Privacy & Cookie Policy

INTRODUCTION

The processing of personal data carried out by FERRIERE DI STABIO SA is carried out in compliance with the Federal Data Protection Act (FADP) and EU Regulation 679/2016, the principles of fairness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, and protection of integrity and confidentiality.

This Privacy & Cookie Policy is intended for the website www.fdstabio.com, hereinafter referred to as the ‘Website’).

The Data Controller is FERRIERE DI STABIO SA (FERRIERE)

To request further information on the processing of personal data or to exercise your rights, you may contact us:

• by writing to: FERRIERE DI STABIO SA

Via Laveggio n. 6/A

6855 – Stabio

Switzerland

• by writing to the email address:

info@fdstabio.com

1 What is personal data and what is processing?

Personal data is information that identifies or can identify, directly or indirectly, a natural person and that can provide information about their characteristics, habits, personal relationships, etc. Personal data includes, but is not limited to: name, surname, address or other contact details, an identification number or an online identifier.

Processing is any operation performed with or without the aid of automated processes and applied to personal data. Processing includes, but is not limited to: the collection, recording, organisation, storage, modification, consultation, erasure or destruction of data.

2 What personal data is processed?

a. Navigation data

During normal operation, the IT systems used to operate the website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow the User to be identified. This data includes the IP addresses or domain names of the computers used by Users connecting to the Website; the URI addresses of the resources requested (Uniform Resource Identifier); the time of the request; and other parameters relating to the User’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the website in order to check its correct functioning, to identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Owner or third parties.

b. Data provided by the User

– The optional, explicit and voluntary sending of e-mails to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message.

– Personal data such as name, surname, e-mail address and telephone number are collected by the Data Controller when the ‘Contact’ form is completed.

– If you are interested in one of the job positions listed in the ‘Work with us’ section, the data contained in your CV and the personal data provided by the Candidate through the form will be collected.

3 Purpose of processing

The User’s personal data will be processed for the following purposes:

3.1 Responding to User requests by providing general information about Ferriere’s services;

3.2 Responding to potential candidates in relation to job vacancies in the ‘Work with us’ section;

3.3 Complying with obligations under the law or regulations and satisfying requests from the competent Authority;

4 Legal basis for the processing of User data

Each processing operation is justified by one of the following legal grounds:

• Processing is necessary to fulfil the User’s requests. In this case, the provision of personal data is mandatory;

• Processing is necessary to comply with a legal obligation. In this case, the provision of data is mandatory;

• Processing is necessary for the pursuit of the legitimate interest/overriding interest of the Data Controller, provided that it does not override the interests or fundamental rights and freedoms of the User requiring the protection of personal data. In this case, the provision of data is optional.

5 To whom the data may be disclosed

As part of Ferriere’s activities and for the purposes specified above, the User’s personal data may be shared with:

• Duly appointed data processors who provide specific processing or ancillary services on behalf of the Data Controller and under its instructions; the User may request an updated list of Data Processors at any time;

• Independent data controllers to whom the data may be disclosed pursuant to legal provisions or orders from the Authorities;

• Persons authorised by the Data Controller to process personal data necessary for the performance of activities strictly related to the supply of products and who have assumed an appropriate legal and contractual obligation of confidentiality (e.g. employees and/or collaborators of the Data Controller).

6 Where is the data stored?

All personal data is stored electronically on servers located in Switzerland and the EU.

7 How long are the data stored?

The User’s personal data is stored in compliance with current regulations for the period of time necessary to achieve the purpose for which it was collected.

The CV and any personal data of Candidates for a period not exceeding 24 months from receipt of the CV, in the event of unsuccessful application; if the Data Controller considers the application interesting, it may retain the relevant personal data, subject to the candidate’s consent, for a period not exceeding 5 years.

8 What are the User’s rights?

The User may request, at any time, confirmation as to whether or not their personal data is being processed, and in relation to this, they have the right to: • request access to the data to obtain information on the purposes of the processing, the recipients to whom the data may be disclosed, the duration of the processing (where possible) and the possible consequences of processing based on profiling;

• withdraw consent at any time, without prejudice to the lawfulness of processing based on consent given prior to withdrawal;

• request the rectification of personal data if it is inaccurate or incomplete;

• request the erasure of data if it is no longer necessary for the Controller for the purposes of the processing, is inadequate in relation to the purposes of the processing, the User has withdrawn their consent or the data has been processed unlawfully; • request the restriction of data processing, in the cases provided for by law; • request the transfer of data to another Data Controller, in a commonly used and machine-readable format, without hindrance from the current Data Controller;

• object to the processing of your data and, specifically, you have the right to object to decisions concerning you if they are based solely on automated processing of your data, including profiling;

• lodge a complaint with the competent authority if you believe that the processing of your data violates current data protection legislation.

To exercise your rights, you may use the contact details provided in the INTRODUCTION.

9 Automated decision-making process

The User is not subject to decisions based on automated processing.

10 Cookie Policy

The Cookie Policy provides information on how data is collected when users browse the website and how this data is used.

Cookies are lines of text that act as computer markers sent by a server (in this case, that of the Website) to a user’s device (usually the Internet browser) when they access a given page of a website; Cookies are automatically stored by the user’s browser and retransmitted to the server that generated them each time the user accesses the same Internet page. In this way, for example, cookies enable and/or facilitate access to certain Internet pages to improve the user’s browsing experience (i.e. they allow the storage of visited pages and other specific information, etc.), or in some cases they enable profiling activities.

Features and purposes of cookies

Our Website uses the following categories of cookies:

‘Necessary Cookies’ (so-called technical cookies): These are necessary to allow you to browse the Website and use its features. In particular, they enable functions without which it would not be possible to fully use the Website, since their presence enables basic functions such as page navigation and access to protected areas of the Website.

Cookie duration criteria

• ‘Session cookies’ are cookies that are active only for the session in question and allow the information necessary for navigation from one page to another to be temporarily stored, avoiding the need to re-enter it. • ‘Persistent cookies’ are cookies that expire on a specific date or after a certain period of time.

How to manually enable or disable cookies on your browsers

You can block the acceptance of cookies on the website or certain categories of cookies by your browser, even manually. However, this may make some functions or pages of the website less efficient or prevent access to them. Below are the methods offered by the main browsers to manually block the acceptance of cookies:

• Internet Explorer

• Firefox

• Chrome

• Safari

• Tor

• Srware

Description of how to consent to the installation of cookies Your consent is not required for the use of technical cookies (‘Necessary’).

10 Changes

Ferriere reserves the right to modify or simply update the content of this Privacy & Cookie Policy, in part or in full, including due to changes in applicable legislation. Such changes will be binding as soon as they are published on the Website. If the User continues to access or use the service after such publication, it is assumed that they have expressly accepted these changes. Ferriere therefore invites the User to visit this section regularly to take note of the most recent and updated version of the Privacy & Cookie Policy in order to be always up to date on the data collected and the use that Ferriere makes of it.

Date: 29.02.2024