Privacy Notice

This privacy notice applies to all visitors of the Site www.ilpea.com

This privacy notice concerns both personal data collected online and offline. As for the offline collection of personal data, please note that this notice only applies to the collection and subsequent processing of personal data of persons, employees, agents, or representatives who work for our customers and suppliers, collected possibly at the start and during the business relationship. For other cases of personal data collected offline, please refer to the specific privacy notices.

The Data Controller of the personal data collected (i) through filling out the contact form on this Site (ii) through browsing the Site www.ilpea.com, including cookies, and (iii) offline in the cases described above is:

Industrie ILPEA S.p.A, Viale dell’Industria 887, 21009 Bardello con Malgesso e Bregano, località Malgesso (VA), Italia.

Email: info@ilpea.com

NOTE: Only with regard to the processing of personal data of candidates collected through the specific form in the section “Careers – who are we looking for?” on this Site, the Data Controller is the respective ILPEA company to which the form will be sent. Please refer to the specific privacy notice available in the relevant country section on this Site.

The cookie policy in the footer of the Site complements this privacy notice and sets out further details regarding the types of cookies and their use.

Rispettiamo i requisiti della normativa applicabile in materia di trattamenti di dati personali. Ciò significa, tra le altre cose, che per mezzo di questa informativa ti comunichiamo chiaramente per quale motivo trattiamo, quali dati personali e per quali finalità. La raccolta dei dati personali è limitata ai soli dati personali strettamente necessari per le finalità del trattamento in questione e solo per scopi legittimi.

  • we take appropriate security measures to protect your personal data and we also require this from third parties who process personal data on our behalf;
  • we make sure you can exercise your right to access your personal data or have it corrected or deleted and to exercise other rights as explained in point 13 of this notice;
  • we always ask for your explicit consent before processing your personal data in cases that may require your consent.

1. What personal data do we process

a) We collect the following personal data through the contact form on the Site that you may have filled out:
  • First name
  • Lastname
  • Your email address
  • Company (optional)
b) We collect the following personal data while you browse the Site:

Technical data strictly necessary for the Site’s operation, security, and continuity, as well as for managing the user’s cookie preferences, including partially anonymized IP addresses and technical identifiers related to cookies, the cookie preferences expressed by the user, and any services that may be enabled through the cookie banner.

In particular, the Site uses technical/functional cookies necessary for the proper functioning of the Site, cookies related to managing the user’s cookie preferences, and, with the user’s consent where required, statistical cookies and other non-technical tools, including those provided by third parties, as better explained in the cookie policy available here (link) or in the footer of the Site.

Through these tools, depending on the preferences expressed by the user, data related to the use of the Site, pages viewed, interactions with content, enabled services, and technical identifiers generated by cookies or similar technologies can be processed. Any additional technical data generated by the hosting infrastructure is handled by the hosting provider to the extent necessary for security, operational continuity, and proper technical delivery of the Site, according to the technical and contractual conditions in place with the hosting service provider (please refer to art.6).

c) At the start and throughout the business relationship, we may collect offline and process, among others, the following personal data of employees, agents, or representatives  of our suppliers and customers:
  • First name
  • Last name
  • Title and role
  • Your email address
  • Phone number

2. Purpose

a) The purpose of the personal data collected through the contact form on the Site that you may have filled out is:

to contact you and handle your request.

b) The purposes of collecting technical navigation data, including partially anonymized IP addresses and cookies, are:

to ensure the proper functioning of the Site and the security of the infrastructure, prevent unauthorized access or abusive use, carry out technical maintenance activities, diagnose any malfunctions, and ensure the continuity of the service.

Technical data related to the management and testing of consent for statistical cookies, where required, including the system-generated technical identifier, the date and time of the choice, the categories of cookies accepted or rejected, and, where applicable, the anonymized or partially masked IP address, are collected solely to record, store, and document the preferences expressed by the user, to allow modification or withdrawal of consent, and to enable us, as Data Controller, to demonstrate proper consent management.

The data collected through statistical cookies is processed, with consent where required, solely to obtain aggregated information on website usage, track the pages visited, and improve content, features, and user experience. The data collected through the following services offered by third parties is processed for the following purposes:

  • Google reCAPTCHA: to protect forms from spam and abusive use, bots;
  • Google Maps: to display interactive maps, locations, markers, and geographic content and related features (e.g., map loading, geolocation/search, route calculation, markers and related content) and thereby provide a higher quality service;
  • Google Analytics: measuring and analyzing site usage statistics, like page views, events, performance, traffic sources, to evaluate the Site’s performance and improve content, features, and user experience as stated in the cookie policy.
c) For the personal data of employees, agents, or representatives of our suppliers and customers collected offline at the start and during the business relationship

to establish a contact and manage the business relationship.

