Privacy

Privacy policy

Update 05 12 2022

Dear User, thank you for visiting our site.

NEWFORM SPA has always given close attention to the issues of protection of the personal data it processes, not only because it is subject to specific legislation but above all because data protection is a fundamental asset of our Group. It is therefore for these reasons that we are constantly committed to providing our Users with an Internet experience in full respect and protection of their privacy.

Why this notice

Below we will describe how Newform manage the site with reference to the processing of personal data of users who consult it. This information is given to those who interact with the web services directly provided by NEWFORM SPA accessible electronically from the address: https://www.newform.it, in compliance with GDPR (UE General Regulation 2016/679) .

The Privacy Policy and Standards used by NEWFORM SPA for the protection of personal data are based on the following principles:

1) PRINCIPLE OF LIABILITY

The processing of personal data is managed over time by specific roles and responsibilities identified within the company organisation.

2) PRINCIPLE OF TRANSPARENCY

At the time of any provision of data, the data subject is provided with a brief but complete information notice, in accordance with the provisions of the GDPR.

3) PRINCIPLE OF RELEVANCE OF THE COLLECTION

Personal data is processed lawfully and fairly; they are registered for specific, explicit and legitimate purposes; the purposes of the processing are pertinent and not excessive; are kept for the time necessary for the purposes of collection.

4) PRINCIPLE OF PURPOSE OF USE

The purposes of the processing of personal data are made known to the interested parties at the time of collection. Any new data processing, if unrelated to the stated purposes, is activated after new information to the data subject and any request for consent, when required by the GDPR.

5) VERIFIABILITY PRINCIPLE

Personal data is accurate and updated over time. They are also organized and stored in such a way that the data subject is given the opportunity to know, if he wishes, which data has been collected and recorded, as well as to check its quality and request its correction, integration, cancellation for violation of the law or opposition to the processing and to exercise all the other rights provided for by the GDPR at the addresses indicated in the information on our site

6) PRINCIPLE OF SECURITY

Personal data is protected by technical, IT, organisational, logistical and procedural security measures, against the risks of destruction or loss, even accidental, and of unauthorized access or unauthorized processing. These measures are periodically updated on the basis of technical progress, the nature of the data and the specific characteristics of the processing, constantly monitored and verified over time.

The third parties who carry out data processing activities on behalf of NEWFORM SPA are designated as Data Processors (Article 28 of the GDPR) and are contractually bound to comply with the measures for the security and confidentiality of the processing. The identity of these third parties is disclosed to users. With the consent of the interested parties, if required by law, and in any case with adequate information relating the various purposes, personal data may be communicated to third parties, public and private, unrelated to NEWFORM SPA who will treat them as independent data controllers. NEWFORM SPA is in no way responsible for the processing of personal data carried out by third party data controllers. NEWFORM SPA also assumes no responsibility for the rules and methods of processing personal data on other websites, which can be reached from our pages through links and cross-references or on the contents of any email services, web spaces, chat forums provided to users by third data controllers. The processing activities connected to the web services offered by this web site take place at the NEWFORM SPA offices or at the offices of the external data processors designated and are handled by persons in charge of the processing, in charge of managing the requested services, marketing activities - where requested by the 'user -,data retention activities and occasional maintenance operations.

To whom your data may be disclosed

The personal data provided may be communicated to third parties to fulfill legal obligations, in execution of orders from public authorities legitimated to do so or even to assert or defend a right in court. If necessary in relation to particular services or products requested, personal data may be communicated to third parties who perform, as independent data controllers, functions strictly connected and instrumental to the provision of services or supply of products. Without the provision of data, these services and products could not be provided. Personal data will not be disclosed unless the requested service requires it.

