Privacy Policy
Controller and contact details
EMC s.r.l., Via Brodolini 23, 40026 Imola (BO) - Italy
You can contact us at any time if you have any questions regarding data protection. You can receive information on data protection at info@emcmachines.com
Contents of the privacy statement
Information about its data subjects and the right to appeal
- Using the website and our IT systems (maintenance and security)
- Processing in connection with providing and rendering services, in particular to market our products and offer services (such as training)
- Processing for marketing (customer queries, customer service and advertising)
- Public relations work
- Data processing during application procedures
- Communication
Information about its data subjects and the right to appeal
In the following document, we will inform you about the processing of your personal data obtained through using our website. In principle, users can visit our site without registering. While such data remains anonymous, data such as pages visited or files accessed and their date and time are stored on our server for statistical use. Personal data, in particular, names, addresses, e-mail addresses may be collected at any time without permission. Data may not be transmitted to third parties without your permission.
The rights of the persons affected may be asserted should the corresponding criteria be met. Please note that you may be required to provide proof of identification in advance.
- Right of access to data: you may freely request confirmation as to whether personal data about you has been processed and request access to such data and information in accordance with Article 15 of the GDPR.
- Right to amend if we process incorrect or incomplete data about you (Art. 16 GDPR).
- Right to delete personal data if the criteria of Art. 17 GDPR are fulfilled.
- Right to restrict the processing of your data in accordance with Art. 18 of the GDPR.
- Right to transfer and receive personal data that you have supplied in an automated process in a format that is structured, conventional and machine readable. (Art. 20 GDPR).
- For processing based on a legitimate interest, you have the right to object at any time in accordance with Art. 21 of the GDPR. This right is unrestricted in cases where data shall be processed for the purpose of direct advertising and related profiling.
- You may revoke your consent for the processing of personal data at any time; the legality of the data processing up until such a time at which you revoke this right is not affected by this.
Right of Appeal
You have the right to appeal to a relevant supervisory authority (data protection authority), in particular in the EU Member State of your place of residence, your workplace or the place of suspected infringement, if you believe that the processing of personal data concerning you violates the Basic Data Protection Regulation or if your rights as a data subject have been violated. We would be most appreciative if you could contact us and offer us your opinion. A list of the supervisory authorities can be found here: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.
Should you wish to contact us directly, we are available to answer any questions you may have about data protection at info@emc-italia.it. We would like to point out that your queries can only be processed if you can confirm your identity.
1. Using the website and our IT systems (maintenance and security)
Purposes of processing
In order to operate and maintain our IT systems and the company website, to ensure data security and to prevent abusive or fraudulent behaviour, we process our users' personal data solely as required for the provision of our services and its contents.
Legal bases and (substantial) legitimate interests
We process your data for pre-contractual provisions or contractual duties (such as fulfilling the terms and conditions, terms of use and article 6, paragraph 1, lit. b of the GDPR) to the extent legally required (article 6, paragraph 1, lit. c of the GDPR, e.g. consent to authorise cookies and ensuring the appropriate level of data security), as well as for the following (substantial) legitimate interests, based on article 6, paragraph 1, lit. f of the GDPR):
- ensuring a fully functional and attractive representation online,
- maintaining data security,
- efficient internal administration within the company / group.
Receivers or receiver categories and transfers to third countries or international organisations
Transfers are not intended but users of our services and published data (such as comments) are, however, public and potentially accessible worldwide. If required, the data may be transferred to prosecution authorities, courts etc. for asserting legal claims made by the controller or third parties.
We use the services of the following processors:
Google Analytics
Our site uses Google Analytics, a web based analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To deactivate Google Analytics, Google provides a browser plug-in at http://tools.google.com/dlpage/gaoptout?hl=en. Google Analytics uses Cookies. Cookies are small text files that allow us to store specific information regarding the user on their device while they use the website. This allows analysis of the use of our web page via Google. The information collected by the cookie about the use of our pages (including your IP address) is usually transferred to a Google server in the USA and stored there. We wish to make clear that Google Analytics has been extended on this website using the code 'gat._anonymizelp();' in order to provide an anonymised record of IP addresses (known as IP masking). If anonymisation is active, Google abbreviates all IP addresses within European Union Member States or in other signatory countries to the EEA Agreement, so that no assumptions can be made about to your identity. In exceptional cases only, the full IP address is transmitted to a Google server in the USA and abbreviated there. Google complies with the data protection provisions of the "Privacy Shield" agreement. It is registered with the US Department of Trade's Privacy Shield programme and uses collected information to examine usage of our website, to compile reports for us in relation to this usage, and to provide us with other related services. You can find more information at http://www.google.com/intl/de/analytics/privacyoverview.html.
