Whistleblowing

Published by melesi il 14/12/2023 16:20

We wish to inform you that OFFICINE AMBROGIO MELESI has activated a reporting system pursuant to Legislative Decree 24/2023 which can be reached through the following link https://melesi.trusty.report/

 

Whistleblowing is a legal tool available to everyone to report any unlawful conduct that is found in the context of one's work activity, guaranteeing protection against any possible retaliation linked, even indirectly, to the reported facts.

 

The law has introduced important safeguards for whistleblowers with the use of IT methods and encryption tools to ensure the confidentiality of the whistleblower's identity, the content of the reports and the related documentation, even anonymously.

 

The report made through the platform is received by person incharge of an external company which operate with autonomy and independence. This platform allows dialogue, even anonymously, between the whistleblower and the manager of the report for clarifications requests, in-depth analysis, integrations, without the need to provide personal contacts. It can be used from any digital device (PC, tablet, smartphone) both inside and outside the company. The protection of anonymity is guaranteed in all circumstances.

 

 

More information is available on the company website.

 

Thank you for your cooperation.

 

 

                                                              Officine Ambrogio Melesi & C. S.r.l.

Categories

Last post

  • GIIR DI MONT - 30th EDITION  Officine Ambrogio Melesi sponsors the 30th edition of the GIIR DI MONT, the famous sky race among the alpine pastures surrounding Premana. Continue
  • Whistleblowing We wish to inform you that OFFICINE AMBROGIO MELESI has activated a reporting system pursuant to Legislative Decree 24/2023 which can be reached [...] Continue
Top Page

Officine Ambrogio Melesi & C. S.R.L.

Largo De Vecchi, 11 - 23813 CORTENOVA (LC)
Tel. +39 0341 98341 - Fax +39 0341 983496 - 983497 - E-mail: info@melesi.it


©2024 Tutti i diritti riservati - Registro Imprese di Lecco - P.Iva - Cod.Fiscale: IT 00231630138 - REA:LC-108835 - Cap.Sociale €.500.000 i.v.

Cookies Policy - Privacy Policy - Suppliers Privacy Policy - Customers Privacy Policy - Whistleblowing

Respect for your privacy is our priority

We use cookies to ensure that we give you the best experience on our website. Accept and continue to consent to the use of all cookies. If you want to learn more or give consent only to certain uses click here. You can consult our updated Privacy Policy and Cookie Policy at any time.

MANAGE COOKIES

ESSENTIAL COOKIE These cookies are required for the basic functionality of the site and are therefore always enabled. These are cookies that allow you to recognize the user who uses the site during a single session or, upon request, also in subsequent sessions and to solve problems related to safety and ensure compliance with current regulations.

PERFORMANCE COOKIE They allow us to improve the site's functionality by keeping track of the use of the website itself. In some cases, these cookies speed up the processing of user requests, as they help us remember the preferences you have selected for the site. If you disable these cookies you may receive little personalized advice and experience slowness in using the site.

You can always change your preferences by accessing the section Cookie Policy.

CHIUDI

Cookie Policy

 

COOKIE DISCLOSURE as regards the protection of personal data PURSUANT TO REGULATIONS (EU) 2016/ 679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016.

 

Use of cookies

In compliance with that laid down by the GDPR 2016/679, the Data Controller Officine Ambrogio Melesi & C. S.R.L. - Largo De Vecchi, 11 - 23813 CORTENOVA (LC) Registro Imprese di Lecco - P.Iva - Cod.Fiscale: IT 00231630138 - REA:LC-108835 , informs users of www.melesi.it that the website uses cookies or other tracking elements.
These can be installed on your terminal based on the options and choices that you have made or can make at any time in accordance with this policy.


Officine Ambrogio Melesi & C. S.R.L.  established this policy to provide information and ensure transparency, by informing you about:

 

What is a cookie?

