CUSTOMER PORTAL & CALL CENTER DISCALIMER | NEWSLETTER AND TRACKING PIXEL PRIVACY NOTICE
In compliance with Article 13 of Regulation (EU) 2016/679 (GDPR) and current regulations concerning the processing of personal data for subscription to the Uteco Converting S.p.A. newsletter and, where applicable, monitoring of interactions with messages, we provide you with the following information regarding the processing and protection of your personal data:
Data Holder
Uteco Converting SpA, located at Viale del Lavoro, 25 ZI - 37030 Colognola ai Colli (VR) – Italy, can also be reached by calling +39 045 617 4555 or via email at privacy@uteco.com.
What type of data is essential for the functioning of the portal?
CUSTOMER PORTAL & CALL CENTER
The data pre-set by the Data Controller is already present in the Data Controller's CRM, as it pertains to actual customers. Specifically, for activation purposes, data related to the company name, identifying information of the person responsible for the production plant or sector, the Job Title, and the corresponding contact details—which, for security reasons, must correspond to a corporate domain—will be used, along with any corporate phone number for telephone support. The responsible person may subsequently invite other members of the company to access the portal, using corporate contact details only.
TRACKING PIXEL
We process the email address you provide and any additional identification or professional details requested in the subscription form, to the extent necessary to manage the service, together with records of your consent and preferences.
With your consent to tracking, newsletters may contain tracking pixels, which are small images used to detect message opens, and tracked links used to detect clicks. Data may include message opens, the date and time of opening and the links selected, as well as technical information such as IP address and details of the device or email application used, limited to the features actually enabled in the platform.
You are not asked to provide special categories of personal data or data relating to criminal convictions and offences.
| PURPOSE OF THE PROCESSING | LEGAL BASIS FOR PROCESSING | DATA RETENTION PERIOD |
| For user registration within the customer portal or for telephone assistance via the call center, aimed at requesting technical support, administrative inquiries, purchase advice, or other information related to the company's machinery or activities. | Contractual relationships Art. 6 Para.1 letter b). | 10 years from the last service provided. |
| In case of a call through the call center, any recording of the conversation for the protection and security of the Data Controller and its operators. | Consent following the initial message Art. 6 Para.1 letter a). | 10 years from the last service provided. |
| If necessary, recording of the conversation for the purpose of training our operators. | Consent following the initial message Art. 6 Para. 1 letter a). | 10 years since the last rendered service |
| At the end of the assistance, an optional satisfaction rating regarding our ticketing service is requested. If the customer highlights any issues or shortcomings on the part of the operators, the Data Controller reserves the right to request further details in order to improve the quality of the service. | Contractual relationships Art. 6 Para.1 letter b). | The data is retained until the termination of the relationship. |
| Defensive purposes in the event of potential disputes. | Legitimate interest Art. 6 Para.1 letter f). | 6 months from the service provided. |
How we process your data
Data are processed using electronic and online tools in accordance with the principles of lawfulness, fairness, transparency, data minimisation and confidentiality, with appropriate technical and organisational safeguards. The controller uses Microsoft Dynamics 365 to manage and send newsletters.
SENDING NEWSLETTERS
We process your data to manage your subscription and periodically send you emails containing information, commercial and promotional communications about the controller’s activities, products, services and initiatives.
Legal basis: your freely given, specific and optional consent under Article 6(1)(a) GDPR
Retention: until you withdraw your consent or unsubscribe and, in any event, for no longer than 24 months after your last contact or active correspondence. On expiry, data are deleted or anonymised, subject to the limited retention needs described below.
MONITORING INTERACTIONS WITH NEWSLETTERS
Data collected through tracking pixels and tracked links are used to measure opens and clicks and evaluate the effectiveness of the communications sent.
Legal basis: your prior, freely given, specific and optional consent to tracking, separate from your consent to receive newsletters, under Article 6(1)(a) GDPR and Article 122 of Italian Legislative Decree 196/2003. Refusing or withdrawing this consent does not prevent you from receiving the newsletter.
Retention: for as long as necessary to evaluate the communications and, in any event, for no longer than 24 months after collection, unless you withdraw consent or unsubscribe earlier. Withdrawal or unsubscription stops tracking and results in the deletion or anonymisation of the associated personal data, subject to the limited retention needs described below.
After withdrawal or unsubscription, only the information necessary to record your choices, demonstrate that previous processing was lawful and prevent further unwanted messages or tracking may be retained, for as long as strictly necessary. The legal basis is the controller’s legitimate interest in protecting its rights and respecting your preferences (Article 6(1)(f) GDPR), as well as compliance with any applicable legal obligations (Article 6(1)(c)).
To whom we may disclose the data
The data collected will not be disclosed or disseminated. Communication to third parties is only allowed towards third-party companies for technical and IT support, companies operating in the IT sector, and companies within the Group for specific assistance purposes, including Microsoft for Dynamics 365 services, appointed as processors under Article 28 GDPR where necessary. It is specified that for specific assistance needs, the ticket voluntarily opened by the data subject may be managed, with additional data, by external specialized technical suppliers with whom the Data Controller has entered into specific agreements. Within Uteco, the data is processed only by authorized and trained personnel. It is further specified that assistance may be managed, depending on the type or time of request, by personnel not operating in the data subject’s country.
Transfer outside the EEA
The use of Microsoft Dynamics 365 and related services may involve transfers outside the European Economic Area (EEA). Such transfers take place in accordance with Chapter V GDPR, on the basis of applicable adequacy decisions or appropriate safeguards, such as the European Commission’s standard contractual clauses, with supplementary measures where necessary. You may request information about transfers and a copy of the applicable safeguards by contacting privacy@uteco.com. Microsoft’s data processing terms are available in the Microsoft Products and Services Data Protection Addendum (DPA) at www.microsoft.com/licensing/docs.
The rights of the data subject | Unsubscribing and withdrawing consent
You have the right to request the Data Controller access to your personal data, rectification, restriction, and erasure. You can always request a full specification of the processing and your rights by writing to the contact details provided by the Data Controller and indicated at the beginning of the information notice. You may withdraw your consents at any time without affecting the lawfulness of processing carried out before withdrawal. To unsubscribe from the newsletter, use the unsubscribe link in the messages or write to privacy@uteco.com. To withdraw only your consent to tracking while continuing to receive the newsletter, write to the same address specifying your choice, or use the preference management options where available in the messages.
Right to Lodge a Complaint
If you believe that the processing of your data violates GDPR Regulation EU-2016/679, you have the right to lodge a complaint with the Data Protection Authority. Data can be found on the website www.garanteprivacy.it
i.e. the elaboration and processing of data by Uteco Converting SpA for marketing purposes referred to under point b) of these guidelines, via the foreseen processing methods, i.e. paper-based, via automated and telematic means, by ordinary or electronic mail, telephone and any other computerised means.
i.e. the elaboration and processing of data by Uteco Converting SpA for the purposes of profiling referred to in point c) of these guidelines, relating - by way of example and not exhaustive - to consumption and other habits, behaviour, consultation and use of the website.