NFORMATION REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 (GDPR) AND NATIONAL LEGISLATION IN FORCE

Please be informed that the personal data you provide visiting this website https://sctubes.com/ (« Site ») will be processed by SERRAVALLE COPPER TUBES S.R.L., which, as Data Controller, has implemented appropriate technical and organizational measures to ensure its protection.

Personal data is information regarding an identified or identifiable natural person (« Data subject »).

“Processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, storage.

In view of the importance accorded to the protection and security of the Data subjects to whom such data refers, the Data Controller has appointed a Data Protection Officer (« DPO”), according to art. 37-39 of the GDPR.

The DPO may be contacted for matters relating to the data processing, including the exercise of data subject’s rights, at dpo.sct@sctubes.com.

How and for how long do we process your personal data?

We process your personal data (internet protocol (IP) address, type of browser, parameters of the device used to connect to the Site, name of the internet service provider (ISP), date and time of visit, web page of origin of the visitor (referral) and exit) to allow you to use the services offered by the Site.

The provision of this information (so-called browsing data) is mandatory and data is stored in the server log files (hosting) of the Site and is used for statistical and analytical purposes, only in aggregate form.

The IP address is used only for safety reasons and is not cross-referenced with any other data.

The data collected by the Site during operations is stored for the time strictly necessary to carry out the specified activities: the data (IP address) used for Site security purposes (e.g. blocking attempts to damage the Site) is stored for 365 days.

Who will have information regarding your data?

Personal data will be processed by authorized personnel, duly trained and operating under the authority and responsibility of the Data Controller. We also use qualified service providers to operate, optimise and secure our Site.  Within the scope of data processing, we transfer your data to service providers who support us in the operation of our website and the associated processes.  These include, for instance, hosting service providers, web designers, IT service providers and consent management platforms.

Our Site also features special “buttons” (called “social buttons/widgets”), showing the icons of social networks (e.g. LinkedIn). These buttons allow users browsing websites to interact by clicking directly with those social networks. In this case, the social networks acquire the data relating to the user’s visit, whilst the Data Controller will not share any browsing information or data of the user acquired through its website with the social networks that can be accessed thanks to the social buttons/widgets.

Where is your data processed?

Management and storage of personal data shall be in servers located in European Union belonging to the Data Controller or to third-party companies duly appointed as data processors.

What are your rights, and whom should you contact to exercise them?

Your rights pursuant to articles 15-22 GDPR encompass the following:

• Right to access
• Right to rectification
• Right to withdraw consent
• Right to erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Rights in relation to automated decision-making and profiling

At any time and free of charge, with no particular formalities for your request, you can:

• obtain confirmation of the data processing performed by the Data Controller;
• access your personal data and know its origin (when the data is not obtained from you directly), the purposes and aims of the processing, the data of the subjects to which it will be disclosed, the time for which your data will be kept or the criteria useful to determining this;
• update or rectify your personal data so as to ensure that it is always exact and accurate;
• erase your personal data from back-up and other databases and/or archives of the Data Controller if, amongst other situations, it is no longer necessary for the purpose of the processing or if this is assumed to be unlawful and as long as the legal conditions are met; and in any case if processing is not justified by another equally legitimate reason;
• limit the processing of your personal data in some circumstances, for example where you have challenged its exactness, for the period necessary to the Data Controller to verify its accuracy. You must be informed, in time, also of when the suspension period has expired or the cause for the limitation to processing ceased applying and, therefore, said limitation has been revoked;
• obtain your personal data, if received or processed by the Data Controller with your consent and/or if its processing takes place in accordance with a contract and using automated tools, in electronic format, also so as to send it to another data controller.

The Data Controller must proceed in this sense without delay and in any case at the latest within a month of receiving your request. The terms may be extended by two months, if necessary, considering the complexity and number of requests received by the Data Controller. In these cases, the Data Controller shall, within a month of your request, inform you and make you aware of the reasons for the extension.