A "cookie" is a small text file created by certain web sites on the user's computer on accessing a particular web site, for the purpose of storing and transporting information. Cookies are sent from a web server (which is the computer on which the visited web site is running) to the user's browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the user's computer; they are then re-transmitted to the web site on subsequent visits.
Some operations could not be carried out without the use of cookies, which in some cases are therefore technically necessary. In other cases, the web site uses cookies to facilitate and ease browsing by users or to allow them to use the services specifically requested.
Cookies can remain in the system for long periods of time and may also contain a unique identifier. This allows websites that use them to keep track of the user's browsing within the website itself for statistical or advertising purposes, such as to create a personalised user profile based on the pages visited and display and/or send targeted advertising ( Behavioural Advertising).

Cookies are categorized as follows:

 

Cookies are used by us to ensure the user the best experience and maximum security on our website.


Which cookies are used?:

In order to optimize your experience also in cookie management, we have decided to organize the cookies used by this site in two categories, based on the purposes pursued: Essential cookies and Performance cookies.

The user has the possibility, at any time, to enable and disable directly from the site each specific category of cookies (with the exception of essential type cookies, strictly necessary). In the case of third-party cookies, disabling involves the non-use of the cookie by this site (and not its cancellation).

Below is a list of the different types of cookies we use on the site.

 

Essential cookies:

They are required for the basic functionality of the site and are therefore always enabled. These are cookies that allow you to recognize the user who uses the site during a single session or, upon request, even in subsequent sessions and solve security problems and ensure compliance with current regulations.
 

Nome  Descrizione   Validità:
locale Necessary for website operation Session cookie
“ckss” Essential for acceptance of cookie poli  Persistent cookie
“ckpr” Essential for acceptance of cookie poli Persistent cookie

 

Performance Cookies: 

They allow us to improve website functionality by keeping track of the use of the website itself. In some cases, these cookies speed up the processing of user requests, as they help us remember the preferences you have selected for the site. If you disable these cookies you may receive little personalized advice and experience slowness in using the site.
 

Name  Description   Validity:
Google Analytics  _ga, _gat, _gid _ga _gtag.   Established by third parties  (disability)

 

 


Interaction with Social Networks

There are special "buttons" (called "social buttons/widgets") depicting the icons of social networks (e.g. Facebook, Twitter) on the Sites. These buttons allow users who are browsing the web sites to interact directly with the social networks depicted with a "click". In this case, the social network acquires the data related to the user's visit, while the Data Controller will not share any user browsing information or data acquired through its website with the social networks accessible through the Social buttons/widgets.
Social network applications on the Sites in some cases may allow the respective social networks to identify you, even if you have not clicked on the application buttons. This type of button can allow the corresponding social network to follow your browsing on the site simply if your account on the social network in question is activated (open session) while browsing the Site.
We advise that you review the policies of these social networks Facebook ,Linkedin to understand the purposes of using browsing information that they can collect, including for advertising purposes. These policies must allow you to exercise your choices regarding social networks, in particular by setting up your user account for each.


Cookies management from browser

You can configure your browser to:

- accept all cookies,
- systematically reject them, or
- choose those that you wish to accept, based on the issuer.

You can also set your browser to accept or reject cookies before they are installed. You can also regularly delete cookies from your device via your browser, and activate the Do Not Track option in most browsers.
Do not forget to configure all of the browsers of your different terminals (tablet, smartphone, computer, etc.).

ForInternet Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies
ForChrome: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647
ForSafari: https://support.apple.com/it-it/HT201265
ForFirefox: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie
For Opera: https://help.opera.com/it/Windows/10.20/fr/cookies.html

For additional information on cookies, including how to view cookies that have been set on your device as well as cookie management and deletion, please visit  www.allaboutcookies.org.

CHIUDI

WEBSITE PRIVACY POLICY


This policy is provided to natural persons who access and use the website of OFFICINE AMBROGIO MELESI & C. S.r.l., pursuant to Italian Leg. Decree 196/2003 “Personal Data Protection Code” and subsequent amendments and articles 13 - 14 of Regulation EU 2016/679 “European Regulation on the protection of natural persons with regard to the processing of personal data” to inform them of the essential elements about the processing carried out.


