PRIVACY POLICY AND INFORMATION NOTICE PURSUANT TO ARTICLE 13 OF GDPR (EU) 2016/679

This Privacy Policy aims to explain the methods and purposes of personal data processing carried out by CO.MA.CO. S.r.l., as the Data Controller of the website http://www.comacopro.com and its associated services.
CO.MA.CO. S.r.l. respects the privacy of every user who visits the Website and uses its Services.
This Policy does not apply to third-party websites accessible through links on the Data Controller's Website.
Users' personal data is processed in full compliance with Regulation (EU) 2016/679 and all other applicable data protection legislation.

1. Identity and Contact Details of the Data Controller
The Data Controller is CO.MA.CO. S.r.l. - Via Quattordicesima Strada, 21 – 20020 Cesate (MI) - VAT No. 00997330188, Tax Code 00849930151.

2. Categories of Personal Data Processed
The Data Controller may process the following categories of Users' personal data:
- Data provided by the user: identification and contact details (primarily first name, last name, company name, telephone numbers and email addresses) voluntarily entered by the user when completing information request forms in the various sections of the Website. The optional, explicit and voluntary sending of messages to the Data Controller's contact addresses, as well as the completion of forms, involves the collection of the sender's contact details, which are necessary to respond, together with any personal data included in the communications. Where necessary, specific privacy notices are published on web pages dedicated to the provision of different services and processing purposes.
- Browsing data: the software procedures and IT systems used to operate this Website acquire, during their normal operation, certain data whose transmission is inherent in the use of Internet communication protocols. This information is not directly associated with individuals but, by its nature, could allow their identification through processing and association with other data held by the Data Controller (or third parties). This category includes IP addresses or domain names of the computers used by those connecting to the Website, addresses of requested resources in URI/URL (Uniform Resource Identifier/Locator) format, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the response status (error, success, etc.) and other parameters relating to the user's operating system and IT environment. The Data Controller may use this data solely to obtain anonymous statistical information on Website usage. The purpose is to identify the pages most frequently visited by users, provide them with the most relevant content and monitor the proper functioning of the Website. In the event of alleged cybercrimes committed against the Website, such data may be used, in cooperation with the judicial authorities, to establish responsibility.

3. Purposes and Legal Bases for Processing Personal Data
The Data Controller processes users' data to enable navigation of its Website and to respond to requests voluntarily submitted by users.
Any further processing is carried out only on the basis of legal obligations and legitimate interests. For any other processing purposes, the User's explicit consent is requested by the Data Controller.

4. Data Retention Periods
Personal data processed by CO.MA.CO. S.r.l. on the basis of the User's consent will be retained only for the period strictly necessary to achieve the purposes for which it was originally collected and, in any case, will no longer be processed following any withdrawal of the consent given.
Where personal data is processed to comply with legal, tax or judicial obligations, it may be retained for a maximum period of ten (10) years.
Browsing data is not retained for more than seven days and is deleted immediately after aggregation (except where necessary for the investigation of criminal offences by the judicial authorities).

 5. Provision of Data and Processing Methods
The provision of personal data such as last name, first name, email address, telephone number and message is mandatory in order to respond to requests voluntarily submitted by users.
All personal data will be processed using paper-based and electronic tools.
The Data Controller has adopted all necessary and appropriate technical and organisational measures to ensure a high level of security and minimise the risks of destruction or loss, including accidental loss, of personal data, unauthorised access, or processing that is unlawful or inconsistent with the purposes specified in this document, in accordance with Articles 24, 25 and 32 of the GDPR.
However, as it is not possible to guarantee that the security measures adopted for the Website and data transmission will eliminate all risks of unauthorised access or data loss, users are encouraged to ensure that their computers are equipped with up-to-date antivirus software to protect data when using the Internet, and that their Internet service providers have implemented appropriate measures to ensure secure data transmission.

 6. Recipients of Personal Data - Communication and Disclosure of Personal Data
The personal data processed may be communicated to specifically identified parties. Based on their respective roles and responsibilities, internal and external personnel are authorised to process personal data within the limits of their duties and in accordance with the instructions provided by the Data Controller. Such data may also be communicated to parties authorised to administer IT systems, provide hosting services and maintain the technological infrastructure of the Website, as well as to parties entitled to access the data under applicable national or European Union legislation. The web hosting service is located within the European Union.

 7. International Transfers of Personal Data
Users' personal data will not be transferred to countries outside the European Union that do not ensure levels of data protection consistent with the Applicable Data Protection Legislation.

8. Processing of Minors' Personal Data
The use of the Website and Services is restricted to adult Users only. CO.MA.CO. S.r.l. does not process personal data relating to minors.

9. Rights of the Data Subject
The Data Controller may be contacted freely regarding any request relating to this Policy by writing to privacy@comacopro.com. Users may exercise their rights under Articles 15 et seq. of GDPR (EU) 2016/679 at any time.
These rights may be exercised by submitting a specific request to the Data Controller through the contact channels indicated in this notice.

 10. Cookie Policy

 11. Social Media Policy
For information regarding the Data Controller's use of social networks, please refer to the dedicated "Social Media Policy" section, where the relevant information notice is provided.

 12. Links to Third-Party Websites
CO.MA.CO. S.r.l. shall under no circumstances be held responsible for data processing activities carried out through or in connection with such third-party websites.
Users are therefore strongly encouraged to exercise appropriate caution and review the terms of use, privacy policies and cookie policies published on the websites they visit.

13. Changes and Updates
This Policy was last updated and became effective on 25/05/2018.
Any subsequent changes will be communicated to Users through the methods and within the timeframes deemed most appropriate by the Data Controller, particularly by publication on the Website.