Online Privacy Policy
PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA FOR THIS WEBSITE
PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679
Pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679, laying down provisions for the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter also referred to simply as the “GDPR” , from the English acronym General Data Protection Regulation), we hereby inform you that the processing of the personal data of users and/or visitors to the website https://www.marposs.com/ita/ (hereinafter also referred to simply as the “Website”) is carried out in compliance with the legislation governing the protection of personal data and confidentiality, which forms the basis of our activities, for the purposes and in the manner set out in detail in this Privacy Policy. For a proper understanding of the following terms, please consult the Information Pages of the Italian Data Protection Authority: https://www.garanteprivacy.it/regolamentoue.
1. WHO IS THE DATA CONTROLLER WHO DECIDES THE PURPOSES AND THE METHODS OF DATA PROCESSING? HOW AND WHERE CAN YOU CONTACT THEM?
The Data Controller, i.e. the party that determines the purposes and means of personal data processing, is Marposs S.p.A.., with its registered office at Via Saliceto 13, 40010 Bentivoglio (BO), Italy, Tax code : 03354081204, email: gdpr@marposs.com, certified email (PEC): marposs@legalmail.it, hereinafter also referred to simply as “MARPOSS” and/or the “Data Controller”).
The Data Controller has also appointed a Data Protection Officer who can be contacted at the following email address: dpo@marposs.com.
2. WHAT ARE THE PURPOSES, METHODS, LEGAL BASIS, CONSEQUENCES AND DATA RETENTION PERIODS APPLICABLE TO THE PROCESSING?
The processing of the data you will be asked to provide will be carried out for the following purposes:
- browsing the website (LEGAL BASIS: the Data Controller’s overriding legitimate interest in making the website available to the public; DURATION: for the entire duration of browsing and use of the website);
- providing information at the data subject’s request, via one of the Data Controller’s contact methods (form available on the website) – (LEGAL BASIS: processing of pre-contractual requests; DURATION: for the entire duration necessary to assess and respond to the data subject’s requests and no later than 10 years from the conclusion of the contract);
- compliance with laws, regulations and EU legislation (LEGAL BASIS: regulatory obligation; failure to comply will result in legal consequences; RETENTION PERIOD: for the entire duration provided for by the applicable laws);
- any investigation, defence or exercise of a right in legal proceedings (LEGAL BASIS: legitimate interest, considered to take precedence for self-defence or protection of a third party in legal proceedings; DURATION: for the entire limitation period provided for by applicable laws, e.g. 10 years in the case of contractual liability);
- to safeguard the security of the present website , of the networks and of the IT systems of the Data Controller (LEGAL BASIS: legitimate interest, considered to take precedence as it complies with Recital 49 of the GDPR for the self-protection of its own security; DURATION: 6 months);
- registration and management of your account, the ‘members’ area’, on the website to access restricted content on the website (LEGAL BASIS: performance of contractual obligations or pre-contractual measures; DURATION: 10 years from the conclusion of the contract);
- sending from , communications from , and direct marketing from by the Data Controller, via email, including newsletters (LEGAL BASIS: specific consent; DURATION: 24 months from the date of consent, subject to revocation at any time via email);
- disclosure of data to third parties for marketing purposes, via email, including newsletters (LEGAL BASIS: specific consent; DURATION: 24 months from the date of consent, subject to revocation, which is always possible via email); such third parties may include both companies within the Marposs Group and third-party commercial partners.
The website also features a ‘Work with us’ section for job applications; data subjects are therefore referred to the specific privacy notice on the relevant data collection page.
With regard to the methods used to process the data subject’s personal data, such processing will be carried out in compliance with the security measures provided for by current legislation, both by automated means (involving the use of software, hardware and computer networks) and by non-automated means.
3. TO WHOM MAY YOUR DATA BE DISCLOSED?
In order to carry out its business activities, the Data Controller may in turn disclose your data to the following parties to the extent strictly necessary to achieve the aforementioned purposes; all of these parties are based in the European Community/European Economic Area unless otherwise stated:
- authorised and designated internal staff of the Data Controller responsible for processing, for the purpose of carrying out business activities and fulfilling orders, sales and bookings;
- organisations responsible for the coordination, supervision and management of Internet networks, both domestic and international, as well as communication and telephone networks;
- payment and banking service providers (e.g. for credit or debit card payments, bank transfers, etc.) for transactions relating to online orders; it is understood that specific and detailed payment data will be accessed and processed solely by these third-party providers;
- to the companies and professionals of whom the Data Controller makes use of for consultancy or assistance in the conduct of its business activities, as well as the management of the Website, in particular with regard to providers of professional services (administrative, tax, legal, etc.), IT and telecommunications infrastructure and services, as well as the maintenance and management of the members’ area;
- to third parties within the public administration (e.g. public bodies or state authorities) where this is necessary for the Data Controller to carry out its activities, in accordance with the aforementioned purposes.
