Privacy Policy

Privacy Notice Regarding the Processing of Personal Data

Pursuant to Article 13 of Regulation (EU) 2016/679, known as the GDPR, this page describes how we process the personal data of users who visit the website www.nuovaomec.it and use the services made available through it.

This privacy policy applies exclusively to this website and does not apply to any external websites, pages, or services accessible via hyperlinks.

Data Controller

The Data Controller is:

Nuova Omec S.r.l.
Via Valle d’Aosta, 42
41049 Sassuolo (MO), Italy
Tax ID and VAT No. 02881970368
Email: info@nuovaomec.it
Phone: +39 0536 1801772

For any inquiries regarding the processing of personal data or the exercise of your rights, you may contact the Data Controller using the contact information provided above.

Types of Data Processed

Browsing Data

During browsing, the computer systems and software procedures used to operate the website collect certain personal data, the transmission of which is implicit in the use of Internet communication protocols.

This data may include:

  • IP address;
  • browser type and device used;
  • operating system;
  • Internet service provider name;
  • pages viewed;
  • date and time of access;
  • URL of the referring page;
  • any codes related to the status of the server’s response;
  • other parameters related to the user’s computing environment.

This data is used to ensure the proper display and functioning of the website, to guarantee its security, to prevent abuse or illegal activities, and to obtain aggregated statistical information about its use.

Data voluntarily provided by the user

The voluntary submission of requests via the contact form or through the email addresses published on the website results in the collection of the data provided by the user.

The following are examples of items that may be processed:

  • first and last name;
  • employer;
  • email address;
  • phone number;
  • information contained in the message;
  • any other information provided voluntarily.

Users are asked not to disclose data belonging to special categories—such as information regarding health, religious beliefs, political opinions, or union membership—unless strictly necessary.

Purposes and Legal Bases for Data Processing

Personal data may be processed for the following purposes.

Website Operation and Security

Browsing data is processed to enable access to the website, ensure its proper functioning, protect IT systems, and prevent fraud, abuse, or unauthorized access.

The legal basis is the Data Controller’s legitimate interest in ensuring the functionality and security of the website, pursuant to Article 6(1)(f) of the GDPR.

Managing Contact Requests

The information provided through the form or via email is used to respond to requests for information, assistance, quotes, or business inquiries.

The legal basis is the implementation of precontractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR.

When the request is not of a pre-contractual nature, the processing is based on the Data Controller’s legitimate interest in responding to the communications received, pursuant to Article 6(1)(f) of the GDPR.

Compliance with Regulatory Requirements

Data may be processed when necessary to comply with obligations established by law, regulations, or directives from the competent authorities.

The legal basis is compliance with a legal obligation to which the Data Controller is subject, pursuant to Article 6(1)(c) of the GDPR.

Statistical Analysis of the Website

With the user’s consent, the website uses Google Analytics 4 to collect statistical information on the number of visits, the pages viewed, and how the website is used.

The legal basis is the data subject’s consent, pursuant to Article 6(1)(a) of the GDPR.

Consent is optional and may be denied or revoked at any time through the cookie preferences management panel. Failure to provide consent does not prevent you from browsing the site normally.

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This service allows the Data Controller to understand, through statistical data, how users interact with the website. Google Analytics is activated only after the user has given consent via the cookie banner.

The information collected may include data related to the device, the browser, the pages visited, and user interactions. The service is configured to limit data collection to what is necessary for statistical purposes.

For more information, please see Google’s Privacy Policy.

Users can modify or withdraw their consent at any time by clicking the “Manage Cookie Preferences” link available on the website.

Methods of Processing and Security Measures

Personal data is processed using computerized and telecommunications tools in accordance with the principles of lawfulness, fairness, transparency, relevance, and data minimization.

The Data Controller implements technical and organizational measures appropriate to the level of risk, with the aim of protecting the data from loss, destruction, alteration, unauthorized disclosure, or accidental or unlawful access.

The data are not subject to automated decision-making processes that produce legal effects or significantly affect the data subject.

Nature of Data Provision

Providing the information requested in the contact forms is optional. However, failure to provide the information marked as required may make it impossible to respond to your request.

Consent to the use of analytical cookies is optional. If you decline, the website will remain fully accessible and usable.

Shelf Life

Personal data is retained for only as long as is strictly necessary to fulfill the purposes for which it was collected.

Specifically:

  • The data contained in contact requests are retained for as long as necessary to handle the communication and, as a general rule, for no longer than 24 months after the request is resolved;
  • If the request results in a contractual relationship, the data will be retained for the duration of the relationship and thereafter for the period required by administrative, accounting, tax, and legal obligations;
  • Technical data and security logs are retained for as long as necessary to ensure the security of the site and to investigate any anomalies or abuses;
  • Data collected through Google Analytics 4 is retained for a maximum of 14 months, unless a different retention period is required for documented reasons;
  • Data processed on the basis of consent are retained until such consent is revoked, without prejudice to processing carried out prior to the revocation.

Data may be retained for a longer period when necessary to establish, exercise, or defend a right of the Data Controller in court.

Recipients of the Data

Personal data may be disclosed, to the extent necessary, to:

  • staff and personnel authorized by the Data Controller;
  • IT service providers;
  • hosting provider;
  • site maintenance and safety managers;
  • providers of statistical analysis services;
  • consultants and professionals;
  • public authorities or other entities to which disclosure is required by law.

Vendors that process personal data on behalf of Nuova Omec S.r.l. are designated, where necessary, as data processors pursuant to Article 28 of the GDPR.

Personal information is not disclosed.

Transfer of Data Outside the European Economic Area

Some technology providers may process personal data in countries outside the European Economic Area.

In such cases, the transfer is carried out in accordance with Articles 44 et seq. of the GDPR, based on an adequacy decision by the European Commission, the recipient’s adherence to a recognized framework, or through the adoption of standard contractual clauses and any additional security measures.

Cookies

This website uses technical cookies necessary for its operation and, with your consent, cookies or similar tools for statistical analysis.

Detailed information about the cookies used, their duration, their providers, and how to change your preferences is available in the website’s Cookie Policy.

Rights of the Data Subject

In the cases provided for by the GDPR, the data subject may exercise the following rights:

  • to obtain confirmation as to whether or not personal data is being processed;
  • access your personal data;
  • request that they be corrected or updated;
  • request that it be deleted;
  • to obtain a restriction on processing;
  • object to processing based on legitimate interests;
  • to receive the data in a structured, commonly used, and machine-readable format, where applicable;
  • withdraw consent at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal;
  • file a complaint with the relevant supervisory authority.

Requests may be sent to info@nuovaomec.it. The Data Controller may request the information necessary to verify the identity of the requester.

The data subject also has the right to file a complaint with the Data Protection Authority, pursuant to Article 77 of the GDPR, or to bring the matter before the competent judicial authority.

Links to External Sites

This website may contain links to websites or services operated by third parties. Nuova Omec S.r.l. does not control these websites and is not responsible for their practices regarding the processing of personal data.

Before using third-party services, users are encouraged to review the relevant privacy policies.

Changes to the Privacy Policy

The Data Controller reserves the right to modify or update this Privacy Policy to bring it into compliance with regulatory, technical, or service-related changes affecting the services offered through the website.

Any changes will be posted on this page. We therefore encourage users to check this page periodically.

Last updated: August 26, 2026

This privacy notice must be accompanied by a consistent Cookie Policy and a cookie banner that prevents Google Analytics from being activated before consent is given. The content complies with the informational requirements set forth in Article 13 of the GDPR and referenced by the Italian Data Protection Authority, but it must be verified against the final technical configuration of the new website.