Privacy

Pursuant to Article 13 of the EU Regulation 2016/679 (hereinafter the "Regulation"), Centrico S.p.A. (hereinafter the "Company" and/or the "Data Controller"), provides you with the following information regarding the characteristics of the processing it carries out on your personal data.

1. 1) Who is the Data Controller of your personal data?

   The Data Controller of your personal data is Centrico S.p.A. with headquarters at Piazza Gaudenzio Sella, No. 1, 13900, Biella.

2. 2) How to contact the Data Protection Officer?

   The Data Protection Officer ("DPO") can be contacted at the following addresses:

   • - postal address: Piazza Gaudenzio Sella 1, Biella
   • - e-mail address: dpo@sella.it

3. 3) What are the categories of personal data processed?

   The Company may process the following personal data:

   • • data collected through the completion of the form present in the "Get in Touch" section on the website.

     With reference to the processing of your personal data carried out through that form present on the website, please refer to the "Privacy Policy - Spontaneous Sending of Information" linkable through the "Privacy" section available at the bottom of the home page of the website;

   • • data collected through the completion of the form present in the "Work with us" section on the website.

     With reference to the processing of your personal data carried out through such form present on the website, please refer to the "Privacy Policy - Recruitment" linkable through the "Privacy" section available at the bottom of the home page of the website;

   • • navigation data.

     The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes, but is not limited to, IP addresses, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data are used for the sole purpose of obtaining statistical information on the use of the website and to check its correct functioning. The aforementioned data could also be used to ascertain responsibility in case of computer crimes to the detriment of the website, other connected or related sites;

   • • data collected through cookies.

     With reference to the processing of your personal data carried out through cookies and other tracking tools on the website, please refer to the "Cookie policy" linkable through the "Privacy" section available at the bottom of the website home page.

4. 4) On what legal basis and for what purposes does the Company process your personal data?

   Your personal data is processed by the Data Controller in order to:

   1. a) enable you to navigate the website;
   2. b) manage the security of the website, ensure the security of the network, systems and information managed by it;
   3. c) follow up pre-contractual measures with the Company;
   4. d) to fulfill any obligations under applicable laws, regulations or EU legislation.

   In relation to purposes a) and c), the legal basis legitimizing the processing is the execution of the contract and/or pre-contractual measures to which you are a party. The provision of your personal data for the aforementioned purposes is necessary because a refusal to do so would not allow the Company to make it possible for you to navigate the website and/or to follow up on any pre-contractual measures in place.

   In relation to purposes b), the legal basis for processing is the Company's legitimate interest in ensuring the security of the network, systems and information it manages as well as in analyzing the level of satisfaction with its website. The provision of your personal data for purpose b) is necessary as a refusal to do so would not allow the Company to make it possible for you to browse the website.

   In relation to purpose d), the legal basis legitimizing the processing is the need for the Company to fulfill a legal obligation. The provision of your personal data for the above purpose is necessary because a refusal to do so would not allow the Company to fulfill its legal obligations.

5. 5) To whom may your personal data be disclosed?

   Your personal data may be known to the Company's personnel authorized to process them by reason of the performance of their work duties.

   In addition, the Company may disclose your personal data to third parties operating as Data Processors, specifically appointed pursuant to Article 28 of the Regulations, such as by way of example but not limited to service management companies and IT systems.

   Finally, your personal data may be shared with authorities and/or entities that act as autonomous data controllers.

6. 6) Can your personal data be transferred to countries outside the European Economic Area?

   The transfer of your personal data outside the European Economic Area will take place to third countries for which the European Commission has recognized that they provide an adequate level of protection or where there are adequate safeguards or the specific exceptions provided for in the Regulation.

7. 7) How long is your personal data kept?

   The Company stores data in a form that allows the identification of data subjects for a period of time necessary to achieve the specific purposes for which they are processed, in compliance with contractual and/or regulatory obligations.

8. 8) What are your rights?

   We inform you that you, as a data subject, may exercise the following rights with regard to the processing of your personal data:

