Privacy Policy english


Tomasino Metalzinco Srl with legal headquarters in Contrada Passo Barbiere in Cammarata (AG), as the data controller (hereinafter “Owner”), informs you, pursuant to art. 13-14 of EU Regulation 679/2016 (hereinafter “GDPR”), that the data collected will be processed in the manner and for the purposes described below:

  1. Object of the treatment 

The Data Controller processes the personal identification data (hereinafter “Data”) provided by you when subscribing to services or, in general, the contractual relationship with the Data Controller. 

  1. Purpose of the treatment 

Your personal data are processed, without your prior consent (Article 6 letter b), c) GDPR), for the sole purposes of management and the execution of pre-contractual and contractual relationships; of the obligations related to administrative and accounting management; the obligations established by laws, regulations or community legislation or imposed by the Authorities; for the protection of the rights of the owner in court and management of any disputes; for the prevention and repression of illegal acts. 

  1. Further purposes of the processing 

The collected data, subject to your free and explicit consent (Article 6 letter a) GDPR), may also be used for the additional purposes indicated below under the terms and conditions specified therein: 

1. to send you promotional material and commercial communications, through both automated (eg e-mail, SMS) and traditional (paper mail) contact methods. 

2. to send you newsletters, through the references you have provided. 

  1. Methods of processing and storage 

The processing will be carried out by means of the operations indicated in art. 4 GDPR and may take place both through IT systems (cloud, internet, intranet, computer) and in paper form (archives). Your data will be stored in the Data Controller’s databases only for the time strictly necessary to achieve the purposes for which they were collected and processed, in accordance with the law and, as specified above, with the exception of cases in which the current legislation does not require the retention of your data for longer periods. For purposes 2.1.a and 2.2.b, the data will be processed until consent is revoked.

  1. Nature of the provision of data and consequences of refusal

The provision of personal identification data is mandatory for the execution of the contractual relationship and the obligations deriving from the fulfillment of the law, regulations or community legislation and any lack of consent referred to  point 2.1 a) and b) will have no effect on the provision of services or purchases.

  1. Access to Data

Your Data will be processed for the aforementioned purposes by employees and / or collaborators of the Data Controller in their capacity as persons in charge of processing and / or internal data processors and / or system administrators; by third parties (for example, suppliers, professionals, banks, affiliates) where they carry out outsourced activities on behalf of the Data Controller, in their capacity as external data processors.

  1. Data communication 

Without your express consent (pursuant to Article 6 letter b), c) GDPR), the Data Controller may communicate your Data to public bodies to comply with the obligations established by laws, regulations or community legislation or imposed by the Authorities, which will process them in their capacity as independent data controllers.

The selected service providers operate through data centers located in the territory of the European Union. Your data will not be transferred to non-EU countries.

  1. Data subject’s rights

At any time you can exercise your rights towards the data controller, pursuant to articles 15-22 of EU Regulation 2016/679, and in particular the rights of access, rectification, integration and, in the cases permitted, the portability of data provided, in addition to obtaining the cancellation, limitation or opposition to the processing of data for legitimate reasons and to oppose the automated decision-making process, including profiling. As well as the right to complain to the Guarantor Authority, by contacting the Owner or the in the following ways:

by sending a registered mail with return receipt to the address of the owner indicated above or by sending an e-mail to 

In order to guarantee the protection of the data subject’s personal information, we may need to request additional specific information, which confirms the identity of the requesting data subject and thus guarantee the right to access the information (or to exercise any of the other rights) only to persons entitled to receive such communications. This is another security measure suitable for the protection of personal data.

The request to access to your personal information (or to exercise one of the above rights) is free. However, if the request is clearly unfounded or excessive we may charge a reasonable fee taking into account the administrative costs incurred to provide the information or refuse to comply with the request in such circumstances.

  1. Data Controller

The Data Controller is:

Tomasino Metalzinco Srl with legal headquarters in Contrada Passo Barbiere in Cammarata (AG)