Privacy

01 Data controller

Luca Abronzino S.r.l.
Località Serramonda snc, 88044 Marcellinara (CZ)
VAT number and tax code 03688180797
REA CZ-207891 · Share capital €10,000 fully paid up
Phone/Fax +39 0961 990179 · Mobile +39 334 335 2087
Email info@abronzino.it · PEC (certified email) luca.abronzinosrl@legalmail.it
For data protection requests: privacy@abronzino.it

We have not designated a data protection officer, because our processing does not fall within any of the cases set out in Article 37 GDPR. For any question about data protection, you can write to privacy@abronzino.it.

02 Browsing data

During your visit, the systems that run the website (the hosting service and the application) receive the data that every browser transmits: IP address, date and time, page requested, browser type and response code. The hosting provider records these data in its own logs for the operation and security of the service and retains them for the periods set by the provider for the security of the service.

The website application does not store your IP address in clear text: when you submit a form or request a data sheet, it computes a cryptographic fingerprint of the address using a private key. The fingerprint is used only to limit the number of submissions from the same network within an hour and to record the outcome of emails. Without the key, the address cannot be traced back from the fingerprint.

The website’s forms are protected by an anti-spam check run directly by the website: your browser performs a short automatic calculation before submission. The check does not use external services, does not set cookies and does not collect personal data.

The website does not use analytics, marketing or profiling tools and does not load scripts, fonts or content from external services. The only exceptions are the map and the posts from our social media channels on the Contact page, which are activated only with your consent or at your request (see section 15).

03 Data you provide to us: the forms

The website’s forms collect only the data listed below. No data are recorded until the form is submitted; if submission fails, the values remain in your browser session solely so that they can be shown again in the form.

3.1 Contact form

First name and surname, email, message (mandatory); company and phone (optional); the department the request is addressed to, chosen from those published. We ask you to confirm that you have read this notice; this confirmation is not consent and serves no other purpose. The request is recorded, forwarded to the contact person for the department (or to the mailbox web@abronzino.it if there is no active contact person) and handled by our staff, who may add internal notes to it and assign it. You will receive an automatic confirmation email that states only the department chosen and the opening hours, never the text you wrote.

The Contact form can also be opened from product, service, project and comparison pages, with the request already filled in: the message states where you are writing from and the department is suggested based on the page. You can change both before submitting; no other data are collected.

Below the fields there is an optional, unticked box for receiving commercial communications: see section 4.

3.2 Request for information about a pre-owned machine

First name and surname, email, message (mandatory); phone and company (optional); the code and title of the listing. The request is recorded and forwarded to the company mailbox responsible for pre-owned equipment, which replies to the address you provided. You will receive an automatic email confirming receipt: it states only the code and title of the listing, never the text you wrote.

Below the fields there is an optional, unticked box for receiving commercial communications: see section 4.

3.3 Job applications

First name, surname, email (mandatory); phone (optional); a description of your experience and a message. To submit the application, you must tick two mandatory boxes: “I have read the privacy notice” and “I declare that I am at least 18 years old”; we record the date and the version of the notice. No consent is required.

You can attach your CV as a PDF of up to 3 MB. Before saving it, the website checks that it is a readable PDF with no active content (for example scripts or automatic actions); the file is not sent to any external service. Your CV is never sent by email: the persons in charge of the selection download it from the private area.

We assess the application for the position indicated or, if you sent it as an open application, for positions compatible with your profile; for as long as we retain it (12 months from receipt), we may also consider it for compatible future positions. If you would prefer it to be considered only for the position indicated, say so in your message or write to privacy@abronzino.it. We ask you not to include special categories of personal data (for example data concerning health, beliefs or affiliations) unless they are necessary for the selection process. For open applications, the privacy notice is provided at the first useful contact, as provided for by Article 111-bis of the Privacy Code: in our case, it is available below the form, before you submit it.

3.4 Requesting data sheets from the Catalogue

Email (mandatory); name and company (optional, as you provide them). You will receive an email with a personal link to download the PDF: the link is valid for 24 hours and can be used for one download only, which you confirm with a button on the download page. If the document is not yet available, you will receive an email confirming that your request has been recorded. To prevent abuse, the same address can receive no more than five deliveries for the same product within 24 hours, with a three-minute interval between one request and the next; overall limits per network and per service also apply.

Below the fields there is an optional, unticked box for receiving commercial communications: see section 4.

04 Commercial communications (only with your consent)

The Contact, Pre-owned and Catalogue forms include an optional, unticked box: “I agree to receive commercial communications by email from Luca Abronzino S.r.l. about its products and services and those of the Vertex range, which it distributes exclusively in Italy. Optional: you can withdraw your consent at any time.” You do not need to tick it to submit your request: if you leave it unticked, your request is handled in exactly the same way.

If you tick it, we use your email address, name and company to send you commercial communications about our products and services and those of the Vertex range, which we distribute exclusively in Italy. Your data are not disclosed to these brands. The legal basis is your consent (Article 6(1)(a) GDPR and Article 130 of the Privacy Code). We record the date, the form through which you gave your consent, and the version of the text and of the privacy notice. Communications are sent by our staff from the company mailboxes.

You can withdraw your consent at any time, free of charge: using the link or following the instructions in every email, or from the page Unsubscribe or by writing to privacy@abronzino.it. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

05 Purposes and legal bases

We use the data for commercial communications only if you have given the optional consent. We do not use the data for any purposes other than those stated.