   1. a. right of access: right to obtain confirmation from the Data Controller as to whether or not any processing of your personal data is taking place, and if so, to obtain access to the same (provided that this does not infringe the rights of others);
   2. b. right to rectification: right to obtain from the Controller the rectification of your inaccurate personal data without undue delay, as well as the integration of incomplete personal data, including by providing a supplementary statement;
   3. c. right to erasure ("oblivion"): right to obtain from the Data Controller the erasure of your personal data without undue delay. The Company is obliged to proceed with the aforementioned deletion if, by way of example only:
      1. i. Your personal data are no longer necessary with respect to the purpose of the processing;
      2. ii. Your personal data have been processed unlawfully;
      3. iii. Your personal data must be deleted in order to comply with a legal obligation;
   4. d. Right to restriction of processing: right to obtain from the Data Controller the restriction of processing. The Company is obliged to proceed with the aforementioned restriction if:
      1. i. the accuracy of your personal data is disputed (for the period necessary for the Controller to verify the accuracy of such personal data);
      2. ii. the processing is unlawful and you have objected to the deletion of your personal data and requested its limitation;
      3. iii. the personal data (although no longer necessary for the purposes of processing) is needed by you for the establishment, exercise or defense of a legal claim;
      4. iv. checks are being made as to whether the interests of the Company prevail if you have exercised your right to object as set out below;
   5. e. right to data portability: right to receive in a structured, commonly used and machine-readable format your personal data and to transmit such data to another Data Controller, only for cases where the processing is based on consent or contract and only for data processed by electronic means;
   6. f. Right to object to processing: for reasons related to your particular situation, you have the right to object at any time to the processing of personal data which have as their legal basis a legitimate interest of the Controller, except where the Company demonstrates the existence of compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims;

   7. g. right to lodge a complaint with a Supervisory Authority: without prejudice to any other administrative or judicial remedy, if you consider that the processing operations concerning you are in breach of the Regulation, you have the right to lodge a complaint with the Supervisory Authority of the Member State in which you reside or habitually work, or of the State where the alleged breach has occurred.

      To exercise the above rights, you can submit a request to the following addresses:

      • - mailing address: Piazza Gaudenzio Sella, No. 1, 13900, Biella;
      • - e-mail addresses: privacy@centrico.tech

   The Company will provide information regarding the action taken regarding the specific request without undue delay and at the latest within one month of its receipt.

   In any case, you can contact the Company and/or the DPO at the above-mentioned addresses should you wish to have more details and/or need clarifications with respect to the processing carried out on your personal data.

   If the exercise of the rights listed above may result in actual and concrete prejudice to the interests protected under the provisions on money laundering, pursuant to Article 2-undecies Privacy Code, the scope of such rights and certain related obligations on the part of the Data Controller, may be limited. In such circumstances, the exercise of the same rights may be delayed, limited or excluded, for such time and to the extent that this constitutes a necessary and proportionate measure. If the conditions are met, a reasoned notice will be sent to you without delay.

   Last updated: 30/04/2024

Pursuant to Article 13 of the EU Regulation 2016/679 (hereinafter the "Regulation"), Centrico S.p.A. (hereinafter the "Company" and/or the "Data Controller"), provides you with the following information regarding the characteristics of the processing it carries out on your personal data.

1. 1) Who is the Data Controller of your personal data?

   The Data Controller of your personal data is Centrico S.p.A. with headquarters at Piazza Gaudenzio Sella, No. 1, 13900, Biella.

2. 2) How to contact the Data Protection Officer?

   The Data Protection Officer ("DPO") can be contacted at the following addresses:

   • - postal address: Piazza Gaudenzio Sella 1, Biella
   • - e-mail address: dpo@sella.it

3. 3) What are the types of cookies processed? On what legal basis and for what purposes does the Company process them?

   A cookie is a small piece of data (text file) that a website, when visited by a user, asks the browser to store on the device to remember his or her information, such as preferred language or login information. These cookies are set by the Company and referred to as first-party cookies. The Company also uses third-party cookies, i.e., cookies from a domain other than the website you are visiting.

   You can view more details regarding the first- and third-party cookies used by the website in the "Change Preferences" section of the banner present when you first log in or at any time thereafter by logging into the "Privacy" section of the website.

   The details of the categories of cookies used by this website are represented below.

   Technical (strictly necessary) cookies

   Technical or necessary cookies are used for the sole purpose of making it possible for you to navigate the website and enable you to use its features; therefore, their use is necessary and does not require your consent.

   Cookie Subgroup	Cookie	Cookie used	Duration
   centrico.tech	_ga	First party	730 days
   centrico.tech	_gat_gtag_xxxxxxxxxxxxxxxxxxxxxxxxxxx	First party	0 days
   centrico.tech	_gat_UA-	First party	0 days
   centrico.tech	_gid	First party	1 day
   centrico.tech	eupubconsent	First party	2914153 days
   centrico.tech	OptanonAlertBox	First party	365 days
   centrico.tech	OptanonConsent	First party	365 days
   centrico.tech	JSESSIONID	First party	Session
   codepen.io	__cf_bm	Third party	0 days
   codepen.io	__cfduid	Third party	30 days
   codepen.io	__cfruid	Third party	Session
   bootstrapcdn.com	__cfduid	Third party	30 days
   cookielaw.org	__cfduid	Third party	30 days
   medium.com	__cfduid	Third party	30 days
   medium.com	__cfrduid	Third party	Session
   medium.com	uid	Third party	365 days
   onetrust.com	__cfduid	Third party	30 days

   Managing cookies through browser configuration

   Although blocking cookies may result in the inability to enjoy certain features of the site you visit, you can also manage your cookie preferences through the settings of the browser used by your device.