Data Controller
The Data Controller is the company, OFFICINE AMBROGIO MELESI & C. S.r.l., with offices in Italy, Cortenova (LC) Largo De Vecchi No. 11, in the person of the pro tempore legal representative.


Data processors and appointees
The updated list of the data processors and appointees is kept at the offices of the data controller.


Purpose of the processing
The personal data are collected and processed for the purpose of:

  1. verifying the identity of the party requesting information, quotes, product delivery and fulfilment of services, in addition to carrying out necessary support;
  2. transmitting the information specifically requested by the data subject;
  3. fulfilling orders or providing the services requested by the data subject or by a party appointed by the latter (service provider);
  4. sending out marketing communications, special offers, advertising material and market surveys related to the products being sold or services provided (marketing);
  5. sending out marketing communications, special offers, advertising material via email about products and services similar to those requested by the data subject or appointed party (soft spam);
  6. creating a profile through the use of profiling cookies, where accepted (profiling);
  7. fulfilling legal obligations (compliance);
  8. protecting the interests of the company, including legal interests in and out of court;
  9. preventing or identifying any abuse of website use or any fraudulent activity.

Legal basis for and mandatory or optional nature of the processing
The data processed for the purposes indicated under points 1, 2, 3, 7, 8, 9 of the section labelled “Purpose of the processing” are essential for entering into the contractual relationship (including the pre-contractual stage) and/or its execution.
The data, processed for the purposes, indicated under points 4 and 6, do not derive from an obligation and providing them is optional and based on consent by the data subject.
The data indicated under point 5 are not mandatory and do not require consent for their processing, however, the data subject shall have the right to object at any time
The extent and suitability of the data provided will be assessed on a case-by-case basis to determine the subsequent decisions and avoid the processing of data beyond the intended purposes.


Storage time
The personal data collected and processed by the data controller will be stored in full compliance with the legislation in force as defined below:


Data storage place
The data are currently processed and stored at Officine Ambrogio Melesi premise in Cortenova in Largo de Vecchi,11.
They are also processed on behalf of the data controller by professionals and/or companies appointed to carry out technical, management, development, administrative, accounting, fiscal and legal activities, etc.
The company hereby reserves the right to use servers, cloud services and any other IT tools for storing and managing personal data owned or managed by third parties, ensuring that the service providers will be selected from those who supply suitable safeguards, as per article 46 of Regulation EU 2016/679 “European Regulation on the protection of personal data”.


The data subject’s rights
The data subject shall, at any time, under Italian Leg, Decree 196/2003 and subsequent amendments and articles 15 to 22 of Regulation EU 2016/6791, have the right to:

  1. Accessing your data. The data subject shall have the right, at any time, to request and obtain from the data controller, information on the personal data processed (including confirmation as to whether or not personal data concerning him or her are being processed). He/she also has the right to access these data under article 15 of Regulation EU 2016/679 and extract a copy, provided that the rights and freedoms of others are not infringed.
  2. Verifying and rectifying your data. The data subject has the right to verify the accuracy of his/her data, to update, correct and integrate any inaccurate personal data concerning him/her, without undue delay, under article 16 of Regulation EU 2016/679.
  3. Obtaining erasure (Right to be forgotten). If the conditions indicated under art. 17 of Regulation EU 2016/679 exist, the data subject shall have the right to request the erasure of his/her data by the data controller.
  4. Obtaining restriction of the processing. . If the conditions indicated under art. 18 of Regulation EU 2016/679 exist, the data subject shall have the right to request the restriction of data processing. In this case, the data controller shall not process the data for any purpose, with the exception of storage or for“for the establishment, exercise or defence of legal claims or the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State”.
  5. Obtaining data portability. The data subject has the right to receive his/her data in a structured, commonly used and machine-readable format and, where technically feasible, have the right to request and transmit those data to another controller without hindrance.
  6. Objecting to data processing. When the personal data are processed for the purposes of “the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller” or “the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child”, the data subject shall have the right to object to the processing on grounds relating to his or her particular situation. The data subject shall also have the right to object to the processing, at any time for direct marketing purposes, without the need to indicate specific reasons.
  7. Lodging a complaint. . If the data subject considers that the processing of personal data relating to him or her infringes Regulation EU 2016/679, “he/she shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement”
  8. Objecting to automated decision-making. The data subject shall have the right to object to the processing of his/her personal data wholly by automated means, including profiling, unless this form of processing is required to complete and/or fulfil the contract, is required by current legislation or carried out following the explicit consent of the data subject, who shall have the right to revoke it at any time.
  9. Revoking consent at any time. The data subject shall have the right to revoke consent to the data processing at any time. Revocation of consent does NOT, however, affect the lawfulness of the processing based on the consent given before the revocation;

