Privacy Policy -EN
The Informative on the processing of personal data of website users https://www.spimelux.com
The following information ("the Informative ") is provided, pursuant to art. 13 of EU Reg. 2016/679 ("GDPR"), in order to illustrate the purposes and methods of processing personal data relating to users who access the website www.spimelux.com ("the Site").
This Information only concerns the processing of personal data relating to users of the Site ("Data Subjects"), and does not concern the processing of personal data carried out when visiting pages and websites accessible through any links present in the Site. In addition to this Information, the Data Controller may provide more specific information with reference to certain treatments that are carried out through some modules contained in the Site.
Holder of the treatment
The Holder of the treatment of the personal data of users who access the Site is Spimelux S.A. with registered office in ESCH-SUR-ALZETTE, Rue du Canal, 48-52, Luxembourg and secondary office in PAGLIARE DI SPINETOLI (AP), Via De Gasperi, 63/A, Italy, as Holder of the treatment (hereinafter " Holder"); the addresses for contacting the Data Controller ("Contacts") are as follows: by e-mail, at the address
Type of data processed and purpose of the processing
When the user visits the Site, the following may be processed:
data relating to navigation of the Site, detected and collected by the Data Controller through the use of software applications necessary to guarantee the ordinary functionality of the Site.
The processing of such information (such as the Internet Protocol address, the domain names of the computers and devices used by users, the used browser, the Uniform Resource Identifier and other data that, by providing information on the device and connection used to visit the Website, can indirectly allow the identification of the interested party), it is essential to allow the correct functioning of the Website and is therefore necessary to allow users to use the offered services.
Failure to provide it by the interested party prevents you from browsing the Site and using the services offered through it.
The technical parameters of the Site have been configured in such a way to minimize the collection and use of user identification data.
Personal data provided voluntarily by the Data Subjects, by entering personal information in the forms present on the Site, sending emails or communications to the addresses of the Data Controller on the Site and using the functions offered by the Site.
These personal data are processed for the purpose of sending disclosure communications relating to the activities carried out by the Data Controller limited to the contact details of the interested party.
These operations are carried out only with your consent expressed by entering your e-mail address in the appropriate form. The interested party may revoke the consent given at any time using the appropriate function at the bottom of each email received or by contacting the contact details indicated in this Information.
These processing operations concern the e-mail address of the applicant as well as the additional information communicated to the Data Controller through the contacts made available on the site.
The provision of such data is optional, but necessary, so the Data Controller can provide a response to the sent requests and offer the requested service.
Personal data will be processed purely with automated tools (e.g. management software) and residually with non-automated means (e.g. paper archives) chosen to ensure the security of the data by persons operating under the authority directly from the Data Controller and who have been duly authorized and instructed in this regard.
Data such as the Internet Protocol (IP) address and the technical specifications of the browser used for navigation, which are collected and communicated by the Data Controller to Google Ireland Ltd. for the purpose of increasing the visibility of the Data Controller's image.
Limited to the operations now indicated, the data controller is also Google Ireland Ltd., Republic of Ireland (EU) to which the interested party can refer to, to exercise their rights.
This treatment is carried out in pursuit of the legitimate interest of the Holder of the treatment. Google Analytics helps Spimelux Sa to understand how the website is used. Information relating to the use of the website, including the IP address, could be transmitted and stored on Google's servers. This information is used to compile reports and to improve the site. Data collect information in anonymous form, including the number of visitors to the site, where visitors come from and the pages they visited
Period of retention of personal data
The personal data processed will be kept for the time necessary to allow navigation of the Site and in any case no later than 7 days from collection, except for need of further storage for purposes of ascertaining crimes by public authorities or for exercising or defending a right or legitimate interest of the Data Controller in a Court. As for the sending of newsletters for informational and promotional purposes of the activities carried out by the Data Controller the contact details are processed until the consent is revoked by the interested party.
Categories of recipients of personal data and transfers to third countries.
The personal data of the interested parties may be communicated:
To information technology (IT) service providers, such as support for the management and maintenance of the Site, web hosting and e-mail;
to the Data Controller's collaborators in charge of dealing with the Site and providing feedback to the made requests;
To public authorities, such as the police forces and judicial offices, if this is required by law or by a legitimate provision.
Where the conditions established by the GDPR are met, the Holder of the treatment will stipulate specific contracts with those recipients, among those indicated above, who receive the communication of personal data so that they can process them on their behalf ("Holder of the treatment"), aimed at ensuring that the operations carried out take place in strict compliance with the instructions given by the Data Controller and that adequate technical and organizational measures are implemented to safeguard the security of the personal data processed. Your personal data will not be transferred to countries outside the European Economic Area ("Third Countries") or international organisations.
The rights of the interested parties
The interested party can exercise, at any time and free of charge, the rights indicated by the articles 15 et seq. of the GDPR by contacting the Data Controller at the contact details. In particular, the user, as an interested party and within the limits set by the GDPR, can exercise:
the right of access, i.e. the right to obtain confirmation of data existence or processing, concerning one's personal data, as well as the right to receive any information relating to the processing itself and a copy of the personal data processed;
the right to rectification, i.e. the right to obtain the rectification or integration of personal data being processed, if they are inaccurate or incomplete with respect to the purposes of the processing;
the right to erasure (so-called "right to be forgotten"), i.e. the right to obtain the erasure of personal data being processed, in the cases provided for by art. 17 of the GDPR;
the right to limitation of processing, i.e. the right to obtain limitation of the processing of personal data, upon occurrence of the conditions set out in art. 18 of the GDPR;
The right to portability, i.e. the right to receive personal data concerning the interested party, provided in a structured format commonly used and readable by an automatic device to obtain direct transmission of the same to a different owner of the treatment where technically feasible;
the right to object, i.e. the right to object, at any time for reasons related to your particular situation, data processing concerning the interested party and based on the condition of lawfulness of legitimate interest, or the execution of a task in the public interest, or the exercise of public powers, unless there are legitimate reasons which prevail over the interests for the Data Controller to continue it.
The right to lodge a complaint with a Supervisory Authority, such as the Guarantor for the Protection of Personal Data, with offices in Piazza Venezia 11 - 00187, Rome (RM), Italy (IT), E-mail:
These rights may be exercised free of charge by sending a written communication to the Data Controller at the contact details. However, in the event of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller may charge a reasonable fee based on the administrative costs incurred to manage the request or deny satisfaction.
Responsible for the treatment
Web hosting (Aruba S.p.A. - Via San Clemente, 53 - 24036 Ponte San Pietro (BG) P.IVA 01573850516), is appointed data processor, processing the data on behalf of the owner. Aruba S.p.A. is located in the European Economic Area and acts in compliance with European standards (privacy policy of Aruba S.p.A.). Google is appointed data controller, processing data on behalf of the owner (Google Analytics).
Information changes
Over time, the Data Controller may make changes to this Information, also in order to guarantee its updating or improve its clarity; in this case, the Data Controller will promptly inform the users of the Site, using the most effective and appropriate tools for this purpose.
