Privacy policy

Privacy Policy

This page describes how the site is managed with regard to the processing of personal data of users who consult it. This information is provided pursuant to Article 13 of EU Regulation 2016/679 (so-called GDPR) to those who interact with the web services of Progetto CMR Engineering Integrated Services S.r.l. accessible electronically from the following address: www.progettocmr.com

Please note that the information contained on this site may be subject to changes in order to remain up-to-date with current legislation. We therefore recommend that you periodically review this information.

Types of Data Processed

The data processed are browsing data and data voluntarily provided by the user, as defined below.

Browsing Data

The computer systems and software procedures used to ensure the proper functioning of the site acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.

This category includes technical connection data (logs), which Progetto CMR Engineering Integrated Services S.r.l. uses to allow for the security checks required by law and to improve the quality of the services offered, personalizing them based on user/visitor needs.

Data Voluntarily Provided by the User

The voluntary and explicit sending of emails to the addresses indicated on the site involves the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message. Such data will be communicated to third parties only where necessary to fulfill the requests of the users/visitors.

Purposes of Processing

Data processing is exclusively aimed at achieving the following purposes:

a) purposes related to the use of the services offered for browsing the site;
b) activities related and instrumental to managing customer relationships (contact requests);
c) marketing and profiling activities, solely and exclusively with specific consent, for market research; economic and statistical analyses; sending newsletters, including in relation to programs and promotions, also online, communications, development and maintenance of commercial relationships;
d) processing data related to CVs for the evaluation of job applications.

The provision of data for the purposes referred to in letters c) and d) is optional and must be provided in the manner set out in Article 7 of the GDPR. Marketing communications may be made using traditional methods (e.g., paper mail, operator-assisted phone calls) and electronic methods (e.g., e-mail). If you are already our customers, we may send you commercial communications related to services similar to those you are already using, unless you object.

Processing Methods

Data processing may consist, in addition to their collection, in their registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction, as provided by Art. 4 No. 2) of the GDPR. It may be carried out both using paper media and electronic, IT, and telematic tools, in ways and with instruments suitable to ensure the security and confidentiality of the data. In particular, all appropriate technical and organizational measures will be adopted to protect the data in order to meet legal requirements and safeguard the rights of the data subjects.

Processing is carried out through automated systems for a period strictly necessary to achieve the purposes for which they were collected and, in any case, in accordance with the applicable legislative provisions. Below is a table indicating the main data retention periods.

MAIN CATEGORIES	DURATION	LEGAL REFERENCES
Candidates	Maximum 24 months	Art 5 lett. e) of EU Reg 2016/679
Employees and contract staff	10 years from the termination of the employment relationship	Art. 43 of Presidential Decree 600/73; Art. 2946 of the Italian Civil Code on the ordinary limitation period; Title I, Chapter III, of Legislative Decree 81/08 as amended.
Clients and Suppliers	5-10 years	Art. 2948 of the Italian Civil Code which provides for a 5-year limitation period for periodic payments; Art. 2220 of the Italian Civil Code which provides for the retention of accounting records for 10 years; Art. 22 of Presidential Decree 29 September 1973, n.600.
Prospect Clients	In compliance with the terms prescribed by law for the type of activity and in any case until consent is withdrawn or until the right to object is exercised	General Provision of 15/05/13; Art. 21 EU Reg 2016/679.
Data processed for marketing purposes	In compliance with the terms prescribed by law for the type of activity and in any case until consent is withdrawn or until the right to object is exercised	General Provision of 15/05/13; Art. 21 EU Reg 2016/679.
Video surveillance images	24 hours	General Provision of the Data Protection Authority; Art. 21 Reg. 2016/679
Cookies	Maximum 6-12 months	General Provision of the Data Protection Authority 19/03/2015; Art. 21 EU Reg 2016/679
System Administrator LOGs	Maximum 6 months	General Provision of the Data Protection Authority 27/11/2008 and subsequent modifications; Art. 21 EU Reg n. 2016/679
Browsing Data	Last 10 visited sites	General Provision of the Data Protection Authority/law; Art. 21 EU Reg 2016/679

Communication and Disclosure of Data

Data will not be disseminated and will be processed by the Company’s employees, who act as persons authorized to process data according to their duties and appropriately trained. Data may be communicated to external parties, including Data Processors appointed pursuant to Art. 28 of the GDPR. In particular, data may be communicated to the following categories of subjects, listed by way of example and not limited to: banking institutions and companies specialized in payment management and credit insurance, legal and consulting firms, parties appointed for the auditing of the company’s financial statements, public authorities or administrations for legal obligations, Italian and foreign suppliers, financing and transport companies.

A detailed list of Data Processors is available at the registered office of Progetto CMR Engineering Integrated Services S.r.l.

For all the purposes mentioned in this information notice, your data may also be communicated abroad, within and outside the European Union, in compliance with the rights and guarantees provided by the current legislation, and after verifying that the country in question ensures an adequate level of protection as required by the GDPR.

Rights of the Data Subject

With respect to the aforementioned data, you may exercise all the rights under Article 7 of the Privacy Code and Articles 15, 16, 17, 18, 20, and 21 of the GDPR, specifically:

a) The right to access personal data;
b) Their correction in case of inaccuracy;
c) The deletion of data;
d) The restriction of processing;
e) The right to object to processing;
f) The right to data portability, i.e., to receive in a structured, commonly used, and machine-readable format the personal data provided and to have it transferred to another data controller without hindrance. In the event of a violation of these provisions, the data subject has the right to file a complaint with the competent Supervisory Authority. For further clarifications regarding this information notice or the privacy topic, or to exercise your rights or withdraw your consent, you may write to pcmr@progettocmr.com
Withdrawal of Consent

The consent given for the processing of personal data may be withdrawn at any time, without prejudice to the lawfulness of the data processing carried out in the period prior to such withdrawal or other processing operations based on different legal grounds than consent.

Data Controller and Data Processor

The Data Controller is Progetto CMR Engineering Integrated Services S.r.l.. The list of Data Processors is available at the registered office of Progetto CMR Engineering Integrated Services S.r.l.

Cookie policy

Cookies are small strings that are stored locally in the user’s browser to exchange information with the website.

These strings are used for various functionalities, including session analysis, storing information to improve browsing experience or site features. The cookies stored during browsing may come from the site itself (first-party) or be installed by tools or objects contained within the website (third-party).

The general provision of the Data Protection Authority (Official Gazette no. 126 of June 3, 2014) defines two types of cookies:

Technical cookies – Used solely to enable the transmission of a communication, to complete a service requested by the user, or to perform statistical research.
Profiling cookies – Used to record a user’s behavior and the preferences expressed to send advertising messages in line with their profile.

This website does not use any profiling cookies.

Types of Cookies

These are the cookies used by Progetto CMR Engineering Integrated Services S.r.l. within the website www.progettocmr.com