Cloudflare Turnstile
On our website, we use the Cloudflare Turnstile function from Cloudflare Inc (8665 3rd St. #200, San Francisco, CA 94107, USA) for forms.
This serves to differentiate whether entries are made by a natural person or abusively by machine and automated processing.
The service includes sending the IP address and any other data required by Cloudflare for the Turnstile service to Cloudflare.
We use Cloudflare Turnstile in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and avoiding abuse and spam. When using Cloudflare Turnstile, personal data may also be transmitted to Cloudflare's servers in the USA.
Further information about Cloudflare Turnstile and Cloudflare's privacy policy can be found at https://www.cloudflare.com/trust-hub/gdpr/
Clarity (Microsoft)
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement
The collection of data from other sources: categories of personal data
For each visit to our website, our system automatically gathers data and information from the user's computer system.
The following data is collected from this:
- Information about browser type and the version used
- The user's operating system
- The user's internet service provider
- The user's IP address and the browser's session ID
- Date and time of access
- Data about the end device (device ID, screen resolution, language and country settings ...)
- Web pages visited by the user's system on our website
- Web pages called upon by the user's system on our website.
Storage period
Data required for the functionality of our website will only be processed and saved for the duration of your visit to our pages. Log data and IP addresses will generally be saved for 7 days in order to deter attacks against our systems. In order to provide information on data security issues and to assert any damage claims, this information will be saved until the final settlement of such.
Provision of data
There are no legal or contractual duties to provide data. This data is, however, necessary for the functionality of our website and our IT systems, which can otherwise potentially become compromised.
Further processing of your data for other purposes
Part of the data collected will be further processed for marketing purposes. We will inform you about this and your right to object at the time of the collection. We kindly ask that you refer to section 3 of the privacy statement.
2. Processing in connection with providing and rendering services, in particular to market our products and offer services (such as training)
Purposes of processing
We collect personal data to deliver our products and render our services. This includes the online shop and the use of third party services through business relationships.
Legal bases and legitimate interests
The legal bases for the processing of data are pre-contractual provisions or contractual duties (article 6, paragraph 1, lit. b of the GDPR), legal and regulatory duties (article 6, paragraph 1, lit. c of the GDPR, in particular taxation law), as well as the following (substantial) legitimate interests (article 6, paragraph 1, lit. f of the GDPR):
- The assertion or defence of legal claims, in particular for warranty and product liability reasons
- Reducing default risks (including those of third parties)
- To answer customer queries regarding products and services; the right to object at any time remains, unless this opposes a substantial interest (such as liability)
- efficient internal administration within the company / group
Receivers or receiver categories and transfers to third countries or international organisations
In an emergency, personal data is transferred to the following receiver categories:
- Banks (to process payment flows)
- Legal representatives, courts if required
- Business trustees (for auditing purposes)
- The responsible administrative authorities, esp. financial authorities
- Collection agencies for debt recovery (abroad only to the extent the debt must be recovered abroad)
- External financiers such as leasing or factoring companies and concessionaires, to the extent the delivery or service is externally financed in this way
- Contract or business partners, who contribute or will contribute to the delivery or service (such as delivery companies)
- Insurance policies issuing from the conclusion of an insurance contract regarding the delivery/service or the advent of an insured event
- Authorities and institutions in order to create the legally required (official) statistics
- Customers (recipients of services)
- Credit agencies
Transfers to third countries or international organisations only take place in these instances, if on the basis of an adequacy decision according to article 45 of the GDPR or on the basis of the requirements of article 49, paragraph 1, lit. b, c or e of the GDPR (the requirement to conduct pre-contractual provisions upon request by the affected person or, in their interest, the assertion, execution or defence of legal claims) or on the basis of consent, in accordance with article 49, paragraph 1, lit. a of the GDPR.
We use the services of the following processors:
Google Analytics
Our site uses Google Analytics, a web based analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To deactivate Google Analytics, Google provides a browser plug-in at http://tools.google.com/dlpage/gaoptout?hl=en. Google Analytics uses Cookies. Cookies are small text files that allow us to store specific information regarding the user on their device while they use the website. This allows analysis of the use of our web page via Google. The information collected by the cookie about the use of our pages (including your IP address) is usually transferred to a Google server in the USA and stored there. We wish to make clear that Google Analytics has been extended on this website using the code 'gat._anonymizelp();' in order to provide an anonymised record of IP addresses (known as IP masking). If anonymisation is active, Google abbreviates all IP addresses within European Union Member States or in other signatory countries to the EEA Agreement, so that no assumptions can be made about to your identity. In exceptional cases only, the full IP address is transmitted to a Google server in the USA and abbreviated there. Google complies with the data protection provisions of the "Privacy Shield" agreement. It is registered with the US Department of Trade's Privacy Shield programme and uses collected information to examine usage of our website, to compile reports for us in relation to this usage, and to provide us with other related services. You can find more information at http://www.google.com/intl/de/analytics/privacyoverview.html.Clarity (Microsoft)
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement
The collection of data from other sources: categories of personal data
Depending on the legitimate interest (value of the order, method of financing), we collect information about creditworthiness prior to accepting an order, as well as the following personal data.
