Home  /  Privacy policy

Privacy policy

This is the Privacy Policy of RIRI S.A.

Privacy Notice pursuant to Article 13 of EU Regulation 2016/679 for contacts on the site

This privacy notice is provided pursuant to Article 13 of EU Regulation 2016/679 (hereinafter also Regulation); according to the law indicated, this data processing will be characterised by the principles of correctness, lawfulness and transparency and protection of your confidentiality and of your rights.
Therefore, RIRI S.A., which has its registered office in Via al Gas, 3 – 6850 Mendrisio, Switzerland – and a Permanent Establishment in Italy (with an office in Viale della Regione Veneto 3, in Padua, and a secondary office in Via Vanoni 40, in Tirano-Sondrio), as Data Controller (with email address gdpr.so@riri.com), informs you that your personal data are processed in automated form primarily, applying data security measures that guarantee the protection and maximum confidentiality of the data processed, to send you to send you the information you requested via the form on our website.

The legal basis for the processing is constituted by a request by the data subject; the data needs to be provided, and the Data Controller cannot carry out the relevant activities without such data.
The data will be kept until the request is processed.

The data may be communicated to companies that support the data controller in managing the website and to persons/entities authorised by applicable secondary legislative and/or regulatory provisions to access the data.
The data may be transferred to the parent company resident in non-EU countries (Switzerland) for the management of personnel, of IT systems and for the implementation of activities that are instrumental to and required by the organisational activities of the company and the group; the transfer of data is authorised by a decision of adequacy.
Personal Data will not be disseminated.

The Data Controller’s representative in Italy is Mr. Michele Perini.

We inform you, finally, that you may exercise the rights contemplated by Article 12 of the Regulation, by writing to gdpr.so@riri.com.
You may therefore request to know the origin of the data and also the logic and the purposes of the data processing; to obtain the cancellation, anonymisation or blocking of data processed in violation of law, and also the updating, correction or, as appropriate, the supplementation of said data; to oppose the data-processing for legitimate reasons. The right to withdraw one’s consent at any time is guaranteed; however, data processing operations carried out based on consent given prior to the revocation shall be legitimate. The rights to data portability and to lodge a complaint with a supervisory authority are guaranteed.

PRIVACY NOTICE FOR EACH USER

This is the Privacy Policy of RIRI S.A. and it is accessible at the address www.riri.com and from the link included in the email messages of RIRI S.A., Permanent Organisation in Italy – in the offices of Padua and Tirano.
The privacy notice is also prompted by European Recommendation No. 2/2001 for the protection of personal data, which identifies a number of minimum requirements for the collection of personal data online and, in particular, the procedures, times and nature of the information which data controllers are required to provide to users when the latter connect to webpages, independently of the purposes of said connection.
This document may be updated and it relates to our website exclusively and not to other websites which the user may happen to consult using links, in relation to which RIRI S.A. accepts no responsibility in relation to content and data processing system.

The Data Controller

The Data Controller is RIRI S.A., which has its registered office in Via al Gas, 3 – 6850 Mendrisio, Switzerland – and a Permanent Establishment in Italy, (with an office in Viale della Regione Veneto 3, in Padua, and a secondary office in Via Vanoni 40, in Tirano – Sondrio).
The Data Controller’s representative in Italy is Mr. Michele Perini.

Place of the data processing

The data processing takes place at all of the aforementioned offices. More specifically, data processing activities associated with the web services take place at the Mendrisio and Padua offices and are handled by data-processing operators exclusively or, as relevant, by persons appointed to carry out specific maintenance operations. No data deriving from the web service are disseminated. Personal data supplied by users who request the transmission of informative material (bulletins, CD-ROMs, newsletters, annual reports, answers to questions, documents and official measures, etc.) are processed exclusively in order to implement the service requested.

Type of data processed

Browsing data: the computer systems and software procedures used to operate our websites receive, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not gathered in order to be associated with specific data subjects but it could, by its nature, enable users to be identified by means of processing and association with data held by third parties. This category includes IP addresses or the domain names of computers used by users who connect with the site, addresses in URI (Uniform Resource Identifier) notation of requested resources, the time the request is made, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the response status from the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. Such data may only be used to obtain anonymous statistical information about the use of the website and to monitor its proper operation, and they will be deleted immediately after processing. The data may be used for the purposes of establishing liability in the event of computer crimes which harm the website: other than this, data on web contacts will not be kept for more than seven days.

Data voluntarily provided by the User: the specific voluntary transmission of emails to the addresses indicated on our websites involves and entails the subsequent acquisition of the sender’s email address, which is necessary in order to respond to requests, and also of any other personal data included in the message.

Cookies: no personal data of users is acquired by our sites in this context. No use is made of cookies to transmit information of a personal nature, nor are “persistent cookies” of any kind used, or user tracking systems. The use of “session cookies” (which are not stored permanently on the user’s computer and disappear once the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) which are necessary to ensure safe and efficient navigation of the website. The use of session cookies on this website avoids the need to use other information technologies that could compromise the privacy of users’ navigation, and does not allow the user’s personal identification data to be obtained.

