Privacy Policy

Privacy Policy for users browsing the website www.cosmotec.it

This notice describes the lawful conditions and methods by which users' personal data will be processed on the website cosmotec.it from STULZ S.P.A. (hereinafter the “Company” or the “Data Controller”), in compliance with European Regulation 2016/679 on the protection of personal data (hereinafter also “GDPR”).

Data Controller

The data controller is Stulz S.p.A., located at via Torricelli 3, 37067 Valeggio sul Mincio (VR). It can be contacted by email at administration@stulz.it, with certified email (PEC) at stulzspa@pec.it, or by telephone at +39 045 6331600.

DATA ACQUISITION CHANNELS

The Data Controller may collect personal data on the following occasions:

• of user navigation on this website;
• information requests submitted by interested parties via the data collection forms (e.g. “Contact Us” ...)
• from the collection of data via cookies installed on this website.

TYPES OF DATA PROCESSED

The Data Controller may collect and process, in compliance with European legislation, the following data:

Navigation data

The computer systems and software procedures that operate this website acquire, during their normal functioning, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.), and other parameters relating to the user's operating system and IT environment.

Such data, necessary for the use of web services, are also processed for the purpose of: a) obtaining statistical information on the use of services (most visited pages, number of visitors by time of day or daily, geographical areas of origin, etc.); b) checking the correct functioning of the services offered.

Navigation data is not retained for longer than necessary to ensure the functioning of the site and is deleted immediately after its aggregation (except where necessary for the investigation of criminal offences by the judicial authorities).

Data provided by the data subjects through the forms on the website

For the submission of requests via the forms on this website, the User communicates their personal data, including registration data (name and surname) and contact addresses (e.g. telephone, e-mail). Data marked with an asterisk are mandatory and, in their absence, the Data Controller will not be able to respond to requests; the other data are optional and the Data Subject is free to communicate them. Specific information is present in the data collection forms published on this website.

Cookies and other tracking systems

Para obtener información sobre el uso de cookies en este sitio web, consulte la Política de Cookies:

Information on the processing of personal data carried out through company social media pages

Regarding the processing of personal data carried out by social media platform operators (LinkedIn etc.) used by the Data Controller, please refer to the information provided by them through their respective privacy policies. The Data Controller processes the personal data provided by data subjects through its social pages exclusively to manage interactions with users (comments, posts etc.) and in compliance with personal data processing regulations.

PURPOSE, LEGAL BASIS FOR PROCESSING

The personal data of website users may be processed for the following purposes: i) to provide products, services, or information requested by the data subjects via the data collection forms published on this website; ii) to comply with any contractual obligations related to goods or services requested by the data subject; iii) to comply with any legal obligations of an accounting, administrative, or fiscal nature related to goods or services requested by the data subject; iv) to activate information services such as sending newsletters, commercial communications via email; v) to potentially profile the data subject with their explicit consent.

The legal basis for processing for the purpose referred to in point i) is the performance of pre-contractual measures (Art. 6(1)(b) GDPR); for the purpose referred to in point ii) it is the performance of contractual obligations (Art. 6(1)(b) GDPR); for the purpose referred to in point iii) the fulfilment of legal obligations (Art. 6(1)(c) GDPR); for the purposes referred to in points iv) and v) the consent of the data subject.

NATURE OF ASSIGNEMENT

With the exception of browsing data, the provision of data communicated by the user is optional; however, failure to provide it will prevent your request from being fulfilled.

TREATMENT MODALITIES AND DATA RECIPIENTS

The personal data of website users will be processed – using electronic means – in compliance with the principles of lawfulness, fairness, and transparency, and with the relevant regulations. In particular, the data may be processed by internal staff of the Data Controller who, based on written instructions for correct data processing methods, are authorised to process the data, as well as by any third parties involved in carrying out the same activities as Data Processors or Data Controllers.

TREATMENT DURATION

The personal data communicated by data subjects will be retained for as long as necessary to enable the performance of the purposes for which they were transmitted and, in any case, until the data subject requests erasure, subject to different contractual or regulatory obligations. Navigation data will not be retained for longer than is necessary to ensure the functioning of the website itself.

TRANSFER OF DATA TO THIRD COUNTRIES

The data will not be transferred to third countries and, where they are transferred, the conditions and guarantees provided for in Articles 44 et seq. of the Regulation will be respected.

DATA SUBJECT RIGHTS

The data subject has the right to request access to their personal data, rectification, erasure, restriction of processing, and to object to such processing at any time from the Data Controller, as well as the right to data portability. The data subject may exercise these rights using the contact details provided above. The consent given may be withdrawn at any time by contacting the Data Controller at the e-mail address indicated, if the processing is based solely on the data subject’s consent.

RIGHT OF COMPLAINT

Where the data subject considers that the processing of personal data is being carried out in violation of the provisions of the Regulation, they have the right to lodge a complaint with the Personal Data Protection Authority, as provided for by Article 77 of the Regulation, or to take legal action (Article 79 of the Regulation).

The Data Controller
STULZ S.P.A.