3. LEGAL BASIS FOR PROCESSING

a) For the personal data collected through the contact form, the legal basis is as follows:

our legitimate interest to establish a contact at the request of users interested in ILPEA group, our products, and services.

b) The legal basis for processing technical data and functional cookies is as follows:

necessary for the purpose of our legitimate interest in ensuring the availability, integrity, continuity of the Site’s operation, and the security of the Site and its related IT systems.

The legal basis for processing data related to the management and recording of cookie preferences, including technical identifiers generated by the consent management system, is to comply with legal obligations regarding personal data protection and to allow us, as Data Controller, to document the choices made by the user.

The processing of data collected through statistical cookies, analytics tools, third-party services, embedded content, or other non-technical tracking tools takes place, where required, based on the user’s consent, expressed through the cookie banner and can be changed or revoked at any time via the “Manage Consent” function available in the footer of the Site.

For more information about the cookies and tracking tools used on the Site, and how to manage consent, please refer to the cookie policy available in the footer of the Site.

c)For the personal data of employees, agents, or representatives of our suppliers and customers collected offline at the start and during the business relationship, the legal basis is as follows:

necessary for the performance of a contract between ILPEA and the company for which the data subject works.

We also have a legitimate interest in processing the personal data mentioned in points 3a, 3b, and 3c above to protect our rights, whether in or outside court, or to comply with legal obligations or respond to requests from the competent authorities.

4. Retention period

a) For personal data collected through the contact form

we keep your personal data until your request has been fully processed, and in any case, after 1 year from collection, your personal data will be deleted.

b) For technical data, cookies, and tracking tools used by the Site:

Technical and functional cookies necessary for the proper operation of the Site are stored only for the time strictly needed for the purpose for which they are installed and, in any case, according to the duration indicated in the cookie policy available in the footer of the Site.

Statistical cookies and other non-technical tools, if activated with the user’s consent, are stored according to the durations specified in the cookie policy. Users can modify or withdraw their consent at any time using the “Manage consent” feature available in the footer of the Site.

The technical cookies of the consent management system and the preferences expressed by the user through the cookie banner are stored for 183 days from the last choice made, unless further storage is necessary to comply with legal obligations, respond to requests from the competent authority, or protect a right of the Data Controller.

Any technical data generated by the hosting infrastructure, including any technical logs, is processed only to the extent necessary for security, operational continuity, and the proper technical delivery of the Site, according to the technical and contractual conditions applicable to the hosting service.

c) For the personal data of employees, agents, or representatives of our suppliers and customers collected offline at the start and during the course of the business relationship:

we keep your personal data as long as we need it to manage the business relationship between ILPEA and the company you work for.

5. No disclosure

The three categories of personal data mentioned above, collected both online and offline, will not be disclosed by ILPEA and will not be transferred outside the European Economic Area, except as set out in the following art. 6 (third-party services).

Personal data collected through the contact form may possibly be shared with other companies in the ILPEA group worldwide, solely to allow the group company considered most suitable from a geographical and technical-commercial standpoint to get in touch with you. You can check the Site to see which companies make up the ILPEA group worldwide.

At Group level, there are procedures, guidelines, and standard contractual clauses in place drafted by the European Commission to ensure an appropriate level of protection for personal data that might be transferred to other companies of the ILPEA Group in countries outside the European Economic Area.

6. Technical provider, host of the Site and third-party services used by the Site

This Site has been developed by the agency:

Cherries S.r.l. with registered office at Piazza Monte Grappa 12, 21100 Varese, Italy.

which has been appointed as the ‘data processor’ pursuant to Art. 28 of the G.D.P.R with a specific agreement, in order to safeguard your personal data.

Cherries S.r.l. has technical access to the Site for maintenance, help, and support.

Cherries S.r.l. doesn’t handle personal data on its own, but only accesses it when needed for technical work requested by ILPEA.

Cherries S.r.l. uses the hosting infrastructure provided by Server plan S.r.l (see details herebelow) making the server space needed to host the Site www.ilpea.com available to ILPEA as an integral part of the technical management service of the Site.