Types of data collected, purposes and methods of processing

Only with the express consent of the user in accordance with the law, analysis and profiling activities relating to purchasing and professional choices are carried out with electronic tools in order to improve the offer of services and commercial information, direct sales, research market on products and services in accordance with the interests of users. Personal data will also be processed for sending commercial and promotional information, direct sales, market research on products, services and for marketing activities, directly by the controller or on behalf of third-party companies. The processing for marketing purposes will take place using traditional tools (paper mail) and through the use of remote communication techniques, such as telephone, e-mail, text messages. The provision of data for this purpose is optional and the processing requires your consent.

With your consent, analysis activities of navigation data and purchase and professional choices ("profiling") are carried out with electronic tools in order to improve the marketing of NEWFORM SPA. Without consent to profiling activities would make it not possible to improve the marketing offer in order to make it conform to the interests of users.

The types of personal data collected and processed on the NEWFORM SPA website are those necessary for the provision of the various services provided. The data collected is processed using paper, automated and telematic methods and with logic strictly related to the purposes of the processing. Your contact details may also be used to offer you the services. If you do not express your consent to the use of e-mail and telephone for purposes of advertising information or direct sales or interactive commercial communication, these tools will not be used for this purpose. Specific information will be reported on the pages of the site prepared for the possible provision of personal data. Any voluntary sending of e-mails to the addresses indicated on the site involves the acquisition of the sender's address as well as any other information contained in the message; such personal data will be used for the sole purpose of performing the service or provision requested.

It is useful to know that the site's software procedures acquire, during their normal operation, some personal data (navigation data) whose transmission is implicit in the use of Internet communication protocols. Although this information is not intended to be associated with identified users, by their nature, if associated with other data held by third parties (e.g. your internet service provider), they could allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URL notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the user's IT environment. These data are used only for the purpose of anonymous statistics on the use of the site and to check its correct functioning.

NEWFORM SPA and, depending on the service requested, the designated Managers keep, for a limited period in accordance with the law, the tracing (LOG) of the connections/browsing carried out to respond to any requests from the judicial authority or other public body entitled to request the tracing to ascertain any liability in the event of computer crimes.

The provision of data

Apart from what specified for navigation data, the user is free to provide or not provide the personal data requested in the service registration forms. On these forms, however, some data can be marked as mandatory; it must be understood that such data are necessary for the provision of the requested service. If these data are not provided, the requested service cannot be provided and the connected opportunities cannot be used.

At the time of any provision of data, the data subject is provided with information containing all the provisions compliant with GDPR. The data subject is therefore called to express his informed, free consent, expressed in a specific and documented form. If the provision of personal data takes place in successive stages, additions to the information already provided previously and new consents to the processing may be provided.

Security measures adopted to protect the collected data

NEWFORM SPA uses "secure" architectures and technologies to protect personal data against undue disclosure, alteration or improper use. The protections activated in respect of personal data aim, in particular, to minimize the risk of destruction or loss, even accidental, of data, unauthorized access or processing activity that is not permitted or does not comply with the purposes of the collection. Periodic "Risk Analysis" activities are conducted to verify compliance with the defined Standards and possibly to adopt new security measures following organizational changes and technological innovations or changes in the type of data collected. The security measures are constantly monitored and periodically verified. The subjects to whom the personal data refer have the right at any time to exercise their rights as required by GDPR. Requests should be sent to the e-mail address privacy@newform.it or to the specific contact details indicated in the information provided to users at the time of any collection of personal data.

Privacy Information

To Customers e Suppliers

Update 05 12 2022

Who processes your data. Your data is processed by NEWFORM SPA as "Data Controller". As requirement as Article 13 of EU Regulation 2016/679 concerning the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data, we provide you with information regarding our identification data as follows: NEWFORM SPA, Via Marconi 25/A - Serravalle Sesia (VC), VAT number 01775520024

What types of data we process. We process the data and information supplied by you or in any case originating in the context of the execution of the contractual or pre-contractual relationship on behalf of NEWFORM SPA such as: identification data (name, denomination, VAT number, tax code, pec, addresses and contacts), bank details, economic agreements, payments and payment methods, invoicing, object of the contract and related personal documentation (description of goods or services purchased, private home photographs, floor plans), payment status, communications.

