This notice is made available to you – pursuant to Article 13 of European Regulation 2016/679 on the protection of personal data (the “Regulation” or “GDPR”) – and is addressed to visitors/users of the website www.metelligroup.it (the “website” or “site”).

The purpose of this Privacy Notice is to inform users about how their personal data are processed. All data are processed lawfully, fairly and transparently towards the data subject, in compliance with the general principles set out in EU Regulation 2016/679 and the applicable legislation on the protection of personal data.

DATA CONTROLLER

The Data Controller, to whom you may apply to exercise your rights, as further described in point 3, is Metelli S.p.A., with registered office at Via Bonotto, 3/5 - 25033 Cologne (BS), Italy, VAT no. IT01517740989, gdpr@metellispa.it.

TYPES OF DATA COLLECTED

The website offers informational and, at times, interactive content. While browsing the Site, information about the visitor may therefore be acquired in the following ways:

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. Browsing data are used solely to verify the correct functioning of the site and are retained for a limited period and in any case no longer than necessary to ensure the correct functioning of the site and the security of the systems, without prejudice to any need to ascertain liability.

Newsletter subscription

Subject to the explicit consent of the data subject, the Controller collects and uses the user’s contact details (e-mail address, first and last name, company, role, products of interest) for the periodic sending of informational newsletters as well as for promotional communications of the Controller or of affiliated Companies.

E-mails sent by the Controller (newsletters and other communications) may contain tracking pixels, i.e. very small images, often not visible, hosted on a remote server. When the recipient opens the message and enables image download, the pixel is loaded and makes it possible to detect that the e-mail has been opened and to collect information such as date and time, number of openings, device and operating system used, and IP address. Tracking pixels do not make it possible to know the content of the e-mails. If e-mails are read in plain text only or automatic image download is disabled, the pixel is not loaded and tracking is not possible.

Consent to the use of tracking pixels is included in the consent to receive the newsletter, in accordance with the guidelines of the Italian Data Protection Authority (Garante per la protezione dei dati personali) on the use of tracking pixels. Tracking can be disabled upon receipt of the first newsletter and at any time thereafter via the preference management link included in every e-mail, by choosing to no longer receive communications containing tracking pixels. Refusing tracking does not limit use of the service.

Data voluntarily provided by the User via the Careers Form

The Controller collects personal data (name, contact details, company name and company VAT number, username) necessary to manage registration on the My Metelli Portal. The provision of data is voluntary and necessary for registration on the Portal; therefore, any refusal to provide them in whole or in part may make it impossible for the Controller to activate the requested service.

Registration on the My Metelli Portal

The Controller collects the personal data necessary to manage applications for job positions voluntarily submitted by the user. The personal data processed are identification and contact data, as well as any other information contained in the Curriculum Vitae or otherwise communicated by the candidate to the Data Controller for the purposes set out above.

Cookies and other tracking systems

Cookies are text files that the websites visited by users send to their devices and that are sent back to the same websites on the next visit. Cookies can be divided into two macro-categories: “profiling cookies” and “technical cookies”.

For the list of cookies used by this website and to manage your consent at any time, read our Cookie Policy or open the Cookie settings.

Data voluntarily provided by the User via e-mail

The Controller collects the personal data necessary to manage requests voluntarily submitted by the user and to fulfil contractual obligations for the provision of services to the user.

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s e-mail address, as well as any other personal data included, necessary to respond to the requests. The Controller will use this information solely to respond to the user’s requests and to provide the requested services.

PURPOSES AND LEGAL BASIS OF THE PROCESSING

Users’ personal data are processed for the following purposes:

• to ensure browsing and the security of the site, and to ascertain liability in the event of possible cybercrimes against the site; the legal basis for the processing is the legitimate interest of the controller (Art. 6(1)(f) GDPR);
• subject to the explicit consent of the data subject, to carry out information or commercial promotion activities by the Controller or affiliated Companies, and to communicate identification and contact personal data to third parties for promotional and commercial purposes; the legal basis for the processing is the consent of the data subject (Art. 6(1)(a) GDPR);
• to manage the user’s account on the My Metelli platform, to ensure use of the online services made available in connection with the Site, and to respond to user requests; the legal basis for the processing is the fulfilment of the data subject’s requests or the performance of pre-contractual measures (Art. 6(1)(b) GDPR);
• to satisfy the request for examination of the application submitted by the data subject, with a view to the possible establishment of an employment relationship; the legal basis for the processing is therefore the performance of pre-contractual measures taken at the request of the candidate (Art. 6(1)(b) GDPR).

METHODS OF PROCESSING

Personal data are processed using IT and/or telematic tools. The processing is carried out using organisational methods and logic strictly related to the purposes indicated.

The Data Controller has implemented technical and organisational measures to provide an adequate level of security and confidentiality for personal data. These measures take into account the state of the art of technology, the costs of its implementation, the nature of the data and the risks associated with their processing. The aim is to protect the data from accidental or unlawful destruction or alteration, accidental loss, unauthorised disclosure or access and other unlawful forms of processing.

Data are processed at the operating premises according to which the Company is organised, and at companies appointed and duly designated as Data Processors.

DURATION OF THE PROCESSING

Data are processed for the time strictly necessary to pursue the purposes indicated. Access logs are retained for a maximum of 6 months. Browsing data are not kept for more than seven days. Contact data collected to fulfil requests are retained for a maximum of 12 months after the request has been fulfilled. My Metelli account data (username, e-mail, profile) are retained for as long as the account is active and for up to 36 months from the last significant interaction. Personal data processed on the basis of the data subject’s consent are retained until such consent is withdrawn and in any case no longer than 36 months from the last interaction with the user. In the event of litigation or a specific request by the competent Authorities, personal data may be retained for as long as necessary to protect the interests of the Data Controller or to comply with the Authority’s request.

CATEGORIES OF RECIPIENTS TO WHOM DATA MAY BE COMMUNICATED

The data collected and processed may be communicated, exclusively for the purposes specified above, to parties belonging to the following categories:

• hosting providers, IT companies, communication agencies, third-party technical services;
• persons, companies or professional firms providing assistance and advice to the Data Controller in accounting, administrative, legal, tax and financial matters;
• parties entitled to access the data under legal provisions or orders of the authorities.

Where necessary, these parties are also appointed as Data Processors by the Controller. The updated list of Data Processors may be requested from the Data Controller at any time.

RIGHTS OF DATA SUBJECTS WITH REGARD TO THEIR PERSONAL DATA

The data subject, i.e. the natural person to whom the personal data relate, has the right to request from the Data Controller access to his or her personal data, their rectification or erasure, as well as to request the restriction of or to object to their processing. The data subject also has the right to data portability. To exercise these rights, please refer to the contact details indicated in this notice.

All requests received will be handled and answered in accordance with the applicable rules, including with regard to whether the conditions for granting them are actually met. If such conditions are not met, the Data Controller may decline to act on the requests. The Data Controller makes every effort to respond to legitimate and well-founded requests within one month of receipt. Depending on the complexity and number of requests, and in light of the above, this period may be extended by two months. Upon the final outcome of the handling of the request, and against it, the data subject may lodge a complaint with the supervisory authority at www.garanteprivacy.it and seek a judicial remedy.

This Privacy Notice was last updated on 19/10/2026.