DATA PRIVACY POLICY

General information
LEITNER SpA has drawn up these Internet data protection guidelines with the intention of approaching visitors to the website as their trustworthy partner, who respects and guarantees your personal right to confidentiality.
Within the meaning of GDPR 2016/679 is the holder of the right to administration and processing of the personal data, which may be collected on this website. The rights holder administrates or processes these personal data, which may be collected on the website (www.leitwind.com), under the conditions set out below.

Type of data collection and purpose of processing
LEITNER SpA processes solely those data, which the visitor to the website has provided of his own free will. It is not possible to navigate on the website without providing personal data and information. Each visitor is free to make personal data available on a restricted basis, in order to benefit from only specified services. We collect and store personal data solely for the services described in the information we provide.
Visitors to the website may transfer their data:

• to subscribe to our newsletter
• to register for events/courses
• to send their CV
• to obtain information on services or products, offers, cost estimates
• to purchase services, products or vouchers

Transfer to third parties
Personal data are not transferred to other companies. In addition, the personal information will be passed, if that provide legal regulations or judicial authority or other bodies and institutions require it.
It is not the intention of LEITNER SpA to collect sensitive or judicially relevant personal data on its website.
Sensitive data within the meaning of Article 4 GDPR 2016/679 are personal details concerning sex, ethnic origin, religious, philosophical or other views, political opinions, membership of political parties, unions, associations or organisations with a religious, philosophical or trade union background and details on health or sexual orientation. Within the meaning of Article 4 GDPR 2016/679 judicially relevant data are those personal details, which may lead to inferences that the data subject is subject to measures based on Article 3 (1) from a) to o) and from r) to u) of the D.P.R. No. 313 of 14 November 2002 on the criminal record, the register of Administrative Offences in consequence of criminal offences or associated legal proceedings or to the data subject being the accused or suspect within the meaning of Articles 60 and 61 of the Code of Criminal Procedure. We recommend that you do not supply such information to our website. Should this be unavoidable (for example in the case of classification of groups of protected persons, in the provision of a curriculum vitae for employment purposes, in response to an offer of employment or as an expression of interest in an appointment with our company), we request that you send to us by post the specific declaration available in the "Despatch of Curriculum Vitae" section of this website. In this we request you to give your written consent to the processing of the aforementioned sensitive personal data.

Involvement of third party services and contents and data transfer to third countries

• Google Analytics, Google-IP-Locator, Google Maps, Google Maps Distance Api, Google reCAPTCHA
  Proprietor: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• YouTube-Contents
  Proprietor: Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA
• Facebook social network
  Proprietor: Facebook Inc., Menlo Park, California, USA
• Google Plus social network
  Proprietor: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Instagram social network
  Proprietor: Facebook Inc., Menlo Park, California, USA
• Twitter social network
  Proprietor: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Irland
• Vimeo
  Proprietor: Vimeo Inc., 555 West 18th Street, New York, New York 10011
• Hotjar
  Proprietor: Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta

Additional external content can be loaded via widgets and iframes. To get access to complete list, an e-mail must be sent to .

Links to third party Internet sites
We advise you that the website, www.leitwind.com contains links to other websites, which are not managed within the meaning of the foregoing data protection directives.

Retention and erasure of the data
The information and personal data collected on this website, including those provided voluntarily by the visitor for the receipt of information material or other consignments when he writes to the addresses given in the Contact Request, „Newsletter“, „Jobs“ and „Online-Buy“, are retained solely for the purposes of providing the desired service and only for the period of time absolutely necessary to fulfil this purpose. Once the service has been provided, in accordance with the data protection guidelines of LEITNER SpA, the data are erased, subject to requirements from governmental agencies or legal retention requirements.

Exercise of your rights
In accordance with Article 15 GDPR 2016/679 the data subject has the right at any time to receive information on his personal data collected on this website; he may have them rectified, updated or erased or he may assert other rights accorded to him by law. For this purpose it is necessary to contact the controller of the data processing or the processor by e-mail at .

Data Security
All the technical and organisational security measures required to protect the personal data from loss and abuse are taken by LEITNER SpA. LEITNER SpA protects your personal data by means of internationally recognised standards, which make the following impossible:

• unauthorised access
• unauthorised use and dissemination
• unauthorised amendment
• loss and inadvertent or unlawful destruction of data

Cookies/advertisements
Cookies are small text files, which are deposited in your computer, if you visit certain websites. This website, including its sub-domains, uses cookies; the consent of the user is always requested, where this is expressly required by law or other applicable provisions. The use of cookies facilitates navigation on the website and allows the information transmitted to the user to be personalised. In addition, systems are used for security and statistical purposes to collect information on the user, such as his IP address, the browser and operating system used and/or the websites visited by a user. Cookies will not damage your computer, tablet or Smartphone.
The cookies generated by www.leitwind.com contain no personal data, which could be used to identify the user; they contain only encrypted data.

