Privacy Policy

Privacy e Cookies Policy

1. Data Controller, Data Processors, and Data Protection Officer

The data controller for personal data is BRUSAFERRI & C. S.R.L. (Tax Code and VAT No. 00925090193), with registered office at VIA CARLO FREGUGLIA 2, 20122 MILANO (MI), email privacy@lemigroup.it, hereinafter referred to as the “Controller “.
An updated list of designated Data Processors can be provided upon request by interested parties and/or Users. 

2. Information Automatically Collected by the Site – Cookies

a) Automatically Collected Information

Like all websites, our Site uses log files, in which information is stored automatically during your visits. The computer systems and software procedures used to operate the Site automatically acquire some information during use, the transmission of which is implicit in the use of Internet communication protocols.

The collected information includes:

• Internet Protocol (IP) address or the domain name of the device you use;
• type of browser and parameters of the device used to connect to the Site;
• addresses in URI (Uniform Resource Identifier) notation of the requested resources or the method used to submit the request to the server;
• name of the internet service provider (ISP);
• date and time of visit;
• web page from which the user arrives (referral) and the user’s exit page;
• possibly the number of clicks;
• the size of the file obtained in response;
• the numerical code indicating the status of the response given by the server (successful, error, etc.);
• other parameters related to the operating system and the user’s IT environment.

This information is processed automatically and collected exclusively in aggregate form to verify the correct functioning of the Site.
b) Cookies

The Site uses cookies. Cookies are text files recorded on a computer medium, which allow the recording of certain parameters and data communicated to the computer system, through the browser you use. These tools, therefore, allow an analysis of your habits in using the Site, for different purposes: execution of computer authentication, session monitoring, storage of information on specific configurations concerning users accessing the server, storage of preferences, etc.

Cookies are distinguished into:

1. Technical Cookies: hey are used to navigate or provide a service you request. Without the use of these cookies, some operations could not be performed or would be more complex and/or less secure.
2. Profiling Cookies: they are used to track your navigation and create profiles about your tastes, habits, choices, etc. In this way, advertising messages can be sent to your device in line with your preferences already expressed in previous online browsing.

Your consent is not required for the installation of Technical Cookies. Your consent is required for the installation of Profiling Cookies: if you do not wish your device to receive and store Profiling Cookies, you can modify the security settings of your browser. In fact, through the settings of the browser used to navigate, you can decide whether to delete and/or avoid the installation of cookies on the device used.

However, it should be noted that by disabling the use of Profiling Cookies, you will not be able to fully use some functions of the Site.

During navigation of the Site, you can also receive cookies on your terminal that are sent from different websites or web servers (hereinafter “Third Parties “). Third Parties that use cookies on our Site include:

Facebook Comments (Facebook, Inc.)
Facebook Comments is a service managed by Facebook, Inc. that allows the User to leave their comments and share them within the Facebook platform.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
By using the Site, you are considered to have accepted the use of Cookies and given your consent to the processing of data collected by Third Parties.

YouTube LLC.
YouTube is a web platform managed by Google, Inc. that allows the User to view videos, leave comments, and share them within the YouTube platform.
Personal Data collected: Cookies and Usage Data
Place of processing: USA – Privacy policy.
Attraverso l’uso del Sito si considera accettato l’utilizzo dei Cookies e presTi il consenso al trattamento dei dati raccolti dalle Terze Parti.

Instagram, Inc.
Instagram is a service managed by Instagram, Inc. that allows the User to leave their comments and share them within the Instagram platform.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
Attraverso l’uso del Sito si considera accettato l’utilizzo dei Cookies e presTi il consenso al trattamento dei dati raccolti dalle Terze Parti.

Linkedin Corporation
LinkedIn is a service managed by LinkedIn, Inc. that allows the User to leave their comments and share them within the LinkedIn platform.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.

By using the Site, you are considered to have accepted the use of Cookies and given your consent to the processing of data collected by Third Parties.