Unless otherwise specifically stated, data will not be transferred or processed outside the EuropeanXor to any other location deemed not to comply with relevant EU legislation. Where applicable (e.g. for certain types of cookies), data transfers will generally take place on the basis of the European Commission’s standard contractual clauses or other appropriate safeguards (pursuant to Article 46 of the GDPR) or on the basis of one of the exceptions set out in Article 49 of the GDPR, unless otherwise specified. In particular, the transfer of data to the United States to entities participating in the so-called EU–US Data Privacy Framework is to be considered an adequate safeguard.
4. WHAT RIGHTS DO YOU HAVE REGARDING THE PROCESSING OF YOUR DATA?
You may contact the Data Controller to exercise the rights set out in Articles 15–22 of the GDPR. Your rights are as follows:
- the right to request access to your personal data from the data controller, asking for confirmation as to whether or not such data exists , as well as the rectification or the erasure of such data or the restriction (temporary suspension) of the processing concerning you;
- the right to object at any time to their processing for reasons relating to your particular situation in the event of: i) processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority, or ii) the pursuit of the data controller’s legitimate interests;
- if consent has been given for one or more specific purposes, the right to withdraw that consent at any time;
- the right to the portability of personal data (for those where the legal basis is the performance of a contract or consent) by submitting a request to the data controller, by means of a file in a commonly used format, or a similar open, interoperable format, depending on the type of data requested;
- the right to lodge a complaint with the following Data Supervisory Authority: “Garante per la protezione dei dati personali” (http://www.garanteprivacy.it); you also have the right to lodge a complaint with the competent supervisory authority of the Member State where you habitually reside, work or where the alleged infringement occurred.
Please also note that you may contact the Data Controller to request information regarding the balancing of interests test, where legitimate interests form the basis for processing.
5. FROM WHOM HAVE WE COLLECTED YOUR DATA AND WHAT TYPE OF DATA? WHAT HAPPENS TO THE DATA OF OTHER PEOPLE THAT I MIGHT PROVIDE TO YOU?
Data is collected directly by the Data Controller when you request information or make contact, when you browse the Website voluntarily, or when you register for or access the members’ area.
The data provided by you directly is general data relevant to the purposes set out above, such as identification and contact details (including the IP address used to access the site) and any other data that may be provided when completing registration or contact forms.
As regards the personal data you have provided in relation to third-party individuals (such as family members, friends, employees, collaborators, etc.), you declare that you hold all necessary authorisation to disclose such data to the Data Controller and to provide them with this privacy notice, where required by law. The Data Controller shall, in any event, remain the independent data controller in its own right, without bearing any liability for any unlawful acts or claims by third parties regarding the processing of such third parties’ data.
6. COOKIES
The processing of cookies (both technical and non-technical, such as marketing cookies) is carried out for the purposes, durations and further details set out in the specific cookie policy, to which reference should be made: https://www.marposs.com/ita/cookies. For matters such as the contact details of the Data Controller and the Data Protection Officer, as well as the rights to which you are entitled, you may always refer to the information provided in this document.
7. SOCIAL MEDIA
The ‘buttons’ on the Website featuring social network icons (e.g. Facebook, LinkedIn, Twitter, Google+ etc.) allow you to access and interact with our social media pages.
No third-party cookies are installed on the Website through the use of these buttons.
However, below are links where you can view the privacy policies of the social networks to which the buttons link:
- https://www.linkedin.com/legal/cookie-policy
- https://www.facebook.com/policies/cookies/
- https://www.twitter.com/privacy
- https://policies.google.com/technologies/cookies.
As regards the processing of data via social media, please refer to the purposes already indicated above – for example, providing information at the request of the data subject, via online messaging, posts, comments, emails, etc. Becoming a follower/fan or similar form of expressed preference via social media will be interpreted as consent to receive, via the social media platform’s own communication channels, any news and commercial communications from the Data Controller.
8. HOW WILL YOU BE INFORMED OF ANY CHANGES TO THIS POLICY?
This Privacy Policy may be subject to changes and updates, should any changes be made to the way in which we process your data or to the other information provided herein. Any changes will, in any case, ensure that your rights are fully protected. Before the processing of personal data commences in accordance with the new procedures, you will be promptly informed, including via the website, and you will be guaranteed the exercise of all rights provided for by applicable laws and regulations.
Last updated: 1 September 2026