The data subject can exercise his/her rights by writing to the data controller at the address indicated above either by certified email or by letter to the following address gdpr@melesi.it, specifying the reason for the request, the right that he/she intends to exercise and attaching a photocopy of his/her identity card which proves the legitimacy of the request


Data transfer
For all the purposes indicated in this statement, personal data of a common nature related to the data subject will not be disclosed to others.


Automated decision-making processes
The data controller does not process the data of natural persons using automated decision-making processes.


Modifications
This policy is valid from 20/05/2018. OFFICINE AMBROGIO MELESI S.r.l. reserves the right to modify or simply update the content, wholly or in part, also due to variations in the applicable legislation.
OFFICINE AMBROGIO MELESI S.r.l. will inform you as soon as these variations are introduced and they will be binding as soon as they are published on the website.
OFFICINE AMBROGIO MELESI S.r.l kindly requests, therefore, that you visit this section regularly to find out about the most recent and updated version of the policy to stay updated about the personal data collected and on the use made of it.


PDF Website privacy policy


DPO Contact




1For more detailed information on the data subject’s rights, please consult Italian Leg Decree 196/2003 “Personal Data Protection Code” and subsequent amendments and Regulation EU 2016/679 “European Regulation on the protection of personal data”.

CHIUDI

SUPPLIER POLICY


This policy is provided to suppliers, in the form of legal persons, and to natural persons operating in the name and on behalf of suppliers, in the form of legal persons, of the company, OFFICINE AMBROGIO MELESI & C. S.r.l., pursuant to Italian Leg. Decree 196/2003 “Personal Data Protection Code” and subsequent amendments and articles 13 - 14 of Regulation EU 2016/679 “European Regulation on the protection of natural persons with regard to the processing of personal data” to inform them of the essential elements about the processing carried out.


Data Controller
The Data Controller is the company, OFFICINE AMBROGIO MELESI & C. S.r.l., with offices in Italy, Cortenova (LC) Largo De Vecchi No. 11, in the person of the pro tempore legal representative.


Data processors and appointees
The updated list of the data processors and appointees is kept at the offices of the data controller.


Type of data collected
The data collected are personal and physical data of the legal and natural persons who operate in the name and on behalf of suppliers, in the form of legal persons, in carrying out and managing contractual relationships.


Data source
The personal data are those provided by the data subject during:


Purpose of the processing
The personal data are collected and processed for the purpose of:

  1. fulfilling all the operations required by regulatory obligations;
  2. carrying out operations strictly connected and related to the initiation of contractual relationships, including the acquisition of preliminary information to complete the contract;
  3. exchanging information aimed at executing the contractual relationship, including post-contractual activities and the management of any litigation;
  4. managing relations with the supplier for administrative and accounting activities, orders, shipping, invoicing or services;
  5. sending out communications of various types and with different methods of communication, and formulating requests.

The personal data duly collected will be processed in compliance with the principles of fairness, lawfulness, transparency and safeguarding the confidentiality and rights of the data subject, in accordance with art. 5 of Regulation EU 2016/679.