In the online shop, cookies are used to operate the shopping basket and the order process.
Storage period
Until the termination of the business relationship or until the end of the guarantee, warranty, limitation and legal retention dates; moreover, until the termination of any legal disputes, which may require data as evidence. For as long as necessary in the case of services, where compensation claims are asserted, in accordance with the civil code or other titles (such as product liability).
Provision of data
The collection of essential data is necessary to conclude a contract.
Further processing of your data for other purposes
Part of the data collected will be further processed for marketing purposes. We will inform you about this and your right to object at the time of the collection. We kindly ask that you refer to section 3 of the privacy statement.
3. Processing for marketing (customer queries, customer service and advertising)
Legal bases and legitimate interests
Legitimate interests on the basis of article 6, paragraph 1, lit. f of the GDPR:
- Advertisements for products and services offered by the company
- To acquire and retain customers (bonus scheme for regular customers)
- To improve the attractiveness of offers
Objection
You retain the right to make an informal objection at any time to the processing of data for these purposes and you may demand that we delete or restrict processing. We will inform you of your rights at the time of data collection.
Receivers or receiver categories and transfers to third countries or international organisations
In an emergency, personal data is transferred to the following receiver categories:Delivery services
We use the services of the following processors:
Cookies
Our site uses Cookies. Cookies are small text files that allow us to store specific information about the user on the their device while they use the website. Cookies allow us to determine the frequency of use and the number of page visitors, to analyse the behaviour of site users as well as making our site more user-friendly. Cookies are stored at the end of a browser session and can be reused the next time you visit a site. If you do not want your cookies to be stored, you can change your browser settings to refuse cookies.
Google Analytics
Our site uses Google Analytics, a web based analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To deactivate Google Analytics, Google provides a browser plug-in at http://tools.google.com/dlpage/gaoptout?hl=en. Google Analytics uses Cookies. Cookies are small text files that allow us to store specific information regarding the user on their device while they use the website. This allows analysis of the use of our web page via Google. The information collected by the cookie about the use of our pages (including your IP address) is usually transferred to a Google server in the USA and stored there. We wish to make clear that Google Analytics has been extended on this website using the code 'gat._anonymizelp();' in order to provide an anonymised record of IP addresses (known as IP masking). If anonymisation is active, Google abbreviates all IP addresses within European Union Member States or in other signatory countries to the EEA Agreement, so that no assumptions can be made about to your identity. In exceptional cases only, the full IP address is transmitted to a Google server in the USA and abbreviated there. Google complies with the data protection provisions of the "Privacy Shield" agreement. It is registered with the US Department of Trade's Privacy Shield programme and uses collected information to examine usage of our website, to compile reports for us in relation to this usage, and to provide us with other related services. You can find more information at http://www.google.com/intl/de/analytics/privacyoverview.html.
Clarity (Microsoft)
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement
Storage period
Data from interested parties and profiles on the online shops will be saved for 3 years from the date of the last contact with the customer. Addresses and email addresses will be saved for the duration of the advertising campaigns or until objection or unsubscription from a newsletter; moreover, data is saved if there is a request to restrict processing or if the processing is used for other purposes that require a longer duration (in particular, in accordance with section 2 of the privacy statement).
Provision of data
There is no obligation to provide data.
Further processing of your data for other purposes
For customer queries, depending on the type of query and the conduct of potential further processing in connection with deliveries and services, see the further details in section 2 of the privacy statement.
4. Public relations work
Purposes of processing
Provision of information regarding the controller's work and services in at least local or regional public interest.
Objection
You retain the right to make an informal objection at any time to the processing of data for these purposes and you may demand that we delete or restrict processing. We will inform you of your rights at the time of direct data collection and within the context of inviting you to events.
Legal bases and legitimate interests
The legal basis for processing is the freedom of expression, in accordance with articles 13, 17 and 17a of the Austrian constitution, as well as article 10 of the ECHR and, if published purposes are pursued, in accordance with article 85 of the GDPR in conjunction with section 9, paragraph 2 of the Data Protection Act (and for image data, section 12, paragraph 2 Z 4 of the Data Protection Act, if there is a substantial interest in the public display of major events in history); otherwise, the publication of image data will require the consent of the data subject (article 6, paragraph 1, lit. a of the GDPR / article 9, paragraph 2, lit. a of the GDPR).
