WEBSITE PRIVACY POLICY
Privacy Notice, provided pursuant to Article 13 of EU Regulation 2016/679
Your trust is our priority. WAMGROUP S.p.A., with registered office in Modena, Strada degli Schiocchi no. 12, Tax Code and VAT no. 03017030366 (hereinafter also referred to as “WAMGROUP” or the “Controller”), is a multinational company with an operational presence in over 40 countries. In compliance with EU Regulation 2016/679 (hereinafter also referred to as the “GDPR”) and the applicable legislation on the protection of personal data, WAMGROUP is committed to safeguarding the personal data of users collected through its corporate websites.
1. Data Controller
The Data Controller is WAMGROUP S.p.A., with registered office in Modena, Strada degli Schiocchi, 12, Telephone: +39 0535 618 111 – Email: privacy@wamgroup.com.
The Controller is established within the territory of the European Union and is therefore not required to appoint a representative. The Controller has not designated a Data Protection Officer (DPO), as the conditions set forth under Article 37 of the GDPR are not currently met.
2. Types of Processing and Related Characteristics
| Type of Processing | Purpose | Legal Framework | Personal Data Collected | Retention Period |
| Contact Form | Responding to contact requests and commercial inquiries | Performance of pre-contractual measures (Art. 6(1)(b) GDPR) | First Name, Last Name, Company, Location (Country, Region, ZIP Code), Email, Phone | 10 years from the last interaction |
| Reserved Area Registration | Access to reserved areas | Consent (Art. 6(1)(a) GDPR) | First Name, Last Name, Company, Location, Email, Phone, Sectors of interest, Social media, Products of interest | 10 years from the last access and, in any case, until consent is withdrawn |
| Newsletter Subscription | Sending informational and commercial newsletters | Consent (Art. 6(1)(a) GDPR) | First Name, Last Name, Company, Location, Email, Phone, Sectors of interest, Social media, Products of interest | 10 years and, in any case, until consent is withdrawn |
| Submission of Curriculum Vitae | Assessment of candidates for current or future recruitment and hiring purposes | Performance of pre-contractual measures (Art. 6(1)(b) GDPR) / Explicit consent for special categories of personal data (Art. 9(2)(a) GDPR) | Identification data, contact details, professional experience, any special categories of personal data (for example, relating to health, etc.) voluntarily provided | 2 years from the submission date |
| Supplier Application | Evaluation of applications for business collaborations | Performance of pre-contractual measures (Art. 6(1)(b) GDPR) | Company data, VAT number, contact details, voluntarily provided documentation | 10 years from the application |
It should be noted that no processing of personal data is based on “legitimate interest” (Art. 6(1)(f) GDPR).
Furthermore, the data will not be subject to automated decision-making, including profiling.
3. Methods of Processing
Processing will be carried out using both electronic and paper-based means, in compliance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality.
WAMGROUP has adopted appropriate technical and organisational measures pursuant to Art. 32 GDPR to ensure the security of the data processed, with particular regard to protection against unauthorised or unlawful processing, as well as accidental loss, destruction or damage.
4. Scope of Disclosure and Transfer of Personal Data Abroad
Personal data may be processed by individuals specifically appointed by the Controller as “Data Processors” (if designated) and/or by anyone acting under the authority of the Controller who has access to personal data (for example, directors/shareholders/employees/associates of the Controller). Such individuals will process personal data only where necessary in relation to the purposes of collection and solely within the scope of the tasks assigned to them by the Controller, undertaking to process exclusively the data required for the performance of those tasks and to carry out only the operations necessary for their fulfilment. Furthermore, in relation to the specific purposes indicated under Section 2 of this Privacy Notice, and only where strictly necessary, personal data may be disclosed to the following categories of recipients:
- WAMGROUP group companies;
- Providers of IT services connected with the processing of personal data.
Personal data will not be disseminated.
The Controller may transfer personal data to a third country or an international organisation in the following cases:
- WAMGROUP group companies located outside the territory of the European Union.
Any transfer abroad will take place exclusively in compliance with the conditions laid down in Chapter V of the GDPR. Please note that, where necessary, a copy of the safeguards relating to the transfer may be requested from the Controller by contacting the Controller through the contact details indicated in Section 1 of this Privacy Notice, or by any other means deemed appropriate. A copy of such safeguards will also be made available at the Controller’s registered office.
5. Nature of the Provision of Data and Consequences of Failure to Provide Such Data
In relation to the individual purposes of processing and the corresponding legal basis indicated in Section 2 of this Privacy Notice, the provision of personal data is, depending on the case, optional (subject to the data subject’s free consent) or necessary for the conclusion of a contract. The data subject is not obliged to provide the data or, when required, to give consent to their processing; however, failure to provide such data may result in the impossibility of pursuing the specific purposes of processing indicated in Section 2 of this Privacy Notice.
6. Rights of the Data Subject
As data subjects, pursuant to Articles 15–22 of the GDPR, you may exercise the following rights at any time:
- obtain confirmation as to whether or not personal data concerning you exist and access such data;
- request their rectification, erasure, restriction of processing, or data portability;
- object to processing, in the cases provided for;
- for processing of personal data based on Art. 6(1)(a) and Art. 9(2)(a) GDPR, withdraw consent at any time,
- without affecting the lawfulness of processing based on consent before its withdrawal.
The full text of the GDPR provisions relating to these rights can be consulted at the following link on the website of the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): https://www.garanteprivacy.it/regolamentoue, or alternatively, will be provided by the Controller upon simple request.
In addition, if the data subject considers that the processing of personal data carried out by the Controller is in violation of the GDPR, they have the right to lodge a complaint with the competent Supervisory Authority, as provided for by Article 77 GDPR, or to seek judicial remedy before the competent courts (Art. 79 GDPR).
7. Browsing Data
In addition to the information indicated above, please note that during browsing, technical information may be collected that does not contain personal data, such as, for example, browser type, operating system, referring page, and time spent on the site. Such information is used in aggregated form for statistical purposes and to improve the website, and may be shared with WAMGROUP group companies.
8. Links to Third-Party Websites
This website may contain links to third-party websites. WAMGROUP is not responsible for the data processing practices adopted by such websites. Users are advised to consult the respective privacy notices.
9. Amendments to this Privacy Notice
This Privacy Notice may be subject to updates. In the event of significant changes, notice will be provided through a visible communication on the website, making the different versions of the document available. If you have any questions, comments or requests regarding this Policy, please contact us; we also invite Users/Visitors to report any difficulties encountered in viewing this Privacy Policy, so that alternative means of information may be arranged.
Last update: June 2025