   directly   is   general data    relevant   to  the purposes set out above, such as identification and   contact details (including   the IP address   used to access the site) and   any other   data that may be   provided when completing registration or contact forms.

 

As regards the personal data you have provided in relation to third-party individuals (such as family members, friends, employees, collaborators, etc.),  you declare   that you   hold   all necessary authorisation to disclose such data to the Data Controller and to provide them with this privacy notice, where required by law. The Data Controller shall, in any event, remain the independent data controller in its own right, without bearing any liability for any unlawful acts or claims by third parties regarding the processing of such third parties’ data.

 

6. COOKIES

The processing of cookies (both technical and non-technical, such as marketing cookies) is carried out for the purposes, durations and further details set out in the specific cookie policy, to which reference should be made: https://www.marposs.com/ita/cookies. For matters such as the contact details of the Data Controller and the Data Protection Officer, as well as the rights to which you are entitled, you may always refer to the information provided in this document.

 

7. SOCIAL MEDIA

The ‘buttons’ on the Website featuring social network icons (e.g. Facebook, LinkedIn, Twitter, Google+ etc.) allow you to access and interact with our social media pages.

No third-party cookies are installed on the Website through the use of these buttons.

However, below are links where you can view the privacy policies of the social networks to which the buttons link:

  • https://www.linkedin.com/legal/cookie-policy
  • https://www.facebook.com/policies/cookies/
  • https://www.twitter.com/privacy
  • https://policies.google.com/technologies/cookies.

As regards the processing of data via social media, please refer to the purposes already indicated above – for example, providing information at the request of the data subject, via online messaging, posts, comments, emails, etc. Becoming a follower/fan or similar form of expressed preference via social media will be interpreted as consent to receive, via the social media platform’s own communication channels, any news and commercial communications from the Data Controller.

 

8. HOW WILL YOU BE INFORMED OF ANY CHANGES TO THIS POLICY?

 

This Privacy Policy  may be subject  to  changes   and   updates, should any changes  be made to the way in which we process your data or to the other information provided herein. Any changes will, in any case, ensure that your rights are fully protected. Before the processing of personal data commences in accordance with the new procedures, you will be promptly informed, including via the website, and you will be guaranteed the exercise of all rights provided for by applicable laws and regulations.

 

Last updated: 1 September 2026