Legal info and privacy policy

WEBSITE WWW.LEANFABRICA.COM – PRIVACY POLICY

​

This information on the processing of personal data, in compliance with articles 13 (Privacy Policy) of Legislative Decree 30 June 2003 n. 196, Code regarding the protection of personal data, and of the EU Regulation 2016/679 (GDPR) concerning the protection of individuals with regard to the processing and free circulation of personal data, aims to make the Users of this Website aware of the methods of processing personal data.

The processing of personal data will in any case be based on principles of correctness, lawfulness, transparency and protection of the privacy and freedom rights of the user, interested in the processing.

​

1. Data controller

The data controller is the company Galaxy M63 srl, where Lean Fabrica ® is established, with registered office in Monza - 20900 (MB) in Via Moriggia, 3 - VAT and CF 06682010969.

 

Galaxy M63 srl has designated Elvezia Sironi, as natural person legal representative of the Data Controller, domiciled, for these purposes, at the company's operational headquarters in Via Moriggia 3, 20900 Monza (MB), tel+39 039 9634150, email:dataprotection@galaxym63.com.

​

2. Object of the information and purpose of the treatment

This information concerns the processing relating to the provision, collection and subsequent operations performed on the personal data of the Users of the Website, by browsing its pages and, above all, by means of the tools for requesting information and providing personal data to by means of e-mail messages, contact forms, order forms and similar and analogous operations.

 

The processing of the data provided in general (so-called navigation data, such as, by way of example, anonymous data on visits) will be carried out, following automatic collection, for the sole purpose of ascertaining and controlling access to the Website. This applies also for technical cookies, to be understood as session, functionality or analytics cookies. With regard to the latter, in particular, the site has provided for the anonymization of IP addresses, also in accordance with the clarifications of the Guarantor. The collection and use of the aforesaid navigation data (without prejudice to the anonymisation of the IP addresses) allow monitoring of the performance of the Website and improve the service offered, offering the User a better browsing experience.

 

In any case, we remind you that to independently disable the transmission of your personal information to the Google Analytics service, you can follow the instructions on this linkhttps://tools.google.com/dlpage/gaoptout?hl=it. The processing of data provided directly by Users with e-mail messages or the compilation of contact forms and order forms will instead be solely aimed at providing the requested information.

The sending of such e-mail messages to the generic and non-generic e-mail addresses indicated on the Website, the filling in of fields of the contact forms and order forms, as well as the autonomous and voluntary insertion of data and information in the appropriate free fields of the same, will imply the acquisition of the data provided. This will allow the Website to make requests and appropriate information as well as to conclude the online procedure that the User has undertaken.

 

Users are requested not to provide sensitive data (i.e. data suitable for revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union, data suitable for revealing the state of health and sex life of the interested party, as well as genetic data, biometric data intended to uniquely identify a natural person and personal data relating to criminal convictions and offences, or data suitable for revealing the pending criminal proceedings or a judicial charge), failing which such data will not be taken into consideration and the Data Controller will not be able to answer for them in any case. Only exceptionally, any sensitive and judicial data provided by Users with e-mail messages concerning requests for information, will be processed for the sole purpose of making requests for information to the interested party.

 

For the spontaneous receipt of curricula sent by candidate workers via the site or to the e-mail addresses indicated therein, please note that at the time of any first contact following the sending of the curriculum, a disclosure will be renewed, even orally brief analogous to the present.

​

3. Processing methods

Users are informed that all personal data concerning them will be treated in full compliance with the Code and the European Regulation on the protection of personal data. The personal identification data provided by the Users will flow into the database of the Website and will be processed using IT procedures by the operators, collaborators and partners of the Data Controller, in such a way as to guarantee confidentiality and security and with logic strictly related to the purposes above.

 

4. Categories of recipients of personal data

No personal data generally provided by Users will be communicated to third parties (apart from the case of communication to the competent Authorities, in the hypothesis of ascertaining that illegal activities have been carried out) nor, much less, disseminated. Exceptions are navigation data and the like (for which reference is made to the above), as well as third-party profiling cookies (for which reference is made toCookie policyof this Website), which will be communicated to the respective interested third parties, where these do not manage them directly as Data Controllers.

 

According to the purposes and logic of the specific processing, the personal data specifically provided by the Users will instead be communicated to collaborators of the Data Controller for purposes strictly connected to the relationship (professionals, commercial partners and the like). As for the circulation of data within the Data Controller's structure, it will be performed only through specifically appointed and instructed Persons in Charge and/or Managers, for which reference is made to the specific previous paragraph.

 

5. Nature of the data processed and consequences of any refusal

The provision of data relating to navigation by Users, for the aforementioned purposes, depends on the degree of privacy that the User has enabled or disabled through their browser. In some cases, disabling it could jeopardize navigation on this Website. For certain modules of this Website, the provision of navigation data and/or the use of technical cookies is mandatory for the correct functioning of the Website itself.

 

The other data related to any procedure for sending order forms and forms are mandatory, such as name / surname / company name, address, tax code / VAT number, failing which the procedure itself cannot be completed.

 

Any request for other optional data will instead be preceded by a specific approval check.

 

The provision of all other data is optional, in accordance with the type of information that the User wishes to provide to the Website.

 

6. Data retention period

The data will be processed for the entire duration of the contractual relationships established and also subsequently for the fulfillment of all legal obligations and for commercial purposes, if the interested party has given his consent.

 

7. Rights of the interested party

Finally, Users of the Site are informed that they are entitled to exercise the rights indicated in EU Regulation 2016/679 regarding the protection of personal data, indicated at the bottom, by sending a request, addressed to the Data Controller as described and identified above, in paper form to the address above or to the e-mail addressdataprotection@galaxym63.com.

 

Art. 15: The interested party has the right to obtain confirmation from the data controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients from third countries or international organizations; d) when possible, the envisaged retention period for personal data or, if this is not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to rectify or cancel personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; g) if the data are not collected from the interested party, all the information available on their origin; h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and envisaged consequences of such processing for the interested party.

 

Art. 20: The interested party can also exercise the right to data portability.