For what purposes we process your data. The personal data you provide or in any case originated in the context of the execution of the contractual or pre-contractual relationship will be used to carry out the activities necessary for the following purposes: carrying out activities related to administrative and accounting, financial, commercial, after-sales, debt collection document retention.

Furthermore, your data may be processed for the protection of rights in the event of litigation, for statistical analysis and for monitoring the quality of services. Your data will also be processed for the purpose of fulfilling obligations established by laws, regulations and/or community regulations, or by supervisory and control bodies or other legitimate authorities.

Why we can process your data (principle of lawfulness). The data processing is lawful based on processing necessary for the performance of a contractual or pre-contractual relationship (identification data, economic agreements, bank details, payments and payment methods, object of the contract and related documentation) and to fulfill legal obligations (invoicing, accounting records).

Your consent is required for the data processing aimed at sending NEWFORM SPA newsletters, sector or company-related news (e.g. event advertising).

NEWFORM SPA will process your data for the purposes of debt collection, IT security activities, quality system management and document retention, for sending promotional communications on products and services that are similar or better than those purchased by you or to which you have expressed interest, pursuing legitimate interests of controller which will not prevail over your interests or your rights and freedoms with regard to the processing of personal data, as well as the free movement of such data.

How we treat your data. Your data is processed in electronic and non-electronic form and through management information systems. Your data can only be accessed by authorized parties who are adequately trained and informed about their duties and the activities they are permitted to use on your data. All subjects authorized to process data on behalf of NEWFORM SPA (data processors) are recipients of instructions and tasks given by means of a specific designation agreement.

To whom your data may be disclosed. Your personal data will be known by the employees and collaborators of the NEWFORM SPA company who will operate as subjects authorized to process and/or responsible for the processing. Your personal data will not be communicated and disseminated externally, except for the obligations deriving from the law. In case of necessity, these data by the Data Controller could be communicated to third parties and in particular, by way of simplification, to the following categories:

a) entities that provide services for the management of the owner's IT system;

b) individuals who provide professional legal and/or judicial consultancy services;

c) supervisory and control authorities and bodies.

d) to other companies that carry out part of the processing activities and/or activities connected and instrumental to them on behalf of the Data Controller, and which will be appointed for this purpose as data processors pursuant to art. 28 of the GDPR;

The subjects belonging to the categories listed above operate, in some cases, in total autonomy as separate Data Controllers, in other cases, as Data Processors specifically appointed by the company NEWFORM SPA in compliance with Article 28 of the GDPR. The complete and updated list of third parties to whom your personal data may be communicated will be available at the headquarters in Via Marconi 25/A - Serravalle Sesia (VC).

Transfer of your personal data extra UE. Your personal data are not transferred outside the European Union, but in any case they may be transferred outside the European Union only in the presence of an adequacy decision by the European Commission or other adequate guarantees of a contractual or contractual nature to be provided by the owners involved (including Binding Corporate Rules - BCRs, and Model Contractual Clauses).

How your data will be stored and how long. NEWFORM SPA will keep your data in a form that allows identification of the data subject for a period of time not exceeding the achievement of the purposes for which the data were collected and in any case until you revoke your consent. Once this period has elapsed, NEWFORM SPA will proceed with the cancellation of your data with the exception of those strictly necessary for the other purposes indicated above. At any time you can request the modification of your data regulated by this information by exercising the rights referred to in the following paragraph.

