Personal Data Processing Notice

pursuant to Articles 13–14 of Regulation (EU) 2016/679 · Website cime-srl.com

Current legislation, in particular Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the «GDPR») and Italian Legislative Decree no. 196/2003 as amended (the «Privacy Code»), guarantees that personal data is processed with respect for the rights, fundamental freedoms and dignity of natural persons, with particular reference to confidentiality, personal identity and the right to data protection.

In light of the above, CIME S.r.l. · Crescenzi Induction Melting, with registered office at P.zza Vittorio Veneto 4 – 10123 – Torino (TO), Italy, VAT IT 04827530017, as data controller (the «Controller» or the «Company»), provides you with the following information on the processing of Personal Data collected through the website cime-srl.com (the «Website»).

This notice may be amended, supplemented or updated from time to time, also in view of changes in the applicable legislation or measures of the Italian Data Protection Authority and/or the European Data Protection Board. Updates will be published on this page.

1. What Personal Data may be processed

Contact Data: name, surname, company, country, email address and any information you spontaneously include in your message when contacting us. The Website has no registration and no reserved area: contact takes place through your own email client (the contact buttons pre-fill an email). The only form on the Website is the product datasheet download form, which asks for your email address; the data recorded when you download a document is listed in section 2, letter f).
Usage Data: data on how you use the Website, such as pages visited, your cookie choices, technical connection data including IP addresses or domain names, URI addresses of requested resources, time of the request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the server's response, including information collected through cookies, detailed in the Cookie Policy.

As a rule, the Company does not process special categories of personal data nor data relating to criminal convictions and offences. The Website performs no profiling. Technical and commercial communications are sent only with your specific prior consent, as described in section 2, letter g).

2. Purposes and legal basis of processing

a. Browsing the Website. Usage Data is processed to deliver the Website and ensure its security and proper functioning. Legal basis: legitimate interest of the Company (Art. 6(1)(f) GDPR). Provision is inherent to accessing the Website; the nature of Usage Data depends on your cookie choices, as described in the Cookie Policy.
b. Responding to contact requests. Contact Data is processed to respond to requests for information, quotations or support sent by email. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). Provision is optional, but without it we cannot respond.
c. Website usage statistics. Usage Data is processed in aggregate form with IP anonymisation (Google Analytics 4) to measure how the Website is used. Legal basis: consent (Art. 6(1)(a) GDPR), given through the cookie banner. Refusing consent has no consequence on the use of the Website; consent may be withdrawn at any time as described in the Cookie Policy.
d. Protection of rights. Your Data may be processed by the Company to protect its rights, including in connection with claims or legal proceedings, and to prove that it has responded to data-subject requests. Legal basis: legitimate interest of the Company (Art. 6(1)(f) GDPR).
e. Legal obligations. Your Data may be processed to comply with a legal obligation and/or with orders or requests of the competent authorities. Legal basis: legal obligations to which the Company is subject (Art. 6(1)(c) GDPR).
f. Product datasheet downloads. The email address entered in the download form is processed to deliver the requested document. Legal basis: consent (Art. 6(1)(a) GDPR), given through the form checkboxes. For each download the Company records, as proof of consent: the email address, the requested document and language, the originating page, a timestamp, the consents given and a pseudonymised network identifier (the IP address is never stored in clear text). Provision is necessary to receive the document; without it we cannot send it to you.
g. Technical and commercial communications. The email address is processed to send technical and commercial communications about the Company's products. Legal basis: consent (Art. 6(1)(a) GDPR). Provision is optional: refusing this consent does not affect datasheet downloads or the use of the Website in any way. Consent may be withdrawn at any time by writing to the contacts in section 8: withdrawal stops further communications and does not affect the lawfulness of processing carried out before the withdrawal.

3. Sources of the Data

Data is collected by the Controller directly from you, through your use of the Website and the communications you choose to send us.

4. Security and retention

Processing is based on the principles of fairness, lawfulness and transparency, and is carried out with tools suitable to guarantee confidentiality and with security measures appropriate to the risk. Access to your Data is limited to those who need it for relevant purposes.

Retention periods by purpose: browsing: Usage Data is kept in pseudonymised form for six months, without prejudice to the periods indicated in the Cookie Policy; contact requests: no longer than ten years from each communication, consistently with the limitation periods of the Italian Civil Code; statistics: statistics cookies last up to thirteen months, unless consent is withdrawn; protection of rights and legal obligations: for the duration of the relevant proceedings and in any case for the time reasonably necessary. Data no longer needed is irreversibly anonymised or securely destroyed.

5. Who we may share your Data with

Data may be accessed by persons duly authorised and instructed by the Company, and may be communicated to the following categories of external recipients, acting as autonomous controllers or duly appointed processors: external consultants and suppliers such as cloud, IT or hosting providers (in particular Vercel Inc. for website hosting, Cloudflare Inc. for video content delivery, Google Ireland Limited for the statistics service activated upon consent and for storing datasheet request records); professional firms, where necessary to protect the Company's rights; police forces and public authorities, in compliance with legal obligations. Your Data will never be transferred to third parties for marketing purposes. The updated list of processors may be requested from the Company.

6. International transfers

The Company may need to transfer your Data to countries outside the European Economic Area. In that case, the Company will provide adequate safeguards in accordance with data protection law, including Standard Contractual Clauses approved by the European Commission. In particular, the Company uses providers located in the United States (Vercel, Cloudflare, Google): such transfers take place under the conditions of the adequacy decision of 10 July 2023 as amended (EU–US Data Privacy Framework) pursuant to Art. 45 GDPR, or on the basis of Standard Contractual Clauses.

7. Your rights and the right to lodge a complaint

Subject to the conditions of the GDPR, you have the right to request from the Company: access to your Data and its rectification; erasure; restriction of processing; portability of Data processed by automated means on the basis of consent or contract; withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You also have the right to object, on grounds relating to your particular situation, to processing based on the Company's legitimate interest.

The exercise of these rights is subject to certain exceptions aimed at safeguarding the public interest and/or the Company's rights. Requests are answered, as a rule, within one month. You may also lodge a complaint with the competent supervisory authority (the Italian Garante per la protezione dei dati personali, www.gpdp.it) or apply to the competent courts.

8. Contact

The Controller's contact details are: financial@cime-srl.com · CIME S.r.l., P.zza Vittorio Veneto 4, 10123 Torino, Italy.

Last updated: 17 August 2026.