Processing method
The data processing for the above-mentioned purposes will be carried out both by automated methods, on electronic or magnetic supports and by non-automated methods on paper, in compliance with the rules for confidentiality and security laid down by the European and Italian regulation.


Mandatory and optional nature of data provision
Some data are essential for entering into the contractual relationship or for fulfilling it while others may be deemed accessories to these purposes. All the data requested are considered mandatory unless otherwise specified.


Refusal to provide the data
The data subject can refuse to provide personal data to the data controller or revoke his/her consent.
If the provision of data, however, is required due to a legal or contractual obligation, any refusal or revocation of the provision will result in the data controller being unable to execute or continue the contract, for reasons not attributable to the latter.


Data recipients
The personal data processed by the data controller will not be disclose, i.e. they will not be brought to the attention of unknown parties, in any possible form, including making them available or for simple consultation. They may, however, be communicated to employees of the data controller and some external parties working in partnership with the data controller. They may also be communicated, within the strictly necessary limits, to parties who, for the purpose of issuing orders or requests for information or quotes, must provide goods and/or perform services. Lastly, they may be communicated to parties who are authorised to access them by virtue of the provisions of the law, regulations and EU regulations.
In particular, on the basis of the roles and tasks performed, some workers are authorised to process personal data, within the scope of their responsibilities and in accordance with the instructions given to them by the data controller.


Data storage time
The data provided will be stored in our archives and processed for the time required to fulfil the purposes indicated herein. Subsequently, the personal data stored and no longer processed, will be stored for the time laid down by the current provisions on civil and fiscal matters.


Data storage place
The data are currently processed and stored at the registered and operational headquarters of the data controller in Italy, Cortenova (LC) Largo De Vecchi no. 11.
They are also processed on behalf of the data controller by professionals and/or companies appointed to carry out technical, management, development, administrative, accounting, fiscal and legal activities, etc.


The data subject’s rights
The data subject shall, at any time, under Italian Leg, Decree 196/2003 and subsequent amendments and articles 15 to 22 of Regulation EU 2016/6791, have the right to:

  1. Accessing your data. The data subject shall have the right, at any time, to request and obtain from the data controller, information on the personal data processed (including confirmation as to whether or not personal data concerning him or her are being processed). He/she also has the right to access these data under article 15 of Regulation EU 2016/679 and extract a copy, provided that the rights and freedoms of others are not infringed.
  2. Verifying and rectifying your data. The data subject has the right to verify the accuracy of his/her data, to update, correct and integrate any inaccurate personal data concerning him/her, without undue delay, under article 16 of Regulation EU 2016/679.
  3. Obtaining erasure (Right to be forgotten). If the conditions indicated under art. 17 of Regulation EU 2016/679 exist, the data subject shall have the right to request the erasure of his/her data by the data controller.
  4. Obtaining restriction of the processing. If the conditions indicated under art. 18 of Regulation EU 2016/679 exist, the data subject shall have the right to request the restriction of data processing. In this case, the data controller shall not process the data for any purpose, with the exception of storage or for“for the establishment, exercise or defence of legal claims or the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State”.
  5. Obtaining data portability. The data subject has the right to receive his/her data in a structured, commonly used and machine-readable format and, where technically feasible, have the right to request and transmit those data to another controller without hindrance.
  6. Objecting to data processing. When the personal data are processed for the purposes of “the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller” or “the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child”, the data subject shall have the right to object to the processing on grounds relating to his or her particular situation. The data subject shall also have the right to object to the processing, at any time for direct marketing purposes, without the need to indicate specific reasons.
  7. Lodging a complaint. If the data subject considers that the processing of personal data relating to him or her infringes Regulation EU 2016/679, “he/she shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement”.
  8. Objecting to automated decision-making. The data subject shall have the right to object to the processing of his/her personal data wholly by automated means, including profiling, unless this form of processing is required to complete and/or fulfil the contract, is required by current legislation or carried out following the explicit consent of the data subject, who shall have the right to revoke it at any time.
  9. Revoking consent at any time. The data subject shall have the right to revoke consent to the data processing at any time. Revocation of consent does NOT, however, affect the lawfulness of the processing based on the consent given before the revocation;

The data subject can exercise his/her rights by writing to the data controller at the address indicated above either by certified email or by letter to the following address gdpr@melesi.it, specifying the reason for the request, the right that he/she intends to exercise and attaching a photocopy of his/her identity card which proves the legitimacy of the request.