3. The personal data you provide us by using the Site: why we process them.

Your data is necessary for us to allow you, through the use of the Site, to access the website  www.lemigroup.it/(hereinafter the “Site “) and use the following services (the “Site Services“)

• consult the Catalog/products/services;
• access the Reserved Area;
• be Contacted;

Your data is processed for the following purposes:

• comply with legal obligations;
• carry out the technical management of the Site;

The processing of data for the above purposes will be carried out in compliance with the Privacy Code, the Privacy Regulation, and all specific sector regulations, including the provisions of the “Rules of the Guarantor for loyalty programs” of February 24, 2005, and the “Guidelines on the processing of personal data for online profiling” of March 19, 2015.

In compliance with the “Guidelines on promotional activities and combating spam” of July 4, 2013, we point out that the consent you may have given for sending commercial, promotional, and marketing communications through automated tools will also extend to traditional contact methods.

The data you provide will be processed mainly with computer tools under the authority of the Data Controller, by persons specifically appointed, authorized, and trained to process under article 30 of the Privacy Code and articles 28 and 29 of the Privacy Regulation. We inform you that appropriate security measures are observed, also pursuant to articles 5 and 32 of the Privacy Regulation, to prevent data loss, illicit or incorrect use, and unauthorized access.

4. Mandatory or optional nature of consent for data provision, consequences of a possible refusal, and the legal basis for processing

Please note that for the purposes referred to in points (i), (ii) of the previous art. 3, the provision of your personal data is mandatory, as otherwise, you will not be able to use the Site Services offered through the Site.

Remember that, in any case and at any time, you can request the Data Controller to delete your data by simply sending a communication, without any particular formalities, to the contacts referred to in the previous art. 1.

With reference to the purposes referred to in points (i) and (ii) of the previous art. 3, the legal basis for processing is the execution of the services provided through the Site and requested by you (pursuant to article 6, paragraphletter b of the Privacy Regulation and article 24, paragraph 1, letter b of the Privacy Code);

5. To whom and in what context we can transmit your data

Your data may be communicated, within the EU, in full compliance with the provisions of the Privacy Code and the Privacy Regulation, to the following subjects:

(i) to the financial administration and/or other public authorities, where required by law or upon their request;

(ii) to the structures, subjects, and external companies that the Controller uses for the performance of activities related, instrumental, or consequent to the execution of the Site Services – including cloud computing storage service – to send the Newsletter and Profiling Activity;

(iii) to external consultants (for example, for the management of tax obligations), if not designated in writing as Data Processors;

Information automatically collected by the Site, as mentioned in paragraph 2, as well as some anonymous data related to the number and type of interactions on activities strictly related to loyalty purposes, may also be transferred to Third Party cloud servers located outside the EU. This processing is necessary for the execution of the Site Services requested by you. The legal basis for this processing is, therefore, art. 49, paragraph 1, letter b of the Privacy Regulation and Art. 43, paragraph 1, letter b of the Privacy Code.

6. Your rights

Remember that at any time you can exercise the rights provided by art. 7 of the Privacy Code and articles 15, 16, 17, 18, 20, and 21 of the Privacy Regulation, by sending a written communication to the Controller’s contacts mentioned in the previous art. 1 and, for this purpose, obtain:
confirmation of the existence or not of your personal data with an indication of its origin, verify its accuracy, or request its update, correction, or integration;

• access, correction, deletion of data, or limitation of processing;
• deletion, transformation into anonymous form, or blocking of data processed in violation of the law.
• You can also oppose the processing of data concerning you.

Regarding the Newsletter, we highlight that your right to request the cessation of processing carried out through automated contact methods also extends to traditional methods. Furthermore, you still have the possibility to exercise this right only in part, i.e., by requesting the interruption, for example, of the sending of promotional communications carried out through one or some of the contact tools for which you have given your consent.

7. Duration of Processing

Except for legal obligations, personal data will be stored for a specific period, based on criteria related to the nature of the services provided.

It should be noted that data stored for Profiling or Marketing purposes will be kept for a period not exceeding 12 and 24 months, respectively, from their registration.

8. Security Measures

Through the Site, your data is processed in compliance with applicable law and using appropriate security measures in accordance with current regulations, including articles 5 and 32 of the Privacy Regulation.

In this regard, it is confirmed, among other things, the adoption of appropriate security measures aimed at preventing unauthorized access, theft, disclosure, modification, or unauthorized destruction of your data.

9. Changes to the Privacy Notice/strong>

The Controller reserves the right to make changes to this Privacy Notice. In this case, you will be promptly informed when you use the Site again.