Pursuant to Legislative Decree no. 196/2003 and Regulation (EU) 2016/679 (the “GDPR”), this Privacy Policy describes the methods of processing personal data of users who browse the website accessible electronically. Browsing this website may result in the processing of personal data relating to identified or identifiable natural persons. This information does not apply to other websites, pages or online services accessible through hypertext links that may be published on this website.

The Data Controller is Exometal S.r.l., acting through its legal representative, with registered office in Via Jacopo dal Verme, Milan (Italy), PEC: exometal@pec.it (hereinafter also referred to as the “Data Controller”).

The Data Controller processes personal data voluntarily provided by users through the website, including data submitted via contact forms, forms for purchase or sale requests, and forms intended for potential sellers. Personal data collected may include identification data, contact details, company information, and any information contained in documents uploaded by users, such as CVs, PDF files, images, technical documentation, or other materials sent for business evaluation purposes. The optional, explicit and voluntary sending of messages through the contact channels available on the website, as well as the completion and submission of forms, entails the acquisition of the sender’s contact data and any personal data included in the communications.

The Data Controller also collects navigation data related to the use of the website by users. The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses, domain names of the devices used by users, URI/URL addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, numerical codes indicating the status of the response provided by the server, and other parameters related to the user’s operating system and IT environment. Such data are processed for the purpose of ensuring the proper functioning of the website and obtaining statistical information on its use and are deleted after a maximum period of seven days, except where required for the investigation of offences by judicial authorities.

This website uses cookies to ensure proper functionality and improve the user experience. Cookies are small text files stored on the user’s device to enable certain website features and improve navigation. Further information regarding the use of cookies is available in the dedicated Cookie Policy.

Personal data are processed for the following purposes: responding to communications, information requests and business inquiries submitted by users; managing and evaluating purchase and sale requests; assessing proposals and documentation submitted by potential sellers; managing recruitment-related submissions such as CVs; preventing fraud, insolvency or contractual breaches; managing disputes and enforcing legal rights; and complying with legal and regulatory obligations. The legal basis for processing includes the performance of pre-contractual or contractual measures, compliance with legal obligations, the consent of the data subject where required, and the legitimate interest of the Data Controller, particularly with regard to business management and fraud prevention. Any special categories of personal data contained in CVs are processed only where necessary to comply with legal obligations related to employment relationships and equal opportunity regulations.

Personal data are not disclosed to the public. They may be communicated to employees and collaborators of the Data Controller acting under its authority and duly authorized to process personal data, as well as to external service providers appointed as Data Processors for website hosting, IT maintenance, or technical services strictly related to the operation of the website. Data may also be disclosed to public authorities where required by law. Personal data are not transferred to non-EU countries or international organizations.

Personal data are stored for the time strictly necessary to achieve the purposes for which they were collected and subsequently retained in accordance with applicable civil, fiscal and regulatory obligations. Data submitted through recruitment or CV upload forms are retained for a maximum period of twelve months from receipt, unless further retention is required by law or for the establishment or defense of legal claims. In the event of disputes, data will be retained for the entire duration of the proceedings and until the expiration of applicable limitation periods. If users provide personal data that are not necessary or relevant to the requested services, the Data Controller will delete such data as soon as possible.

Data subjects may exercise their rights at any time, including the right to access personal data, request rectification or deletion, restrict or object to processing, request data portability, and withdraw consent where applicable. Requests may be submitted to the Data Controller exclusively via PEC at exometal@pec.it. Data subjects also have the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their personal data violates applicable data protection laws.

The provision of personal data is voluntary; however, failure to provide data identified as necessary may prevent the Data Controller from processing requests or providing the requested services. The Data Controller does not carry out automated decision-making processes involving personal data. This Privacy Policy may be updated at any time, and any changes will be published on this page.