Loading
Privacy Policy

PRIVACY POLICY REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO THE GENERAL DATA PROTECTION REGULATION NO. 679/2016 (GDPR)


INTRODUCTION

In compliance with the obligations set forth by the European Regulation 679/2016 (hereinafter "GDPR"), this privacy policy is provided for all individuals who interact with the web services of Metallurgica Bresciana S.p.A., accessible electronically starting from the address https://www.metallurgicabresciana.it/, owned by Metallurgica Bresciana S.p.A. (hereinafter also referred to as the "Company" or "Metallurgica Bresciana").

This document provides a privacy notice pursuant to Art. 13 of the GDPR regarding the management methods of the website https://www.metallurgicabresciana.it/ with respect to the processing of personal data of the users who visit it.

On the web pages of the site https://www.metallurgicabresciana.it/, you may find hyperlinks (links) to other websites, provided to offer a better service to users; the Company cannot be held responsible in any way for the content of websites that users may access through its site.

The existence of a link to another site does not imply, therefore, approval or acceptance of responsibility by the Company regarding the content of the new site accessed, including in relation to the policy adopted for the processing of personal data and its usage.


DATA CONTROLLER, DATA PROCESSORS AND AUTHORIZED PERSONS

The Data Controller is Metallurgica Bresciana S.p.A. (hereinafter also referred to as the "Company" or "Metallurgica Bresciana") with registered office in Viale Marconi n. 31, Dello (BS), e-mail: privacy.metallurgica@stl.tech

The data may be processed by authorized employees within the corporate functions, as well as by external processors acting on behalf of the Data Controller.

Any partner sites that process data independently may assume the role of autonomous data controllers. The list of processors and/or authorized entities can be requested by writing to the e-mail address privacy.metallurgica@stl.tech


TYPES OF DATA PROCESSED

Pursuant to Art. 4.1, lett. a) of the GDPR, "personal data" means "any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier".

The personal data collected through the website https://www.metallurgicabresciana.it/ belongs to the following categories.

Browsing Data
The computer systems and software procedures used to operate the website https://www.metallurgicabresciana.it/ acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.
This browsing data includes IP addresses or domain names of the computers used by users connecting to the Site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters related to the user's operating system and computer platform.
This data may be processed by the Data Controller to obtain anonymous statistical information on site usage, to identify the users' preferred pages in order to present them with the most appropriate content, and to check its correct functioning.
No data deriving from the web service will be communicated or disseminated, except in cases provided for by law or for purposes strictly functional to providing the service.
The data could also be used to ascertain responsibility in case of hypothetical cybercrimes against the Site.

Cookies
Cookies are generally defined as small text files stored on the user's device when browsing websites, including those of Metallurgica Bresciana.
The cookies used help user navigation within the sites and store choices made during sessions, avoiding the use of other IT techniques potentially detrimental to the confidentiality of users' browsing.
Many web browsers automatically activate cookies; however, if the user wishes, it is possible to configure the browser to deactivate them: in this case, however, site navigation may not be complete, mainly due to the non-installation of technical cookies.
The site may send technical cookies and profiling cookies; data collected through cookies can also be used for statistical purposes or to improve services, always in an aggregate and anonymous form.
This type of cookie allows the user correct navigation on the sites and the use of special functions such as access, where provided, to secure areas of the sites. Without these cookies, it will not always be possible to provide authentication services or the correct functioning of the websites.
Technical cookies are distinguished from "third-party" cookies, which are instead set by a website different from the one the user is currently visiting/using.
In line with regulatory provisions, prior consent for the use of cookies is required for non-anonymized "analytical" cookies and for profiling cookies, e.g., those that create user profiles to send advertising messages in line with preferences expressed during browsing.
Further information on cookies can be found in the cookie policy at the following link: https://www.metallurgicabresciana.it/en-cookie.php

Data provided voluntarily by the user
The optional, explicit, and voluntary sending of communications via e-mail, forms to be filled out, or various modules present on the site https://www.metallurgicabresciana.it/ entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message, communication, or form in question. This data will be processed in accordance with current regulations to pursue the purposes for which they were communicated.
The provision of personal data provided voluntarily is optional, but failure to collect it may result in the impossibility of obtaining what was requested.


Contacts

Users wishing to request information from Metallurgica Bresciana can fill out the form available in the "Contacts" section.
Users are requested not to provide irrelevant personal data; in any case, irrelevant data will be deleted or otherwise ignored.
The requested data (name, phone number, company) will be processed solely to respond to the user's contact requests, based on the performance of a contract to which the data subject is a party, as established by Art. 6, par. 1, lett. b of Regulation (EU) 2016/679 (GDPR).


Personal Area – Notice Board

Through its website, the Data Controller provides a restricted-access section called "Employee Notice Board" (Bacheca dipendenti), intended exclusively for internal personnel.

Access to the Notice Board is done via personal credentials. Upon first login, authentication is carried out using firstname.lastname and an initial password based on the employee ID number, which can subsequently be modified by the user.

The Notice Board allows employees to consult information useful for carrying out work activities, including, by way of example, company documents, work shifts, machine availability, HR communications, and informational messages.
The section also includes digital forms through which employees can directly enter data necessary for managing the employment relationship and organizational activities.

The personal data processed within the Notice Board includes identification and contact details, data relating to the employment relationship, and further information provided directly by the data subject through the available forms.

The processing is carried out based on the fulfillment of contractual and pre-contractual obligations.