Data transfer
For all the purposes indicated in this statement, personal data of a common nature related to the data subject will not be disclosed to any of the companies belonging to the group, subsidiaries, associated, etc., including those located abroad, inside and outside the European Union, in compliance with the rights and safeguards provided for by current legislation, subject to verification that the country in question guarantees an “appropriate” level of protection. The data controller hereby reserves the right to use cloud services, ensuring that the suppliers of the service are selected from those who supply suitable safeguards, as per article 46 of Regulation EU 2016/679 “European Regulation on the protection of personal data”.


Automated decision-making processes
The data controller does not carry out automated decision-making processes on the data of natural persons who operate in the name and on behalf of the suppliers.


OFFICINE AMBROGIO MELESI S.r.l. recommends that you inform the data subjects (e.g. directors, employees and partners whose data the company receives for the purpose of executing the contract) about the content of this policy.


PDF Suppliers privacy policy


DPO Contact




1For more detailed information on the data subject’s rights, please consult Italian Leg Decree 196/2003 “Personal Data Protection Code” and subsequent amendments and Regulation EU 2016/679 “European Regulation on the protection of personal data”.

CHIUDI

CUSTOMER POLICY


This policy is provided to customers, in the form of legal persons, and to natural persons operating in the name and on behalf of customers, in the form of legal persons, of the company, OFFICINE AMBROGIO MELESI & C. S.r.l., pursuant to Italian Leg. Decree 196/2003 “Personal Data Protection Code” and subsequent amendments and articles 13 - 14 of Regulation EU 2016/679 “European Regulation on the protection of natural persons with regard to the processing of personal data” to inform them of the essential elements about the processing carried out.


Data Controller
The Data Controller is the company, OFFICINE AMBROGIO MELESI & C. S.r.l., with offices in Italy, Cortenova (LC) Largo De Vecchi No. 11, in the person of the pro tempore legal representative.


Data processors and appointees
The updated list of the data processors and appointees is kept at the offices of the data controller.


Type of data collected
The data collected are personal and physical data of the legal and natural persons who operate in the name and on behalf of customers, in the form of legal persons, in carrying out and managing contractual relationships.


Data source
The personal data are those provided by the data subject during:


Purpose of the processing
The personal data are collected and processed for the purpose of:

  1. fulfilling all the operations required by regulatory obligations;
  2. carrying out operations strictly connected and related to the initiation of contractual relationships, including the acquisition of preliminary information to complete the contract;
  3. exchanging information aimed at executing the contractual relationship, including post-contractual activities and the management of any litigation;
  4. managing and controlling risks, preventing possible fraud, insolvencies and defaults;
  5. formulating requests or fulfilling requests received;
  6. managing administrative, accounting, civil and fiscal obligations;
  7. sending out communications of various types and with different methods of communication, formulating requests and implementing other direct marketing activities.

The personal data will be processed compliance with the principles of fairness, lawfulness, transparency and safeguarding the confidentiality and rights of the data subject, in accordance with art. 5 of Regulation EU 2016/679.
Finally, both the personal data of customers who are natural persons, and the personal data of natural persons who operate in the name and on behalf of customers who are legal persons, will be kept in the archives of the Data Controller and used for sending communications about products, services, new products and special offers (pursuant to article 130, paragraph 4 of Italian Leg. Decree 196/2003 and subsequent amendments and the General Provision of the Guarantor G.U. 1 July 2008 no. 188c, formulation 6, points a, b, c).