Optional data provision

Apart from the provisions indicated in relation to navigation data, the user is free to supply the personal data indicated in the application form. Failure to provide such data may make it impossible for one’s request to be processed or satisfied.

Data processing methods

Personal data are processed using automated electronic means and devices only for the period of time that is strictly necessary to achieve the purposes for which such data have been gathered. Specific security measures are used to prevent the loss or unlawful or incorrect use of the data, as well as unauthorised access thereto.

Rights of Data Subjects

We inform you, finally, that you may exercise the rights contemplated by Article 12 of the Regulation, by writing to gdpr.so@riri.com.
You may therefore request to know the origin of the data and also the logic and the purposes of the data processing; to obtain the cancellation, anonymisation or blocking of data processed in violation of law, and also the updating, correction or, as appropriate, the supplementation of said data; to oppose the data-processing for legitimate reasons. The right to withdraw one’s consent at any time is guaranteed; however, data processing operations carried out based on consent given prior to the revocation shall be legitimate. The rights to data portability and to lodge a complaint with a supervisory authority are guaranteed.

Copyright Notices – all rights reserved.

All of the material on our websites, including layout and design features, is owned exclusively by RIRI S.A., is copyrighted and is protected by copyright laws applicable. All persons/entities are therefore prohibited from reproducing such material, partially or otherwise, in any manner and for any purpose whatsoever on other websites, mailing lists, newsletters, hard copy magazines and CD-ROMs or other media, without prior authorisation from RIRI S.A.. Offenders will be prosecuted in accordance with law. If such specific authorisation is forthcoming, however, it is obligatory to cite the source used (our website), indicating that the person/entity reproducing it takes full responsibility for its use and reproduction.

Registered Trademarks: all the trademarks indicated on the RIRI S.A. websites are attributable exclusively to the entitled parties. These trademarks are indicated for information purposes only and RIRI S.A. claims no right over them, save to the extent that it has produced them itself. Any person/entity who considers that the citation of its trademark, as it appears on the RIRI S.A. website, is inappropriate, incorrect or otherwise unacceptable may notify this by registering in the CONTACTS section of the RIRI S.A. website and transmitting a simple message to this effect. Any such citation will be eliminated or changed at the earliest possible opportunity, as having been included unknowingly and in good faith, if it is considered inconsistent with the protection of the interested party’s image or if it is acceptable to the interested party.

Terms of use: permission to use the content on our websites may be issued by RIRI S.A.. Please contact RIRI S.A. for authorisations or clarifications on copyright and terms of use. By viewing this document, the terms of use contained therein are deemed to have been read and duly approved.

Disclaimer: the data, documents, files and information contained on our website are provided for information purposes alone. Although great care is taken in managing the content of our websites, neither RIRI S.A. nor its content providers or collaborators can be held liable for any errors or lacunae, or for direct, indirect, consequential loss or for any other type of loss associated in any way with the use of this website and the functionality contained therein. The contents can be updated and/or improved without notice and without following any predetermined time periods.

Privacy Notice pursuant to Article 13 of EU Regulation 2016/679 for customers and suppliers

This privacy notice is provided pursuant to Article 13 of EU Regulation 2016/679 (hereinafter also Regulation); according to the law indicated, this data processing will be characterised by the principles of correctness, lawfulness and transparency and protection of your confidentiality and of your rights. Therefore, RIRI S.A., which has its registered office in Via al Gas, 3 – 6850 Mendrisio, Switzerland – and a Permanent Establishment in Italy (with an office in Viale della Regione Veneto 3, in Padua, and a secondary office in Via Vanoni 40, in Tirano-Sondrio), as Data Controller (with email address gdpr.so@riri.com), informs you that your personal data are processed in automated form primarily, applying data security measures that guarantee the protection and maximum confidentiality of the data processed, in order to carry out the following activities:

1. the implementation of obligations arising from the contract to which the data subject is party, the implementation of administrative and accounting activities and of tax compliance requirements based on obligations determined by legislative or regulatory provisions.
2. the legal basis of the processing is constituted by the management of the contract or the implementation of pre-contractual obligations.
3. the data will be stored in compliance with applicable regulatory provisions for the sector and, in any case, for 10 years from the last contact with the supplier.
4. The provision of data to facilitate the data-processing operations described is necessary, and any refusal may make it impossible to pursue the aforementioned purposes.

The data may be communicated to companies that support the data controller in administrative, accounting and IT management activities, and to persons/entities authorised by applicable secondary legislative and/or regulatory provisions to access the data.
The data may be transferred to the parent company resident in non-EU countries (Switzerland) for the management of personnel, of IT systems and for the implementation of activities that are instrumental to and required by the organisational activities of the company and the group; the transfer of data is authorised by a decision of adequacy.
Personal data will not be disseminated.