You can exercise the rights under articles 15-22 of the GDPR in the following ways:

• sending an e-mail to privacy@kme.com;
• contacting the DPO at dpo.sct@sctubes.com;
• sending a written request to the Data Controller’s registered office.

To whom can you submit a complaint?

Without limiting your right to pursue further administrative or judicial remedies, you may file a complaint with the appropriate Supervisory Authority. This can be the authority in the country where you normally reside, work, or, if applicable, the EU member state where the violation of GDPR occurred.

COOKIES POLICY

INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 (GDPR) AND NATIONAL LEGISLATION IN FORCE

This cookie policy is aimed at illustrating the types of cookies and methods of use, as well as to provide indications on how to refuse or eliminate the cookies from the Site if desired.

What are cookies, and what purposes do they serve?

Cookies are text files generated by your browser when you visit a page, serving to store information about the browser during and after your page visit. Unique character strings are regularly stored in the cookie for this purpose, allowing a server to subsequently identify a browser.

On each subsequent visit, cookies are returned either to the website that created them (first-party cookies) or to a different site that recognizes them (third-party cookies). Cookies are useful as they enable a website to identify the user’s device. They serve various purposes, such as facilitating smooth navigation between pages, remembering preferred sites, and enhancing overall browsing experience. Additionally, they help tailor online advertisements to align better with user’s interests.

One of the reasons we use cookies is to safeguard the technical functionality of our Site (technical and functional cookies) and to embed other online services from third-party providers into our Site (non-functional cookies).  Cookies can be stored either by the page you visit (first party) or by third-party online services (third party) if you have activated such a service.

According to the function and purpose of use, cookies can be divided into:

• Technical cookies: Technical cookies are those used exclusively with a view to « carrying out the transmission of a communication on an electronic communications network, or insofar as this is strictly necessary to the provider of an information society service that has been explicitly requested by the contracting party or user to provide the said service. » (see Section 122(1) of the Italian Legislative Decree 196/2003, “Privacy Code”, as amended by Legislative Decree 101/2018).

They are not used for further purposes and are usually installed directly by the data controller or the website manager. They can be grouped into browsing or session cookies, which allow users to navigate and use a website (e.g. to purchase items online or authenticate themselves to access certain sections); analytics cookies, which can be equated to technical cookies insofar as they are used directly by the website manager to collect aggregate information on the number of visitors and the pattern of visits to the website; functional cookies, which allow users to navigate as a function of certain pre-determined criteria such as language or products to be purchased  so as to improve the quality of service

Users´ prior consent is not necessary to install these cookies, while remains unaffected by the obligation to give information pursuant to art. 13 of the Privacy Code.

• Profiling cookies: Profiling cookies are aimed at creating user profiles. They are used to send ads messages in line with the preferences shown by the user during navigation. In the light of the highly invasive nature of these cookies vis-à-vis users´ private sphere, Italian and European legislation requires users to be informed appropriately on their use so as to give their valid consent.

These cookies are referred to in Article 122(1) of the Privacy Code where it is provided that « storing information, or accessing information that is already stored, in the terminal equipment of a contracting party or user shall only be permitted on condition that the contracting party or user has given his consent after being informed in accordance with the simplified arrangements mentioned in section 13(3).« 

Which cookies are used and for what main purpose?

One of the reasons we use cookies is to safeguard the technical functionality of our Site (technical cookies); no profiling cookies are used.

The legal basis for the use of technical cookies is derived from our legitimate interest pursuant to Art.  6 (1) (1) (f) GDPR.