What are your rights with regard to the processing of personal data, as well as the free movement of such data. In relation to the processing activities described in this Information, as a data subject you will be able, under the conditions set out in the GDPR, to exercise the rights established by articles 15 to 22 of the GDPR and, in particular, the following rights:

right of access: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, obtain access to your personal data - including a copy of the same right to rectification: the right to obtain the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
right to cancellation (right to be forgotten): right to obtain the cancellation of personal data concerning you, when: the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; you have withdrawn your consent and there is no other legal basis for the processing; You have successfully objected to the processing of your personal data; the data has been processed unlawfully, the data must be deleted to fulfill a legal obligation; the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR.
The right to erasure does not apply to the extent that the processing is necessary for compliance with a legal obligation or for the performance of a task performed in the public interest or for the establishment, exercise or defense of a legal claim;
right to request restriction of processing: right to obtain restriction of processing, when: the data subject disputes the accuracy of personal data; the processing is unlawful and the data subject opposes the cancellation of personal data and requests restriction to use; personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
right to object: right to object to the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing;
right to data portability: the right to receive, in a structured format, in common use and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly by the company NEWFORM SPA to another holder if this is technically feasible;
right to lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM).

How you can exercise your rights. NEWFORM SPA adopts all the appropriate technical and organizational measures necessary to facilitate the exercise of your rights. The methods for exercising your rights are established, in general, in the articles 11 and 12 of EU regulation 2016/679. To exercise your rights under Articles from 15 to 22 of EU Regulation 2016/679 you can send a specific written request addressed to: NEWFORM SPA, Via Marconi 25/A - Serravalle Sesia (VC), VAT number 01775520024. If it is easier for you, you can also send an email to privacy@newform.it indicating the reasons for your request. Alternatively, if you do not have an e-mail address or do not have access to a web network, you can contact us at the following telephone number: 0163452011

How soon we respond to requests to exercise your rights. We will respond to your requests in written form also through electronic tools that facilitate accessibility. Our response will be "intelligible", but also concise, transparent and easily accessible, as well as using simple and clear language. We will give you feedback even in the event of a refusal. As regards response times, the law establishes that the deadline for giving you an answer is, for all rights (including the right of access), one month, which can be extended up to 3 months in particularly complex cases. However, NEWFORM SPA will do its best to give you feedback as soon as possible. If your request should appear manifestly unfounded or excessive (even repetitive), or if more "copies" of personal data are requested in the case of the right of access, NEWFORM SPA may ask you for a contribution which will take into account the administrative costs incurred.

Policy Updates. We inform you that this Information will be subject to periodic updates which will be highlighted on the Website.

Privacy Information

"Newsletter” and Site Registration

Update 25 02 2022

Quali tipologie di dati trattiamo. Trattiamo i dati da te forniti al momento di effettuare la registrazione al sito e/o alla Newsletter https://www.newform.it/ quali: nome e cognome, e-mail, password, categoria professione, indirizzo, numero di telefono.

For what purposes we process your data. The personal data you provide and collected by voluntarily completing the registration form will be used to access the download service of product designs in 3D format and for sending commercial and institutional communications by NEWFORM SPA.

Why we may process your data (principle of lawfulness). The processing of the data provided is permitted by virtue of the registration you made, understood as an expression of the desire to access the services available to registered users.

Your consent is required for the data processing aimed at sending NEWFORM SPA commercial offers, newsletters and invitations to events.

NEWFORM SPA will process your data for the purposes indicated above by pursuing its legitimate interests which will not prevail over your interests or your rights and freedoms with regard to the processing of personal data, as well as the free movement of such data.

Provision of data. The provision of data is mandatory to enable the services available on the website to be activated.

How we treat your data. Your data, collected in the form on this site, is processed electronically and through management information systems. Your data can only be accessed by authorized parties who are adequately trained and informed about their duties and the activities they are permitted to use on your data. All subjects authorized to process data that operate on behalf of NEWFORM SPA (data processors) are recipients of instructions and tasks given by means of a specific designation agreement.

a) entities that provide services for the management of the owner's IT system;

b) individuals who provide professional legal and/or judicial consultancy services;

c) supervisory and control authorities and bodies.