We inform you, finally, that you may exercise the rights contemplated by Article 12 of the Regulation, by writing to gdpr.so@riri.com.
You may therefore request to know the origin of the data and also the logic and the purposes of the data processing; to obtain the cancellation, anonymisation or blocking of data processed in violation of law, and also the updating, correction or, as appropriate, the supplementation of said data; to oppose the data-processing for legitimate reasons. The right to withdraw one’s consent at any time is guaranteed; however, data processing operations carried out based on consent given prior to the revocation shall be legitimate. The rights to data portability and to lodge a complaint with a supervisory authority are guaranteed.

Privacy Notice pursuant to Article 13 of Regulation 679/2016 for candidates

Pursuant to Article 13 of Regulation 679/2016 (hereafter Regulation) RIRI S.A., which has its registered office in Via al Gas, 3 – 6850 Mendrisio, Switzerland – and a Permanent Establishment in Italy (with an office in Viale della Regione Veneto 3, in Padua, and a secondary office in Via Vanoni 40, in Tirano-Sondrio), as Data Controller (with email address gdpr.so@riri.com), informs you that your personal data will be used in hard copy form to carry out personnel selection activities. The legal basis for the processing is constituted by pre-contractual activity.
Consent constitutes the legal basis for the data-processing, in case of particular data that are not required (e.g. religious, philosophical, political and trade union opinions). The data will be kept and stored for 6 months in Switzerland and 12 months in the Permanent Establishment in Italy. The aforementioned data needs to be provided if the aforementioned purposes are to be pursued.
The data may be communicated to companies that support the data controller in managing the selection and to persons/entities authorised by applicable secondary legislative and/or regulatory provisions to access the data. The data may be transferred to the parent company resident in non-EU countries (Switzerland) for the management of personnel, of IT systems and for the implementation of activities that are instrumental to and required by the organisational activities of the company and the group; the transfer of data is authorised by a decision of adequacy.
Personal Data will not be disseminated.

We inform you, finally, that you can exercise the rights contemplated by the Article 12 of the Regulations, by writing to gdpr.so@riri.com.
You may therefore request to know the origin of the data and also the logic and the purposes of the data processing; to obtain the cancellation, anonymisation or blocking of data processed in violation of law, and also the updating, correction or, as appropriate, the supplementation of said data; to oppose the data-processing for legitimate reasons. The right to withdraw one’s consent at any time is guaranteed; however, data processing operations carried out based on consent given prior to the revocation shall be legitimate. The rights to data portability and to lodge a complaint with a supervisory authority are guaranteed.

Privacy Notice pursuant to Article 13 of EU Regulation 2016/679 for the newsletter

This privacy notice is provided pursuant to Article 13 of EU Regulation 2016/679 (hereinafter also Regulation); according to the law indicated, this data processing will be characterised by the principles of correctness, lawfulness and transparency and protection of your confidentiality and of your rights.

Therefore, RIRI S.A., which has its registered office in Via al Gas, 3 – 6850 Mendrisio, Switzerland – and a Permanent Establishment in Italy (with an office in Viale della Regione Veneto 3, in Padua, and a secondary office in Via Vanoni 40, in Tirano-Sondrio), as Data Controller (with email address gdpr.so@riri.com), informs you that your personal data are processed in automated form primarily, applying data security measures that guarantee the protection and maximum confidentiality of the data processed, to send you the newsletter as you requested.

The legal basis for the processing is constituted by the data subject’s consent; the data provision is optional, but the Data Controller will not be able to implement the relevant activities if the data are not provided. You may revoke your consent at any time. Your revocation of consent shall not compromise the legitimacy of data-processing operations implemented on foot of your consent provided prior to said revocation.

The data will be stored until such time as a request for cancellation is received from you.

The data may be communicated to companies that support the data controller in managing the website and to persons/entities authorised by applicable secondary legislative and/or regulatory provisions to access the data. The data may be transferred to the parent company resident in non-EU countries (Switzerland) for the management of personnel, of IT systems and for the implementation of activities that are instrumental to and required by the organisational activities of the company and the group; the transfer of data is authorised by a decision of adequacy.
Personal Data will not be disseminated.

The Data Controller’s representative in Italy is Mr. Michele Perini.

We inform you, finally, that you may exercise the rights contemplated by Article 12 of the Regulation, by writing to gdpr.so@riri.com.

You may therefore request to know the origin of the data and also the logic and the purposes of the data processing; to obtain the cancellation, anonymisation or blocking of data processed in violation of law, and also the updating, correction or, as appropriate, the supplementation of said data; to oppose the data-processing for legitimate reasons.
The right to withdraw one’s consent at any time is guaranteed; however, data processing operations carried out based on consent given prior to the revocation shall be legitimate. The rights to data portability and to lodge a complaint with a supervisory authority are guaranteed.

© 2016 Riri SA via al GAS, 3 - CH-6850 Mendrisio - Privacy policy