The following list describes in detail the cookies used in our Site and the consequences of their deactivation:

COOKIE	DESCRIPTION	DATA RETENTION
cookielawinfo-checkbox-necessary	TECHNICAL FIRST-PARTY COOKIE This cookie is set by GDPR Cookie Consent plugin to store the user’s consent for cookies in the category “Necessary” (technical cookies). If disabled, key functionalities of the Site may not work properly.	2 years
viewed_cookie_policy	TECHNICAL FIRST-PARTY COOKIE The cookie is set by the GDPR Cookie Consent plugin to store whether the user has viewed the cookie policy. If disabled, the cookie banner may reappear.	2 years
CookieLawInfoConsent	TECHNICAL FIRST-PARTY COOKIE The cookie is set by the GDPR Cookie Consent plugin to store whether the user has consented to the use of cookies. If disabled, consent settings may not be saved.	2 years
PHPSESSID	TECHNICAL FIRST-PARTY COOKIE This cookie is set to preserve the status of the User in the various pages of the Site	session
mcfw-bypass-cookie	TECHNICAL FIRST-PARTY COOKIE The cookie is set to bypass certain features of the Site. If disabled, some limited content may not be accessible	1 year
mcfw-wp-user-cookie	TECHNICAL FIRST-PARTY COOKIE The cookie is set to store your session information. If disabled, the user’s sessions may not persist.	1 year
wp-settings-1	TECHNICAL FIRST-PARTY COOKIE The cookie is set plugin to store the WordPress setting. If disabled, the Site’s customizations may not be maintained.	2 years
wp-settings-time-1	TECHNICAL FIRST-PARTY COOKIE The cookie is set to store the time of WordPress settings. If disabled, the time sensitive settings may not be updated.	2 years

We use a Consent Banner on our Site so that we can use cookies in a privacy-compliant manner and enable you to independently manage and control your cookie preferences.

More information and options are available over our Consent Banner.

If you choose to view third-party content, you must accept the terms and conditions of the third-party content, including the respective cookie policies, over which we have no control. However, if you do not see such content, no third-party cookies are installed on your device.

What are your rights, and whom should you contact to exercise them?

Your rights pursuant to articles 15-22 GDPR encompass the following:

• Right to access
• Right to rectification
• Right to withdraw consent
• Right to erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Rights in relation to automated decision-making and profiling

At any time and free of charge, with no particular formalities for your request, you can:

• obtain confirmation of the data processing performed by the Data Controller;
• access your personal data and know its origin (when the data is not obtained from you directly), the purposes and aims of the processing, the data of the subjects to which it will be disclosed, the time for which your data will be kept or the criteria useful to determining this;
• update or rectify your personal data so as to ensure that it is always exact and accurate;
• erase your personal data from back-up and other databases and/or archives of the Data Controller if, amongst other situations, it is no longer necessary for the purpose of the processing or if this is assumed to be unlawful and as long as the legal conditions are met; and in any case if processing is not justified by another equally legitimate reason;
• limit the processing of your personal data in some circumstances, for example where you have challenged its exactness, for the period necessary to the Data Controller to verify its accuracy. You must be informed, in time, also of when the suspension period has expired or the cause for the limitation to processing ceased applying and, therefore, said limitation has been revoked;
• obtain your personal data, if received or processed by the Data Controller with your consent and/or if its processing takes place in accordance with a contract and using automated tools, in electronic format, also so as to send it to another data controller.

The Data Controller must proceed in this sense without delay and in any case at the latest within a month of receiving your request. The terms may be extended by two months, if necessary, considering the complexity and number of requests received by the Data Controller. In these cases, the Data Controller shall, within a month of your request, inform you and make you aware of the reasons for the extension.

You can exercise the rights under articles 15-22 of the GDPR in the following ways:

• sending an e-mail to privacy@kme.com;
• contacting the DPO at dpo.sct@sctubes.com;
• sending a written request to the Data Controller’s registered office.

To whom can you submit a complaint?

Without limiting your right to pursue further administrative or judicial remedies, you may file a complaint with the appropriate Supervisory Authority. This can be the authority in the country where you normally reside, work, or, if applicable, the EU member state where the violation of GDPR occurred.

This Cookie Policy can be viewed via links at the bottom of all the pages of the Site pursuant to art. 122 second paragraph of the Privacy Code and following the simplified procedures for the disclosure and acquisition of consent for the use of cookies published in the Official Gazette n.126 of 3 June 2014, and the relative register of measures n.229 of 8 May 2014.