This section contains information on how Metallux Online Shop manages the processing of the personal data of visitors to the website shop.metallux.ch
This information is also valid for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
This information applies only to visitors to shop.metallux.ch and not to other websites.
This policy may be subject to change due to the introduction of new legislation in this regard, so please check this page periodically.
The data controller is the natural or legal person who, individually or jointly with others, determines the purposes and means of the processing of personal data.
With regard to this website, the data controller is:
Pursuant to art. 26 GDPR, we inform you that:
Your navigation on the site and/or the data entry in some areas may involve the collection and subsequent further processing of your Personal Data by us. In fact, the computer systems and software procedures used to operate them automatically and implicitly administer and/or acquire certain information (such as, for example, the so-called "cookies" - as specified below - or the data expressly specified in the collection formats, such as name, surname, e-mail address, nationality, address, telephone number, e-mail address, information on the market sector in which you operate and information on products used or about which you are interested).
The information collected from you may include the following:
We process your data for different purposes and for each purpose we comply with the retention periods and conditions of lawfulness provided. The Data Controller will not retain your Personal Data for longer than is necessary to fulfill the purpose for which it was processed. Data will be retained for as long as permitted or required by law. In order to ensure compliance with the principles of necessity and proportionality of processing, the Data Controller has identified different Personal Data retention times in relation to the individual purposes pursued.
| Purpose of processing | Legal basis of processing | Retention period |
|---|---|---|
| Handling and responding to your specific requests by contacting us directly | consent | 24 months |
| marketing activities, commercial communications, market research, receipt of newsletters | consent | until you revoke your consent, which can be exercised at any time by using the link at the bottom of each promotional email (as regards marketing activities and the newsletter) or by sending us an email, which you can find in the contacts above |
| to provide you with the products and services you have purchased and to send you communications relating to your order or payments | performance of the sales contract or pre-contractual measures | 10 years or end at the request of account deletion |
| for you to interact with customer service operators | performance of the sales contract or pre-contractual measures | 10 years or end at the request of account deletion |
| management and performance of the statutory obligations (accounting, administrative, fiscal, etc.). | legal obligation | 10 years or end at the request of account deletion |
| management of disputes and litigation, if any; to prevent or control unlawful conduct or to protect and enforce rights | legitimate interest | up to the prescribed limitation periods or up to the statutory periods |
| cookies collected | consent, as notified by the site access banner | the retention period of these cookies runs from the date on which they are enabled on the site until they are disabled or the cookie itself expires |
The processing of your Personal Data may include any type of operation including the collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, erasure or destruction.
The operations can be carried out with or without the aid of electronic or automated tools.
The processing is carried out by the Owner and/or by the persons in charge of the processing who operate under the direct authority of the Owner by following the instructions given or by third parties appointed as external data processors.
Your Personal Data is primarily processed at the data controller's premises, so the physical location may vary based on the processing purposes set forth in paragraph 1. In addition, it may be processed at the locations of external data processors. This site may share some of the data collected with services located outside the European Union area, such as with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service.
If you consent to processing for marketing and promotional purposes, some of your Data (first name, last name, e-mail address) will be transferred to our newsletter software partners located worldwide, including outside the European Union. We inform you that we only transfer your Personal Data to entities located in countries for which there is an appropriate decision of the EU Commission that ensures their adequacy and guarantee of processing according to the provisions of Reg. 679/2016 (GDPR).
Your Personal Data may be disclosed to the following entities:
Your Personal Data will not be disclosed to third parties except where your Personal Data is disclosed by the Controller to consultants in order to protect its rights, nor will it be disseminated.
The conferment of data must be considered compulsory with regard to the treatments that the owners must perform to fulfill their obligations to the person concerned on the basis of the relationship (or contract) in place, as well as legal obligations, rules, regulations.
Consent is not compulsory for all other purposes and, even if given, may be revoked at any time by the interested party.
Failure to provide the data that the interested party is obliged to communicate may make it impossible to satisfy your requests or to initiate a business relationship and contracts that may be established with the Owner.