   You can select the browser you use below for details on how to change these settings:

   • • Firefox
   • • Internet Explorer
   • • Edge
   • • Google Chrome
   • • Safari

4. 4) To whom may your personal data be disclosed?

   Your personal data may be known to the Company's personnel authorized to process them by reason of the performance of their work duties.

   In addition, the Company may disclose your personal data to third parties acting as Data Processors, specifically appointed pursuant to Article 28 of the Regulations, such as by way of example but not limited to service management companies and IT systems.

   Finally, your personal data may be shared with authorities and/or entities as well as with third-party cookie-holding companies operating as autonomous data controllers.

5. 5) Can your personal data be transferred to countries outside the European Economic Area?

   The transfer of your personal data outside the European Economic Area will take place to third countries for which the European Commission has recognized that they provide an adequate level of protection or where there are adequate safeguards or the specific exceptions provided for in the Regulation.

6. 6) How long is your personal data kept?

   The Company stores data in a form that allows the identification of data subjects for a period of time necessary to achieve the specific purposes for which they are processed, in compliance with contractual and/or regulatory obligations. The duration of individual cookies is specified in the table above.

7. 7) What are your rights?

   We inform you that you, as a data subject, may exercise the following rights regarding the processing of your personal data:

   1. a. right of access: right to obtain from the Data Controller confirmation as to whether or not any processing of your personal data is taking place, and if so, to obtain access to the same (provided that this does not infringe the rights of others);
   2. b. right to erasure ("oblivion"): right to obtain from the Data Controller the erasure of your personal data without undue delay. The Company has an obligation to proceed with such deletion if, but not limited to:
      1. i. Your personal data are no longer necessary with respect to the purpose of the processing;
      2. ii. Your personal data have been processed unlawfully;
      3. iii. Your personal data must be deleted in order to comply with a legal obligation;
   3. c. Right to restriction of processing: right to obtain from the Data Controller the restriction of processing. The Company is obliged to proceed with the aforementioned restriction if:
      1. i. the accuracy of your personal data is disputed (for the period necessary for the Controller to verify the accuracy of such personal data);
      2. ii. the processing is unlawful and you have objected to the deletion of your personal data and requested its limitation;
      3. iii. the personal data (although no longer necessary for the purposes of processing) is needed by you for the establishment, exercise or defense of a legal claim;
      4. iv. checks are being made as to whether the interests of the Company prevail if you have exercised your right to object as set out below;
   4. d. right to data portability: right to receive in a structured, commonly used and machine-readable format your personal data and to transmit such data to another Data Controller, only for cases where the processing is based on consent or contract and only for data processed by electronic means;
   5. e. Right to lodge a complaint with a Supervisory Authority: without prejudice to any other administrative or judicial remedy, if you believe that the processing concerning you is in violation of the Regulation, you have the right to lodge a complaint with the Supervisory Authority of the Member State in which you usually reside or work, or of the State where the alleged violation occurred.

   To exercise the above rights, you can submit a request to the following addresses:

   • - mailing address: Piazza Gaudenzio Sella, No. 1, 13900, Biella;
   • - e-mail addresses: privacy@centrico.tech;

   The Company will provide information regarding the action taken regarding the specific request without undue delay and at the latest within one month of its receipt.

   In any case, you can contact the Company and/or the DPO at the above-mentioned addresses should you wish to have more details and/or need clarifications with respect to the processing carried out on your personal data.

   Should the exercise of the rights listed above result in an actual and concrete prejudice to the interests protected under the provisions on money laundering, pursuant to Article 2-undecies Privacy Code, the scope of such rights and certain related obligations incumbent on the Data Controller may be limited. In such circumstances, the exercise of the same rights may be delayed, limited or excluded, for such time and to the extent that this constitutes a necessary and proportionate measure. If the conditions are met, a reasoned notice will be sent to you without delay.

   Last updated: 30/04/2024

Pursuant to Art. 13 of the EU Regulation 2016/679 (hereinafter referred to as the 'Regulation'), we inform you about the characteristics of the processing of your personal data, that you decide to spontaneously send us via the form “Get in touch”. In particular, information is provided here on:

1. 1) Who is the Data Controller?

   The Data Controller of your personal data corresponds to the Company with which you will be in contact. You will find details of the companies concerned with all the necessary contact information in the table in Article 8).

2. 2) How can the Data Protection Officer be contacted?

   The Data Protection Officer (hereinafter also referred to as “DPO”) may be contacted in relation to the Company that is processing your personal data and thus acts as Data Controller, at the contact details indicated in the table in Article 8).