06 Mandatory or optional provision of data

Providing the data marked as mandatory is necessary for us to follow up on your request: without them, the form cannot be submitted. Optional data (company, phone number, name in data sheet requests) are used only to help us give you a better reply. Consent to commercial communications is optional, and not giving it has no consequences for your request. Browsing data are transmitted by your browser as needed for the communication to work.

07 Recipients and processors

The data are processed by staff of Luca Abronzino S.r.l. who have been authorised and instructed in writing, within the limits of the permissions assigned to them in the private area (staff who handle contacts see contact requests, staff who handle applications see applications, and so on). Requests sent through the Contact form are forwarded to the contact person for the department you selected, at their company @abronzino.it address published on the Contact page.

The following parties process the data on our behalf, as processors under Article 28 GDPR:

• Aruba S.p.A., Via San Clemente 53, 24036 Ponte San Pietro (BG), which hosts the website, the database and the mailboxes from which emails are sent.

We do not use any other providers for the data collected through the website; we do not disclose the data to any other parties and we do not disseminate them. We may disclose them to the authorities where required by law.

08 Transfers outside the European Union

The data collected through the website are stored in the European Union, on the hosting provider’s servers. The only third-party services on the website are the Google map and the posts from our social media channels on the Contact page: they are not loaded until you activate them, either by accepting third-party content in the cookie banner or by clicking “Show the map” or “Show the post”. After activation, Google Ireland Limited, which provides the service in the European Union, receives your IP address and may set its own cookies in the map frame; the data may be transferred to Google LLC in the United States, which participates in the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission in its decision of 10 July 2023. How Google processes data is explained in its privacy policy. If you prefer not to activate the map, you can use the “Open in Google Maps” link, which opens Google’s website.

Likewise, once a post has been activated, the following receive your IP address and may set their own cookies in the post frame: for Instagram and Facebook, Meta Platforms Ireland Limited, with possible transfers to Meta Platforms, Inc.; for LinkedIn, LinkedIn Ireland Unlimited Company, with possible transfers to LinkedIn Corporation; for YouTube, Google Ireland Limited, with possible transfers to Google LLC. Meta Platforms, Inc., LinkedIn Corporation and Google LLC, in the United States, participate in the EU-U.S. Data Privacy Framework. If you prefer not to activate a post, you can use the “Open on” link followed by the platform name, which opens the platform’s website.

A CV attached to an application stays on the hosting provider’s servers in the European Union and is not passed to any other provider.

09 Retention

We retain the data for as long as necessary to follow up on the request and, after that, for the periods indicated below.

On expiry, the data are deleted or anonymised.

10 Your rights

At any time, you may ask us for access to your data, rectification, erasure, restriction of processing and portability of the data you have provided to us; you may also object to processing based on legitimate interest (Articles 15–22 GDPR). You may withdraw any consent you have given, to commercial communications or to third-party content, at any time, without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3) GDPR): for commercial communications as described in section 4, and for third-party content via “Cookie preferences” at the bottom of every page.

You can write to privacy@abronzino.it or to the certified email address (PEC) luca.abronzinosrl@legalmail.it, or by post to our head office. We reply within one month of the request; if the request is complex, this period may be extended by two further months, in which case we will let you know. Exercising your rights is free of charge. How to exercise them in practice is explained on the page GDPR and data processing.

11 Complaint to the Garante

If you believe that the processing infringes the GDPR, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it) or bring proceedings before the courts.

12 No automated decision-making

We do not make decisions based solely on automated processing, and we do not carry out profiling. The automatic limits against abuse (for example, the maximum number of submissions within one hour) and the anti-spam check serve only to protect the service and produce no legal effects concerning you: if you are blocked, you can try again later or contact us directly.

13 Minors

The website and its services are intended for adults only; we do not knowingly collect data from anyone under 18. To submit an application, you must declare that you are at least 18 years old.

14 Changes to this notice

We may update this notice when the website, the services or the legislation change. The version in force is the one published on this page, with its version number and date of last update; every request submitted through the forms records the version of the notice you read at the time of submission. When the version changes, the cookie banner asks for your choice again.

15 Cookies and other tools

Cookies are small files that a website stores in your browser; other similar tools (the browser’s local storage, pixels, third-party scripts) serve similar purposes. They are classified according to their purpose:

• technical: they enable the website, or a service you have requested (for example a form or the private area), to work and remember the choices you make; they do not require consent;
• third-party content: services from other parties embedded in the pages (maps, videos, social media buttons), which may set their own cookies; they require consent;
• statistics: they measure how the website is used; those set by third parties normally require consent;
• profiling and marketing: they track browsing to show personalised advertising or content; they require consent.

This website uses:

• cookies and storage that are technical, always active;
• third-party content only for the Google map and the posts from our social media channels on the Contact page, with the consent you give in the banner or by clicking “Show the map” or “Show the post”, which applies on that occasion only;
• no statistics, profiling or marketing tools.

On your first visit, a banner asks you to choose whether to allow third-party content: you can reject, accept or customise; closing the banner with the X is equivalent to rejecting. Until you make your choice, no cookies other than technical ones are set. You can change your mind at any time using the “Cookie preferences” link at the bottom of every page.

The anti-spam check on the forms does not use cookies. You can delete cookies and browser storage in your browser settings; without technical cookies, the forms and the private area will not work.