PRIVACY POLICY OF THE TMP SPA TERMOMECCANICA POMPE INTERNET WEBSITE

Here below, we describe the methods used to manage and process the personal data of users who consult our website. In compliance to art. 13 of Legislative Decree no. 196/2003 – Personal data protection Code and EU 2016/679 Regulation (GDPR), the policy is also provided electronically to those who interact with the web services of TMP SPA TERMOMECCANICA POMPE at the following website address: www.tmp.termomeccanica.com. Hereinafter, information is provided on the type of data processed, the methods with which the parent company Termomeccanica SpA manages such data on behalf of TMP SPA TERMOMECCANICA POMPE and those with which users can, as interested parties, exercise the related rights provided for by law. The information is provided only for this website and not for any other website that may be consulted by the user via link.

DATA CONTROLLER
Following consultation of this website, the data related to identified or identifiable persons may be processed. The Data Controller is Termomeccanica SpA, with head office in via del molo 3, La Spezia - Italy

PLACE OF DATA PROCESSING
The data treatment connected to the website’s services take place at the afore-mentioned Termomeccanica’s headquarters and at the headquarters of Delta Progetti 2000 srl, via Fontevivo 25, La Spezia, Italy. The latter operates as an independent controller and data is handled by technical staff in charge of data treatment or by other possible persons in charge of occasional maintenance operations. The updated list of data processors and autonomous controllers (natural persons, companies, institutions), with the indication of their respective HQs addresses, is available at the Personnel Department of Termomeccanica SpA. No data deriving from the web services is communicated or disseminated. Personal data provided by users who submit requests to receive information material (bulletins, CD-ROMs, newsletters, annual reports, brochures and documents, reports related to services of the website itself, etc.) or job applications (curriculum vitae, etc.) is used only to perform or manage the requested service and is disclosed to third parties only if necessary for this purpose.

PROCESSING METHOD
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which it has been collected. Specific security measures are observed to prevent data loss, illicit or incorrect data use and unauthorized access.

TYPES OF DATA PROCESSED AND DATA PROCESSING PURPOSE
Navigation data The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data of users who connect to the site and whose transmission is implicit when using Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature, it could, through processing and association with data held by third parties, allow the aforementioned users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the ebsite, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the user's IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the website and checking its proper operation. The data could be used to ascertain responsibility in case of computer crimes against the website: except in this case, the data on web contacts are not currently kept for more than seven days.Data provided voluntarily by the user The sending e-mail messages to the addresses indicated on this website entails the subsequent acquisition of the sender's address, which is necessary to answer his/her requests as well as the acquisition of any other personal data entered in the message. Specific summary notices will be reported or displayed on the web pages possibly prepared for particular services available on request.

COOKIES
No personal user data is acquired by the website in this regard. No cookies are not used to transmit information of a personal nature, nor are so-called persistent cookies of any kind used, i.e. any systems for tracing users. The use of so-called session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow the safe and efficient exploration of the website. The so-called session cookies used on this website avoid the use of other IT techniques that are potentially prejudicial to the users’ browsing confidentiality and do not allow the acquisition of users’ personal identification data.

OPTIONAL PROVISION OF DATA
Except for the navigation data, the user is free to provide the personal data requested in the "Contacts" sections to request the sending of informative material or other communications or to subscribe to the services provided on the website. Failure to provide such data may imply the impossibility to obtain the requested information.

TRANSFER OF DATA ABROAD
Personal data will be processed within the territory of the European Union. If for technical and/or operational reasons it becomes necessary to make use of subjects located outside the European Union or to transfer some of the data collected to technical systems and services managed in a cloud located outside the European Union area, data processing will be regulated in accordance with the provisions of Chapter V of the GDPR and authorized on the basis of specific decisions of the European Union.

DURATION OF TREATMENT AND RETENTION OF PERSONAL DATA
The data controller, in accordance with Art. 5.1 e) of the GDPR, will process the data provided for the entire duration of the requested services and will keep them stored for the following 12 months, as well as for the time necessary to fulfil legal obligations.

RIGHTS OF THE INTERESTED PARTIES
The personal data subjects have the right, at any time, to receive confirmation of the existence or not of their personal data from the data controller in question and to know their content and origin, verify their accuracy or request their integration or update or rectification (Article 12 of the GDPR). Pursuant to the same article, the personal data subject has the right to request the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to object, for legitimate reasons, to their treatment (Article 15- 21 of the GDPR). Requests should be addressed to the Privacy Office of Termomeccanica SpA. It should be noted that this document, published at www.tmp.termomeccanica.com constitutes the 'Privacy Policy' of this website and may be subject to updates.