Processing method
The data processing for the above-mentioned purposed will be carried out both by automatic methods, on electronic or magnetic supports and by non-automatic methods on paper, in compliance with the rules for confidentiality and security laid down by the European and Italian regulation.


Mandatory and optional nature of data provision
The data under points 1, 2, 3, 4, 5, 6 of the section labelled “Purpose of the processing” are essential for entering into the contractual relationship (including the pre-contractual stage) and/or its execution.
I dati di cui al punto 7 invece, non derivano da un obbligo ed il conferimento dei relativi dati è facoltativo.
The data under point 7, however, do not derive from an obligation and providing the relevant data is optional.
The extent and suitability of the data provided will be assessed on a case-by-case basis to determine the subsequent decisions and avoid the processing of data beyond the intended purposes.


Refusal to provide the data
The data subject can refuse to provide personal data to the data controller or revoke his/her consent.
If the provision of data, however, is required due to a legal or contractual obligation, any refusal or revocation of the provision will result in the data controller being unable to execute or continue the contract, for reasons not attributable to the latter.


Data recipients
The personal data processed by the data controller will not be disclose, i.e. they will not be brought to the attention of unknown parties, in any possible form, including making them available or for simple consultation. They may, however, be communicated to employees of the data controller and some external parties working in partnership with the data controller. They may also be communicated, within the strictly necessary limits, to parties who, for the purpose of issuing orders or requests for information or quotes, must provide goods and/or perform services. Lastly, they may be communicated to parties who are authorised to access them by virtue of the provisions of the law, regulations and EU regulations.
In particular, on the basis of the roles and tasks performed, some workers are authorised to process personal data, within the scope of their responsibilities and in accordance with the instructions given to them by the data controller.


Data storage time
The data provided by customers, who are natural persons and natural persons, who operate in the name and on behalf customers who are legal entities, will be stored in our archives and processed for the time required to fulfil the purposes indicated herein. Subsequently, the personal data stored and no longer processed, will be stored for the time laid down by the current provisions on civil and fiscal matters.


Data storage place
The data are currently processed and stored at the registered and operational headquarters of the data controller in Italy, Cortenova (LC) Largo De Vecchi no. 11.
They are also processed on behalf of the data controller by professionals and/or companies appointed to carry out technical, management, development, administrative, accounting, fiscal and legal activities, etc.


The data subject’s rights
The data subject shall, at any time, under Italian Leg, Decree 196/2003 and subsequent amendments and articles 15 to 22 of Regulation EU 2016/6791 have the right to:

  1. Accessing your data. The data subject shall have the right, at any time, to request and obtain from the data controller, information on the personal data processed (including confirmation as to whether or not personal data concerning him or her are being processed). He/she also has the right to access these data under article 15 of Regulation EU 2016/679 and extract a copy, provided that the rights and freedoms of others are not infringed.
  2. Verifying and rectifying your data. The data subject has the right to verify the accuracy of his/her data, to update, correct and integrate any inaccurate personal data concerning him/her, without undue delay, under article 16 of Regulation EU 2016/679.
  3. Obtaining erasure (Right to be forgotten). If the conditions indicated under art. 17 of Regulation EU 2016/679 exist, the data subject shall have the right to request the erasure of his/her data by the data controller.
  4. OObtaining restriction of the processing. If the conditions indicated under art. 18 of Regulation EU 2016/679 exist, the data subject shall have the right to request the restriction of data processing. In this case, the data controller shall not process the data for any purpose, with the exception of storage or for“for the establishment, exercise or defence of legal claims or the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State”.
  5. Obtaining data portability. The data subject has the right to receive his/her data in a structured, commonly used and machine-readable format and, where technically feasible, have the right to request and transmit those data to another controller without hindrance.
  6. Objecting to data processing. When the personal data are processed for the purposes of “the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller” or “the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child”, the data subject shall have the right to object to the processing on grounds relating to his or her particular situation. The data subject shall also have the right to object to the processing, at any time for direct marketing purposes, without the need to indicate specific reasons.
  7. Lodging a complaint. If the data subject considers that the processing of personal data relating to him or her infringes Regulation EU 2016/679, “he/she shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement”.
  8. Objecting to automated decision-making. The data subject shall have the right to object to the processing of his/her personal data wholly by automated means, including profiling, unless this form of processing is required to complete and/or fulfil the contract, is required by current legislation or carried out following the explicit consent of the data subject, who shall have the right to revoke it at any time.
  9. Revoking consent at any time. The data subject shall have the right to revoke consent to the data processing at any time. Revocation of consent does NOT, however, affect the lawfulness of the processing based on the consent given before the revocation;