Receivers or receiver categories and transfers to third countries or international organisations
No transfer receivers are intended, however publication is in the public interest and, insofar as this is available online, potentially accessible worldwide.
Storage period
The storage period is limited to the same period as that for the data made and used for publishing purposes; depending on the interest in documentation, data may be permanently archived for later use (re-use) for the processing purposes described.
Provision of data
There is no duty to provide data.
Further processing of your data for other purposes
Data is only used for the intended purposes and, potentially for archiving purposes in the public interest, scientific, historic or research purposes or for statistical purposes, in accordance with article 5, paragraph 1, lit. b of the GDPR.
5. Data processing during application procedures
Purposes of processing
Time-limited record of personal data from unsolicited and solicited applicants, as well as for use in choosing an applicant and concluding a service contract.
Legal bases and legitimate interests
We process applicant data on the basis of article 6, paragraph 1, lit. b of the GDPR (pre-contractual provisions), as well as article 6, paragraph 1, lit. f of the GDPR, in order to contact applicants within the storage period and potentially, if in our interest or in the interests of a third party, to check their details if they are needed for a position requiring a higher level of confidentiality.
Receivers or receiver categories and transfers to third countries or international organisations
Your data will only be divulged to our employees if necessary. If references are provided, this may result in us contacting them. Similarly, in certain justified cases of substantial interest, your details may be checked by third parties (such as for checking stated qualifications and university degrees). Transfers to third countries or international organisations only take place in these instances, if on the basis of an adequacy decision according to article 45 of the GDPR or on the basis of the requirements of article 49, paragraph 1, lit. b of the GDPR (the requirement to conduct pre-contractual provisions upon request by the affected person) or on the basis of consent, in accordance with article 49, paragraph 1, lit. a of the GDPR.
The collection of data from other sources: categories of personal data
During contact with the references you have provided, data and information about your previous business relationship or employment, as well as subjective evaluations of your work performance, may be obtained by the relevant third parties. (Storage of this data and information is not intended.)
Storage period
If you have applied for an advertised position, we will keep your personal data for a maximum of three years following the end of the application period, then it will be deleted. Furthermore, you can informally object to this within six months of the end of the application period.
If you have submitted an unsolicited application, we will keep your documents for a maximum of three years, so that we can contact you regarding any suitable positions. However, you can informally object at any time.
Provision of data
In order to process applications, it is necessary for you to provide evidence of your qualifications and contact details. In certain cases, regardless of the requirements of the position, it may also be necessary to obtain further data from you (such as a criminal record). If you cannot provide the required data, then your application for the position cannot be considered.
Further processing of your data for other purposes
If you enter into employment, your application documents will be further used for human resource purposes, with the exception of special data that is worth protecting (such as a criminal record). All other information will be provided to you before concluding the contract
6. Communication
Purposes of processing
If you contact us by email, telephone or by using the form on our website, we will collect and process the data technically necessary for communication (depending on the chosen means of communication). This can include your telephone number, email address, the time (and potentially the duration) of the communication, etc. Incoming emails will also be processed through a spam filter, firewall, virus scanner, etc. in accordance with the purposes set out in section 1 of this statement.
Legal bases and legitimate interests
The data which you input will be processed for the purpose of answering your query on the basis of legitimate interests, as set out in article 6, paragraph 1, lit. f of the GDPR. Other processing purposes depend on the content of the communication and are covered by sections 1-6 of this privacy statement.
Objection
In accordance with processing for the purposes set out in article 6, paragraph 1, lit. e and f of the GDPR, you retain the right to make an informal objection at any time to the processing of data for these purposes and those arising from your particular situation and you may demand that we delete or restrict processing. We will inform you of your rights at the time of direct data collection (such as on the online form). This right does not apply if we process your query or communication for other reasons (such as contractual duties, legal duties and product liability) and if we have to store the communication for the relevant period of time stated in this privacy statement.
Receivers or receiver categories and transfers to third countries or international organisations
Depending on the purposes of communication, it may be necessary to conduct a relevant transfer, in accordance with sections 1 to 6 of this privacy statement.
The collection of data from other sources: categories of personal data
In every instance of contact, our systems gather data and information about the means of communication and the technical systems used by the data subject.
The following data is collected in this respect: the data subject's contact data (such as telephone number, email address, etc.), the time of the communication (date, time)
Storage period
The storage period depends on the time required to conclude communication on the issue raised; moreover, a longer storage period, regardless of the purpose of the communication, may be required, as stated in sections 1-6 of this privacy agreement.
Provision of data
There is no duty to provide data.
Further processing of your data for other purposes
Depending on the contents of your query or communication, further processing may take place for the purposes listed in sections 1 - 6 of this privacy agreement.