Serverplan (Server Plan srl) with registered office at Via Leopardi 22, 03043 Cassino (FR), Italy.

Serverplan provides a multi-domain hosting service and makes the server/data center infrastructure available to Cherries, keeps the website’s MySQL database, and offers services related to the technical availability of the Site. The Site and database data are hosted on Serverplan’s infrastructure with data centers located in Italy.

Third-party services, cookies and tracking tools

The Site may use third-party services, cookies, scripts, or similar technologies for technical, statistical, security purposes, or to display external content.

These tools are described in detail in the cookie policy available in the footer of the Site and are activated, where required, with the user’s consent.

Some of the services listed below operate on servers/data centers different from those used for the Site’s main hosting and may involve transfers and processing of personal data outside the European Economic Area according to the guarantees provided by Articles 44 and following of the G.D.P.R.

  • Name: Google Analytics
    Country: United States / European Union according to the infrastructure and the  configuration of the service.
  • Name: Google LLC – Google reCAPTCHA
    Country: United States / European Union according to the infrastructure and the  configuration of the service.
  • Name: Google Maps API
    Country:United States according to the infrastructure and the configuration of the service.

7. Cookie policy

For more information and details about the cookies used on this Site, please check out our cookie policy in the footer of the Site.

8. Sharing your personal data with third parties

We could share your personal data with third parties only if required by law, by a court order, or in response to a request from a regulatory authority in order to provide information or for an investigation on a public safety issue, as well as any sharing within the ILPEA group as mentioned in art. 5 above. If ILPEA (including the Website) were to be subject to a merger or acquisition by third parties, your personal data could be shared with our advisors and the purchasers.

9. Security

We are committed to the security of your personal data. We take appropriate technical and organizational security measures to limit misuse and unauthorized access to personal data. Access to your personal data is protected: only authorized people can access it. Our security measures are regularly reviewed.

The full IP address feature is blocked so that IPs will only be partially visible.

10. No guarantee for third-party websites

This privacy policy only applies to the Site www.ilpea.com and not to any third-party websites that you might be linked to through links, buttons, or other features on this Site. We can’t guarantee that these third parties will handle your personal data reliably and securely. We recommend that you read the privacy statements of these websites before using them.

11. Social networks

This privacy notice applies only to personal data collected on the Site www.ilpea.com (and offline in the cases described above). When you connect via an icon from our Site to ILPEA’s official profile on social networking platforms (e.g. LinkedIn), you leave our Site and the privacy statements of the respective social network will apply.

12. Changes

We reserve the right to make changes to this notice. Please check it regularly.

13. Your rights regarding your personal data

  • You have the right to know when your personal data is needed, what happens to it, and how long it will be kept;
  • Right of access: you have the right to access your personal data that we have;
  • Right to rectification: you have the right to complete, correct, delete, or block your personal data whenever you want;
  • Right to restrict the processing of your personal data;
  • Right to withdraw consent;
  • Right to data portability: you have the right to request all your data from the Data Controller and transfer it all to another Data Controller;
  • Right to object: you have the right to object to the processing of your personal data at any time.

If you want to exercise your rights, you can either go to the section “Manage Consent” in the footer of the Site or use the special form for requesting the exercise of rights (in Italian), also in the footer of this Site. Please refer to the contact details mentioned in point 16 here below. To view the form in other languages, please go to the “company – certification and policies” section of the Site.

14. Sending a complaint

If you are not happy with how we handle the processing of your personal data, you can send a complaint to the Data Protection Authority (for the form and contact details please see www.garanteprivacy.it).

15. Conflict between versions

In case of conflicts or incongruences between the Italian version of this privacy notice and any other language version, the Italian version shall prevail.

16. Contacts

If you have any questions or want to exercise your rights, please get in touch with us:

Data Controller of your personal data:
Industrie ILPEA S.p.A
Viale Industria 887, 21009 Bardello con Malgesso e Bregano, località Malgesso (VA), Italy

Sito web: https://www.ilpea.com
Email: info_privacy-it@ilpea.com

This English version of this Privacy Notice is a translation drawn up exclusively for the convenience of the User.  In case of conflict between this English version on the one hand and the Italian version of this Privacy Notice on the other hand, the latter shall prevail.

The same applies also to any other versions in languages other than English.

Get in touch!