PURPOSES OF PROCESSING, LEGAL BASES AND DATA RETENTION PERIOD

Personal data provided through the site will be processed by the Company for the following purposes:

  • A) For consulting the Site and the available content;
  • B) For the possible collection of cookies and non-technical tracking tools collected through the specific banner;
  • C) To allow the performance of activities related to the use of the website, such as, by way of example, managing contact requests sent via the form on the site;
  • D) To ensure access to the Personal Area (and the related use of the Notice Board), as well as the provision of services connected to it;
  • E) Purposes aimed at preventing or blocking fraudulent activities or improper use that could damage the site or compromise the security of operations;
  • F) Purposes necessary to establish, exercise, or defend a right in court or whenever judicial authorities exercise their jurisdictional functions;
  • G) Purposes related to compliance with a legal obligation to which the Data Controller is subject;

The legal basis for processing personal data for the purpose under point A) lies in the legitimate interest of the Controller in the correct functioning of the Site.
For the purpose under point B), processing through cookies and non-technical tracking tools is based on the consent of the data subject, expressed through the specific banner and revocable at any time.
The data is kept for the time strictly necessary for browsing, until consent is withdrawn.
For the purposes under points C) and D), the legal basis is represented by the execution of pre-contractual measures taken at the request of the data subject and/or the performance of a contract to which the data subject is a party; the data will be kept for the entire duration of the contractual relationship and, following its termination, for a period of ten years.
For the purposes under points E) and F), processing is necessary for the pursuit of a legitimate interest of the Data Controller; the data will be kept respectively for the entire duration of the browsing session on the Site and for the entire duration of the litigation, until the expiration of the terms for appeal.
For the purpose under point G), the processing of personal data is carried out as it is necessary to comply with a legal obligation to which the Data Controller is subject; the data will be kept for the entire duration of the contractual relationship and, subsequently, for a period of ten years.


PROCESSING METHODS – SECURITY MEASURES

Users' personal data is processed by electronic and/or automated means and/or paper support, according to the principles of fairness, lawfulness, transparency, confidentiality, and in compliance with current applicable regulations, including the General Data Protection Regulation (GDPR).
Personal data is processed for the time strictly necessary to achieve the purposes for which it was collected. More information regarding data retention and/or the criteria used to determine this period is available by writing to info.metallurgica@stl.tech.
In order to prevent loss or destruction, even accidental, of data, or illicit or incorrect use or unauthorized access, specific technical and organizational security measures prescribed by current regulations are observed and adopted.


COMMUNICATION AND DISSEMINATION OF DATA

The personal data collected may be communicated to third parties as independent Data Controllers, external Data Processors, and persons in charge of carrying out activities connected and instrumental to the processing of the data itself. In addition to the Controller, in some cases, categories of processors and persons in charge involved in the corporate organization of the Site may have access to the data, such as administrative, commercial, marketing, legal staff, and system administrators.

The Controller may use external entities, such as third-party technical service providers, couriers, hosting providers, cloud services, IT companies, and communication agencies, which may be appointed as external Processors.
The data will never be publicly disseminated, and the updated list of Data Processors can always be requested from the Controller at the address privacy.metallurgica@stl.tech

If personal information is transferred to countries that do not provide the same level of protection provided by the GDPR, or in any case an adequate level of personal data protection, the Company will ensure that each service provider assumes specific contractual obligations in compliance with applicable personal data protection laws (including the signing of the Standard Contractual Clauses approved by the European Commission), unless the Company can rely on any other legal basis for the transfer of personal information.


MINORS' PERSONAL DATA

The website https://www.metallurgicabresciana.it/ is not directed at minors under 18 years of age and does not intentionally collect personal data from them.
Therefore, individuals who have not yet reached the age of 18 are requested not to communicate their personal data under any circumstances. The Company Metallurgica Bresciana reserves the right to block access to services and does not guarantee the successful outcome of requested activities/services for anyone who has concealed their minor status.


RIGHTS OF THE DATA SUBJECT

Data subjects have the right, at any time, to obtain confirmation as to whether or not personal data concerning them exists and to know its content and origin, verify its accuracy, or request its update, rectification or, when interested, integration.
In cases provided for by current regulations, data subjects also have the right to request and obtain the erasure of their personal data at any time, its transformation into anonymous form, or the blocking of data processed in violation of the law, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed, as well as to object, in whole or in part, for legitimate reasons, to its processing.

Requests must be addressed to the Data Controller, by writing via email to the address: privacy.metallurgica@stl.tech
The exercise of these rights must not prejudice and/or harm the rights and freedoms of others.
If requests are submitted through electronic means, the information will be provided free of charge and in a commonly used electronic format.

According to Art. 15(3) of the GDPR, if the user's requests are manifestly unfounded or excessive, in particular because of their repetitive character, the Company may alternatively:

  1. Charge a reasonable fee taking into account the administrative costs incurred to provide the information or communication or take the action requested;
  2. Refuse to act on the request.

In both circumstances, Metallurgica Bresciana provides an adequate justification to the user.
If data subjects believe that the processing of their personal data is taking place in violation of current regulations, they have the right to lodge a complaint with the competent Supervisory Authority pursuant to Art. 77 of the GDPR.


CHANGES

Metallurgica Bresciana reserves the right to modify or update the content of this document, in part or completely, also due to changes in applicable regulations.
We therefore advise you to regularly check this section to take note of the most recent and updated version of the Privacy Policy so that you are always updated on the data collected and the use made of it by the Company.
In the event that Metallurgica Bresciana makes changes deemed important, users will be informed via the website https://www.metallurgicabresciana.it/.


Last review: June 2026