3. 3) What are the categories of personal data being processed?

   The personal data that the Company may process are:

   • - data collected the form in the “Get in touch”.

   The optional, explicit and voluntary sending of e-mail to the addresses indicated on this Website entails the subsequent acquisition, by the Company chosen as the addressee, of the sender's address, which is necessary to reply to the request, and any other personal data included in the message. Personal data must be only common data. Should there be any special data and/or data relating to criminal convictions and offences, the Company cannot consider your request.

4. 4) On what legal basis and for what purposes does the company process your personal data?

   The processing of your personal data is carried out by the Controller in order to respond to your contact request.

   The legal basis legitimising the processing is the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract. The provision of your personal data is necessary and a refusal to provide them would not allow the Company to respond to your request.

5. 5) To whom may your personal data be disclosed?

   Your personal data may be disclosed to the personnel of the Company authorised to the processing by reason of the performance of their work duties.

   The Company may also disclose your personal data to third parties who act as Data Processors, specifically appointed pursuant to Article 28 of the Regulation, such as, by way of example but not limited to, service management companies and IT systems.

   Your personal data may also be shared with authorities and/or entities that act as autonomous data controllers.

6. 6) Can your personal data be transferred to countries outside the European Economic Area?

   We inform you that the Data Controller doesn't transfer your personal data to countries outside the European Union, unless you voluntarily contact the Company Centrico India Ltd as mentioned in paragraph 1 of this Privacy Policy.

7. 7) How long are your personal data stored?

   The Company stores the data in a form that allows the identification of the data subjects for as long as is necessary to achieve the specific purposes for which they are processed, in compliance with contractual and/or regulatory obligations.

8. 8) What are your rights?

   We inform you that you, as an interested party, may exercise the following rights in relation to the processing of your personal data:

   1. a) right of access: right to obtain from the Data Controllers confirmation as to whether or not any processing of your personal data is taking place and, if so, to obtain access to the same (provided that this does not infringe the rights of others), in accordance with Article 15 of the Regulation;
   2. b) right of rectification: the right to obtain from the Data Controller the rectification of your inaccurate personal data without undue delay, as well as the integration of your incomplete personal data, also by providing a supplementary declaration;
   3. c) the right of cancellation ("oblivion"): the right to obtain from Data Controllers the removal of your personal data without undue delay, in accordance with Article 17 of the Regulation and, by way of example but not limited to, if:
      1. i. your personal data are no longer necessary in relation to the purpose of the processing;
      2. ii. Your personal data have been processed unlawfully;
      3. iii. Your personal data must be deleted in order to comply with a legal obligation;
   4. d) right to restriction of processing: the right to obtain from Data Controllers the restriction of processing in cases where:
      1. i. you contest the accuracy of your personal data (for the period necessary for the Data Controllers to verify the accuracy of such personal data);
      2. ii. if the processing is unlawful and you object to the deletion of your personal data and have requested its restriction;
      3. iii. if your personal data (although no longer necessary for the purposes of the processing) is needed by you for the establishment, exercise or defence of a legal claim;
      4. iv. whether the overriding interests of the Data Controller are being verified if you have exercised your right to object as set out below;
   5. e) the right to data portability: the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit such personal data to another Data Controller, only for cases where the processing is based on consent (pursuant to Art. 6(1)(a) or Art. 9(2)(a) of the Regulation) or on contract and only for personal data processed by electronic means;
   6. f) right to object to processing: on grounds relating to your particular situation, the right to object at any time to the processing of personal data which have as their legal basis a legitimate interest of the individual Data Controller, unless they can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
   7. g) right to lodge a complaint with a Supervisory Authority: without prejudice to any other administrative or judicial remedy, if you consider that the processing operations concerning you are in breach of the Regulation, you have the right to lodge a complaint with the Supervisory Authority of the Member State in which you reside or habitually work, or of the State where the alleged breach has occurred;

   To exercise your rights and for any information regarding the processing of your data, please send your request to the following contacts:

   Controller	Registered office	e-mail
   Centrico S.p.A.	Piazza Gaudenzio Sella n. 1, 13900 Biella (BI)	privacy@centrico.tech
   Centrico Selir S.r.l.	Str. Basarabiei nr. 55, Bl. A16, sc. 2, Galati	privacy@selir.com; DPO@Sella.it
   Centrico India Ltd.	Fourth Floor, Block I, Tyche Towers, 2, MGR Salai, Kandanchavadi, Chennai, India, 600096.	chennai.info@centrico.tech

   The Company will provide information on the action taken with respect to the specific request without undue delay and at the latest within one month of receipt thereof.

   In any event, you may contact the Company and/or the DPO at the above-mentioned addresses should you require further details and/or need clarification regarding the processing of your personal data.

   Last updated: 31/08/2024