In case of failure to provide non-mandatory data, the consequences will be evaluated from time to time with regard to the specific case and will presumably involve the non-performance of the service related to such data.
The Privacy Law recognizes you, as an interested party, numerous rights. In particular, you have the right to:
| Right | Description |
|---|---|
| Right of withdrawal of consent (Art. 13 para. II lit. A and Art. 9 para. II lit. A GDPR) | You have the right to revoke your consent at any time for all processing operations for which you have given your consent as indicated in the purpose table above. Withdrawal of consent shall not affect the lawfulness of the previous processing. |
| Right of access to data (Art. 15) | You may request (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations; (d) where possible, the proposed period of retention of personal data or, if that is not possible, the criteria used to determine that period; (e) the existence of your right to request from the Controller the rectification or erasure of your personal data or the restriction of the processing of your personal data or to object to the processing of your personal data; (f) the right to lodge a complaint with a supervisory authority; (g) where the data are not collected from you, all available information on their origin; (h) the existence of automated decision-making, including profiling as referred to in Art. 22(1) and (4), and, at least in such cases, meaningful information about the logic used and the importance and expected consequences of such processing for you. You have the right to request a copy of the personal data being processed. |
| Right to rectification (Art. 16) | You have the right to request the correction of inaccurate personal data concerning you and to obtain the integration of incomplete personal data. |
| Right to be forgotten (Art. 17) | You have the right to obtain from the Data Controller the deletion of personal data concerning you if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you revoke your consent, if there is no overriding legitimate reason to proceed with the profiling processing, if the data have been processed unlawfully, if there is a legal obligation to delete them; if the data are related to web services to minors without consent. Deletion may take place unless the right to freedom of expression and information prevails, the data are retained for the fulfilment of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the health sector, for archiving in the public interest, for scientific or historical research or statistical purposes or for the establishment, exercise or defence of legal claims. |
| Right to limitation of processing (Art. 18) | You have the right to obtain from the Data Controller the restriction of processing when you have contested the accuracy of personal data (for the period necessary for the Data Controller to verify the accuracy of such personal data), or if the processing is unlawful and you object to the deletion of your personal data and request instead that their use be restricted, or if they are necessary for the establishment, exercise or defence of a right in court, whereas the Data Controller no longer needs them. |
| Right to portability (Art. 20) | You have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you that you have provided to us and you have the right to transmit them to another if the processing is based on consent, on contract and if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority and such transmission does not affect the right of a third party. |
| Right to lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali) (Art. 77) | Without prejudice to any other administrative or judicial remedy, if you consider that the processing of your personal data is in breach of the Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you have your habitual residence, work or in which the alleged breach has occurred. |
You may at any time exercise the rights listed in this statement by contacting the Data Controllers (see par. 2 and 3). You can complain to the Guarantor by following the instructions provided on the website of the Guarantor, in the section "Forms", under "Complaint" (or by clicking on the following link).
12.1 What are cookies?
Cookies are small text files that sites visited by users send to their terminals, where they are stored and then transmitted to the same sites on the next visit. The cookies of the so-called "third parties" are, instead, set by a website different from the one the user is visiting. This is because on each site there may be elements (images, maps, sounds, specific links to web pages of other domains, etc..) that reside on servers other than that of the site visited.
12.2 What are cookies used for?
Cookies are used for different purposes: execution of computer authentication, session monitoring, storage of information on specific configurations regarding users accessing the server, storing preferences, etc.. Therefore, for an easy and complete use of a website, it would be advisable for the user to configure his browser so that it accepts the reception of such cookies.
12.3 Characteristics and purpose of cookies for our web pages
Our site uses the following categories of cookies, which may be of the Owner or of third parties.
12.4 How to enable or disable cookies on your browsers
You can block your browser from accepting cookies by opting to block all cookies or only third party cookies. However, this may make it less efficient or prevent access to certain functions or pages of the Site.
This document may be subject to changes or updates. If there are significant changes and updates, these will be notified to users.
|
|
Size: |
|