right of access: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, obtain access to your personal data - including a copy of the same right to rectification: the right to obtain the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
right to cancellation (right to be forgotten): right to obtain the cancellation of personal data concerning you, when: the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; you have withdrawn your consent and there is no other legal basis for the processing; You have successfully objected to the processing of your personal data; the data has been processed unlawfully, the data must be deleted to fulfill a legal obligation; the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR.
The right to erasure does not apply to the extent that the processing is necessary for compliance with a legal obligation or for the performance of a task performed in the public interest or for the establishment, exercise or defense of a legal claim;
right to request restriction of processing: right to obtain restriction of processing, when: the data subject disputes the accuracy of personal data; the processing is unlawful and the data subject opposes the cancellation of personal data and requests restriction to use; personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
right to object: right to object to the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing;
right to data portability: the right to receive, in a structured format, in common use and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly by the company NEWFORM SPA to another holder if this is technically feasible;
right to lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM).

Policy Updates. We inform you that this Information will be subject to periodic updates which will be highlighted on the Website.

Privacy Information

"Work with us" site page

Update 05 12 2022

What types of data we process. We process the data you provide when sending the spontaneous application in the 'Work with us' area - https://www.newform.it/it/lavoro-con-noi such as: cv attachment, email content (text , cover letter).

For what purposes we process your data. We process the data to receive your spontaneous application, enter your data in our candidate database and be able to contact you to offer you participation in the selection procedures.

In particular: the contact details are necessary to be able to get in touch with you; the CV is necessary for the evaluation of the correspondence of your professional profile with the job position to be filled; in the text message you can add questions or further information to complete your application and cover letters.

Why we can process your data (principle of lawfulness). The processing of your data is permitted by virtue of the sending by you of the spontaneous application, this must be considered as expression of the will to be included in the database of candidates to join Newform spa. For this purpose, we do not need consent for the processing of personal data included in the CV and those contained in the email or in the cover letter as long as these data do not belong to the category of 'particular' personal data referred to in art. 9 of the GDPR, or "data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to a person's health or sex life or sexual orientation". We therefore invite you not to enter data of a particular type, except in strictly necessary cases and in any case specify the importance for this purpose, as already indicated above, of expressing explicit consent to the processing of particular categories of data, where you decide to share that information.

Provision of data. The provision of data is mandatory in order to follow up on your application.

a) entities that provide services for the management of the owner's IT system;

b) individuals who provide professional legal and/or judicial consultancy services;

c) supervisory and control authorities and bodies.

How your data will be stored and how long. NEWFORM SPA will keep your data in a form that allows identification of the the data subject for a period of time not exceeding the achievement of the purposes for which the data were collected (2 years). Once this period has elapsed, NEWFORM SPA will proceed with the cancellation of your data with the exception of those strictly necessary for the other purposes indicated above. At any time you can request the modification of your data regulated by this information by exercising the rights referred to in the following paragraph.

right of access: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, obtain access to your personal data - including a copy of the same right to rectification: the right to obtain the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
right to cancellation (right to be forgotten): right to obtain the cancellation of personal data concerning you, when: the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; you have withdrawn your consent and there is no other legal basis for the processing; You have successfully objected to the processing of your personal data; the data has been processed unlawfully, the data must be deleted to fulfill a legal obligation; the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR.
The right to erasure does not apply to the extent that the processing is necessary for compliance with a legal obligation or for the performance of a task performed in the public interest or for the establishment, exercise or defense of a legal claim;
right to request restriction of processing: right to obtain restriction of processing, when: the data subject disputes the accuracy of personal data; the processing is unlawful and the data subject opposes the cancellation of personal data and requests restriction to use; personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
right to object: right to object to the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing;
right to data portability: the right to receive, in a structured format, in common use and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly by the company NEWFORM SPA to another holder if this is technically feasible;
right to lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM).

Policy Updates. We inform you that this Information will be subject to periodic updates which will be highlighted on the Website.

We'd like to remind you that for any questions or requests regarding personal data and privacy, please contact us at privacy@newform.it

If you do not wish to continue to receive communications from Newform, just send a communication to the dedicated email address privacy@newform.it

PUB. 22.03.2023