The data subject can exercise his/her rights by writing to the data controller at the address indicated above either by certified email or by letter to the following address gdpr@melesi.it, specifying the reason for the request, the right that he/she intends to exercise and attaching a photocopy of his/her identity card which proves the legitimacy of the request.


Data transfer
For all the purposes indicated in this statement, personal data of a common nature related to the data subject will not be disclosed to any of the companies belonging to the group, subsidiaries, associated, etc., including those located abroad, inside and outside the European Union, in compliance with the rights and safeguards provided for by current legislation, subject to verification that the country in question guarantees an “appropriate” level of protection. The data controller hereby reserves the right to use cloud services, ensuring that the suppliers of the service are selected from those who supply suitable safeguards, as per article 46 of Regulation EU 2016/679 “European Regulation on the protection of personal data”.


Automated decision-making processes
The data controller does not process the data of natural persons using automated decision-making processes.


OFFICINE AMBROGIO MELESI S.r.l. recommends that you inform the data subjects (e.g. directors, employees and partners whose data the company receives for the purpose of executing the contract) about the content of this policy.


PDF Customer privacy policy


DPO Contact




1For more detailed information on the data subject’s rights, please consult Italian Leg Decree 196/2003 “Personal Data Protection Code” and subsequent amendments and Regulation EU 2016/679 “European Regulation on the protection of personal data”.

CHIUDI

WHISTLEBLOWING


OFFICINE AMBROGIO MELESI & C. S.r.l. is equipped with a system for receiving, managing, analysing and processing reports, including anonymous ones, making available to whistleblowers (workers, collaborators, consultants, suppliers, partners, shareholders and members of corporate bodies) a portal to communicate irregularities of which they have become aware to the relevant body of the Company. As described in the Whistleblowing Policy, OFFICINE AMBROGIO MELESI & C. S.r.l. ensures the protection and confidentiality of the identity of the whistleblower as well as of other persons deserving of protection in compliance with Legislative Decree no. 24/2023 and the information contained in the report (including the identity of the person who is the subject of the report) and, in any case, guarantees protection against any possible retaliation related to, even indirectly, to the facts reported.


The Platform must be used exclusively by persons defined as reporting persons pursuant to the legislation and for the purposes indicated.
They are not whistleblowing reports and will not, therefore, be taken into consideration, for example:


Submit a report


What other reporting channels can you use?
In addition to the above-mentioned Platform, which is to be considered preferential and suitable for guaranteeing the confidentiality of the whistleblower's identity by electronic means, the following channels may also be used:


External reporting channel managed by the National Anti-Corruption Authority (ANAC) In the cases exhaustively indicated pursuant to art. 6 and art. 19 of Legislative Decree no. 24/2023, it is also possible to make a report to the competent Authority on the subject (ANAC) through the channel available at the following link https://www.anticorruzione.it/-/whistleblowing.


Privacy
The information and personal data that are disclosed in the context of reports are processed to manage and follow up on the reports themselves, as well as to investigate any reported conduct and take the necessary measures in accordance with applicable laws, including the legislation on the protection of personal data.


FAQ


Platform Usage Guide


Legislative Decree 24/2023


Privacy