Privacy & Cookie Policy
In accordance with Article 13 of the European Regulation on Privacy No. 2006/679 (“GDPR”), ULMEX Italia Srl (“Ulmex”), with address at Via Romania 13, Z.I. Sud, 35127 Padua, Italy, wishes to inform you of the ways in which your personal data will be processed. This notice concerns the processing of your personal data (“Personal Data”) which has been provided to us and/or gathered during your visit to the site.
- Data Controller
The entity that gathers and processes the Personal Data in the capacity of Data Controller (hereinafter referred to as the “Controller”) is
ULMEX Industrie System GmbH & Co. KG, Ringstr. 11, D-89081 Ulm, telephone number: +39 049 6988500, email: ulmex@ulmex.com, entered in the companies register of Ulm under number HRA 2934, taxpayer code 88014/54402
acting jointly with
ULMEX Italia Srl, with registered office at Via Romania 13, Z.I. Sud, 35127 Padua, telephone number: +39 049 6988500, email: ulmex@ulmex.com, taxpayer code and VAT no. 03806930271, Companies Register of Padua no. 394560.
- Purposes of the processing
- Browsing data
Every time our website is accessed, our system automatically gathers data and information on the computers of users accessing the site. The following data are collected on such occasions:
IP address;
Date and time of access;
Time zone in relation to Greenwich Mean Time (GMT);
Object of the request for access (specific web page requested);
Access status /HTTP-Statuscode;
Quantity of data transferred in each case;
Web page from which the access request was originated;
Browser;
Operating system and its interface;
Browser software language and version.
These data are saved in so-called “logfiles” on our system and are used for the following purposes:
- obtaining anonymised statistical information on site usage and verifying that the site is functioning correctly;
- technical administration of the site;
- establishing possible liability in the event of any cybercrime attacks affecting the site.
Processing location: the Controller’s registered office.
- Data provided voluntarily
- Contact forms
Our website contains contact forms which can be used to contact us electronically. When the user makes use of this function, the data entered in the form are sent to us and then saved by us. This data comprises:
- Title;
- Name and surname;
- Company name, possible department and/or function;
- Address, post code and municipality;
- Email address;
- Telephone number;
When the message is sent, the following data are also recorded:
- User IP address;
- Message transmission date and time.
Alternatively, contact can be made using the email address provided. In this case, the user’s personal data included in the email message will be saved. The data are used for the purposes of correspondence. The additional personal data acquired when the user sends the message are processed to prevent the misuse of the contact form and ensure the security of our IT systems.
Processing location: the Controller’s registered office.
- User registration
Personal data obtained during registration are processed in order to allow access to the services that the website provides to registered users only.
If the user has given his or her consent when activating the service, or gives it subsequently, his or her personal data may be processed by Ulmex, until such consent is revoked, for the following purposes:
- allowing access to the services that the portals provide to registered users only;
- sending information of a commercial nature regarding Ulmex products and services, or third-party products and services, using automated processes or otherwise, for the purposes of direct sales, as well as for sending market research and verifying the level of user satisfaction, provided the user gave his or her consent when activating the service, or gives it subsequently, and until such consent is revoked;
- analysing specific consumer behaviour or habits, using electronic tools or otherwise, in order to improve the service provided, and sending commercial offers of interest to the user, provided the user gave his or consent when activating the service, or gives it subsequently, and until such consent is revoked;
- Ulmex will also use personal data for administrative and accounting purposes, and for the performance of contractual obligations in relation to users who are also customers.
Processing location: the Controller’s registered office.
- Cookies
Cookies are text files that are saved by the internet browser within the browser itself or on the user’s computer. A popup message is displayed every time our website is accessed. We want to emphasise that some of these cookies, including so-called “session cookies”, are transferred by our server to your computer system. “Session cookies” are characterised by the fact that they are automatically deleted from the hard disk at the end of the browser session. Other cookies (known as permanent cookies) remain on your computer system and allow us to recognise you when you next visit the website. Of course, cookies can be disabled at any time, provided that your browser allows this. In this regard, it is also possible to revoke your consent to cookie-based processing (with the exception of cookies that are necessary for the site’s functionality).
- Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google, Inc. (“Google”). Google uses the Personal Data that is gathered in order to trace and analyse the use of this application, compile reports and share them with other services developed by Google. Google may use the Personal Data to contextualise and personalise advertisements on its own advertising network. Personal Data processed: Cookies; Usage data.
Processing location: United States.
By giving your consent, you give permission for Google to process your data as detailed above, for the purposes outlined above. You can object to the gathering and saving of your data at any time by revoking your consent (see above). Such revocation will not apply retroactively. Alternatively, it is possible to use the Google Analytics opt-out add-on (http://tools.google.com/dlpage/gaoptout?hl=de), if available for your browser. It is possible to consult an overview of how Google uses the data by visiting the website www.google.de/policies/privacy/partners/.
- Legal basis for processing?
Logfiles: The data are saved within logfiles in order to ensure the functionality of our website. The data are also used in order to optimise the website and ensure the security of our IT systems. The purposes stated above constitute a legitimate interest in the processing of the data pursuant to Article 6(1)(f) GDPR.
Cookies: Legitimate interest (Article 6(1)(f) GDPR).
Date and time of registration: Consent (Article 6(1)(a) GDPR).
Personal data acquired when the user sends a message: Depending on the nature of the communication, the legal basis may be: consent (Article 6(1)(a) GDPR); to take steps prior to entering into a contract; or to perform a contract to which the data subject is party (Article 6(1)(b) GDPR).
Personal data acquired during user registration: Consent (Article 6(1)(a) GDPR).
- Processing location
The data are processed at the Controller’s operational headquarters and any other site at which the parties involved in the processing are located. For further information, contact the Controller.
The User’s Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the processing location, the User can refer to section 3 above.
The User has the right to obtain information on the legal basis for the processing of his or her Data outside of the European Union, or within an international organisation subject to public international law or made up of two or more countries, such as the UN, for example, and on the security measures adopted by the Controller to protect the Data.
The User can check whether one of the transfers detailed above has taken place by referring to point 3 above or asking the Controller for information, using the contact details specified at the top of this notice.
- For how long are the data stored?
Data saved in logfiles are deleted within seven days at the latest. The data may be stored for a longer period, but in such cases the IP addresses of users are deleted or modified, thus making it impossible to identify the user that accessed the website.
Cookies are only necessary for the session underway at any given time and are automatically deleted from the user’s internet browser at the end of the session.
Information requests: the user’s data are stored until consent is revoked. The email address will also be stored for a longer period, in order to document revocation. Other data acquired during registration are deleted within a period of seven days.
- What are your rights?
You have the right to be informed with regard to your personal data processed by us. If an information request is not made in writing, we reserve the right to require proof that you are entitled to obtain the requested information. We thank you for your understanding in this regard.
Moreover, you have the right to obtain the rectification or erasure of your personal data, or the restriction of its processing, to the extent provided for by law.
You also have the right to object to the processing of your personal data within the scope of the relative legal provisions. The same is valid for the right to data portability.
If we process your data on the basis of your consent, you may revoke your consent at any time. Revocation of consent does not affect the lawfulness of consent-based processing prior to the revocation.
To exercise your rights, you can send a request to the Data Controller at the following email address: ulmex@ulmex.com.
- To which supervisory authority can you submit a complaint?
If you believe that your personal data has been processed unlawfully, you have the right to submit a complaint to a supervisory authority based in the Member State in which you habitually reside or work, or the place where the presumed violation occurred.