Specific use of personal data
In the following you will find specific notes on how specified sections of this website function:

• Contact Request section
  The Contact Request section on this website offers the opportunity to make enquires about products, services, offers, participation in events and courses. If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures.
• Section Online purchase
  The shopping section of this website offers the opportunity to purchase the products offered on the website. If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures. For this purpose, the user must enter the required data; otherwise it will be excluded from online sales. The purchase is also subject to the express consent, by clicking on its own box, the privacy policy and the conditions of sale of the company.
• Section Newsletter
  If the visitor to our website would like to receive our newsletter, he must enter his personal data in the appropriate form in the Register for Newsletter section. The data collected serve for the despatch of the newsletter within the meaning of the declaration in the footnote to the form.
• Jobs section
  The Jobs section on this website offers the opportunity to express interest in employment in our company and/or to respond to a job advertisement for vacant or newly-created posts. If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures.

Under-age visitors (16 years)
The LEITNER SpA website, which is regulated by the foregoing data protection provisions, is not intended for the use of minors. We are aware of the necessity for protecting data, which concern minors, in particular in the online environment. Therefore we do not collect and store, except inadvertently, any data from under-age visitors.

LEITNER SpA with registered office in Vipiteno, VAT No.IT 00123790214, as Data Controller of personal data (hereinafter "Controller"), informs you pursuant to Art. 13 GDPR that your data will be processed in the following ways and for the following purposes:

1. OBJECT OF PROCESSING
The Controller processes personal identification data (specifically name, surname, company name, business email address, business phone number) provided by you when concluding contracts for the Controller's services/products or when registering for the newsletter service.

2. PURPOSE OF PROCESSING
Your personal data are processed for the following purposes:
- Sending newsletters, commercial communications and/or advertising material via email about products or services of the Controller similar to those previously purchased/supplied;
- Sending information about commercial initiatives, promotions and events organized by the Controller;
- Sending communications about new products/services of the Controller;
- Managing requests to unsubscribe from the newsletter service.

3. LEGAL BASIS FOR PROCESSING
The legal basis for processing your data for sending commercial communications about products/services similar to those already purchased is the legitimate interest of the Controller (Art. 6.1.f GDPR), in accordance with Art. 130, paragraph 4, of Italian Legislative Decree 196/2003.
For sending communications about products/services different from those already purchased, the legal basis is your express consent (Art. 6.1.a GDPR).

4. PROCESSING METHODS
The processing of your personal data is carried out through automated means (email) in compliance with the security measures provided by GDPR, by personnel duly authorized by the Controller.

5. DATA RETENTION PERIOD
Personal data will be retained for the time necessary to provide the newsletter service and in any case no longer than 24 months from the last interaction with our communications. In case of consent withdrawal or exercise of the right to object, data will be deleted within 30 days of the request.

6. DATA ACCESS
Your data may be made accessible for the above purposes to:
- Employees and collaborators of the Controller, in their capacity as authorized processors;
- Third-party companies or other subjects (email marketing service providers, IT service providers) who carry out outsourcing activities on behalf of the Controller, in their capacity as data processors.

7. DATA TRANSFER
Your data will not be disseminated or transferred to countries outside the EU. Should transfer become necessary, it will take place in compliance with the guarantees provided by GDPR.

8. RIGHTS OF THE DATA SUBJECT
You may, at any time, exercise the rights provided by Articles 15-22 GDPR, including:
- Obtain confirmation of the existence or non-existence of personal data concerning you;
- Know the content and origin of the data, the purposes of processing and its methods;
- Request updating, rectification or integration of data;
- Obtain erasure, anonymization or blocking of data processed unlawfully;
- Object at any time to the processing of personal data concerning you;
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with the Italian Data Protection Authority:
Garante per la protezione dei dati personali
Piazza Venezia n. 11 - 00187 Rome
www.garanteprivacy.it
Phone: (+39) 06.696771
E-mail: protocollo@gpdp.it
PEC: protocollo@pec.gpdp.it

9. HOW TO EXERCISE YOUR RIGHTS
You may exercise your rights at any time:
- By sending an email to:  info@leitwind.com
- Using the "unsubscribe from newsletter" link at the bottom of each communication received

10. CONTROLLER, PROCESSOR AND PERSONS IN CHARGE
The Data Controller is "HTI Company", with registered office in Vipiteno
The updated list of data processors is kept at the Controller's headquarters.
The Data Protection Officer is the Company's Local Data Protection Coordinator, who can be contacted at the email address:  info@leitwind.com

11. CHANGES TO THIS PRIVACY NOTICE
The Controller reserves the right to update this privacy notice at any time. The updated version will be communicated through the most appropriate channels. We recommend periodically checking the content of the privacy notice.