Privacy policy for the Internet site

This policy, in accordance with Article 13 of European Regulation No. 2016/679 (hereinafter “GDPR”), contains information related to the processing of your personal data when you visit the site www.elesa.com (hereinafter, “Site”).

1. Data Controller

The Data Controller is Elesa S.p.A., a sole shareholder company, having its registered office in Milan, Via L. Mancini 5, Share Capital Euro 2,580,000.00, Registration no. 869305 with the Company Register, VAT no. 01686450154, info@elesa.com (hereinafter,“ Elesa” or the “Data Controller”).

2. Purposes of the data processing, legal basis and retention period

  • Browsing data

    The IT systems and software procedures used to operate the Site acquire, during their normal exercise, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with specific data subjects, but which, due to its nature, could, through processing and associations with data held by third parties, allow users to be identified.

    This category of data includes the IP addresses or domain names of computers used by users who connect to the Site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the user.

    This data is only used to obtain anonymous statistical information on the use of the Site and to check its proper functioning.

    Browsing data does not remain for more than seven days and is deleted immediately after aggregation (except for any need to ascertain crimes by the Judicial Authority).

    The legal basis that legitimates the data processing is the legitimate interest of the Data Controller.

  • Data provided voluntarily

    You will be asked to provide personal data in some sections of the Site. In such case you will be given the policy in accordance with Article 13 of the GDPR related to the processing of personal data in relation to the individual purposes pursued.

  • Cookies

    The information related to the cookies used on this Site can be found at the following url https://www.elesa.com/en/elesab2bstoreoc/cookies--1.

3. Provision of personal data

Aside from what is specified above for browsing data and in the policy in accordance with Article 13 of the GDPR that is provided in the individual sections of the Site, the provision of data for other purposes is optional. The failure to provide the data can result in the impossibility of pursuing such further purposes.

4. Categories of data recipients

Your personal data will be processed by employees and/or collaborators of the Data Controller who have received adequate operating instructions and who were expressly authorized by it to carry out the data processing.

The personal data may be processed by external parties chosen by Elesa as data processors who have been given adequate operating instructions, such as, for example,

  • companies entrusted with the maintenance/operation of the Internet Site and the electronic and/or telematic tools used by Elesa.

Your personal data might also be communicated to third parties that are autonomous data processors, such as, for example:

  • authorities and supervisory and control bodies and, in general, public or private parties entitled to request the data;
  • persons, companies, associations or professional offices (attorneys, accountants, auditors).

The list of recipients of the data is constantly updated and can be easily and gratuitously obtained by sending a written communication to the Data Controller at the address indicated above or an e-mail to the address: info@elesa.com.

5. Transfer of data outside the European Union

Your data might be transferred to countries that do not belong to the European Union.

6. The data subjects’ rights

In relation to the personal data processing carried out by the Data Controller, data subjects can request the Data Controller for access to the data that regards them, its erasure, the rectification of inaccurate data, the integration of incomplete data, the restriction of the data processing in the cases provided by Article 18 of the GDPR, as well as oppose the data processing, for reasons connected to their specific situation, in cases of the legitimate interest of the Data Controller.

You can file a complaint at any time with the Italian Data Protection Authority, as well as use the other means of protection provided by applicable law and apply to the appropriate courts.

To exercise your rights, you can contact the Data Controller by sending a written communication to the above-indicated address or an e‐mail to: info@elesa.com.