Step Engineering S.r.l. (hereinafter referred to as “Step Engineering”) believes in an honest and transparent processing of personal data. We believe it is important that our visitors and customers understand when and what kind personal data we collect.
“Personal data” means any information relating to an identified or identifiable person, as definied in Article 4 of the “General Data Protection Regulation” (GDPR – Regulation 2016/679).
We collect personal data of people who visit our website, make a written request, apply for a job or use the chat to get information.

1.1 Data provided by the User
When you visit our website:
we recommend reading our cookie policy.
When you submit a contact request via email or contact form on our website:
we collect the data and contact information that the User writes in his contact request.
When applying for a job:
we collect contact information, the text submitted for the application and the CV.
When registering for the newsletter:
we collect the contact details registered in the confirmation e-mail received during the registration.
When you use the chat with Step Engineering:
we collect data and contact information.

Data of minors 16 years
If you are under the age of 16, you can not provide us with any personal information, in any case we do not take responsibility for any false statements from you.
If we become aware of the existence of any false statements, we will proceed with the immediate cancellation of any personal data acquired.

Our site is managed with WordPress; by default WordPress does not collect personal data about visitors and only collects the data shown on the User Profile screen by registered users.

1.2 Data we collect automatically
We collect the following data through the services the User uses:

    • technical data: eg IP address, browser type, information on your computer, current data.
    • data collected from cookies or similar technologies: for more information, please visit the “Cookies” section.

Step Engineering processes the Personal Data of Users by adopting appropriate security measures to prevent access, disclosure, modification or unauthorized destruction of Personal Data.
The user has the right to know who he manages his data, whom he can make inquiries to, he can be aware of the purpose of the collection and processing of his personal data and the legal basis to which we refer.
We may share your personal data with third parties. The User has the right to know the identity of these third parties and how we protect your personal data when we transfer them.
The data controller of your data is:
Step Engineering S.r.l.
VAT number 04199670268
Via Castellana 199
31023 Resana – Treviso (TV) – ITALY
E-mail: privacy@stepconsulting.eu
As the data controller, Step Engineering determines the purpose and means of the processing of your personal data. Requests concerning your personal data can be forwarded to the responsible data controller.


2.1 What are the purpose and the legal basis for the processing of personal data?
When you visit our website:
We recommend reading our cookie policy.

When you submit a contact request via email or contact form on our website:
Purpose: the personal information we collect is to respond to the specified request and provide an appropriate response.
Legal basis: we process personal data in line with the legitimate interest.

When applying for a job:
Purpose: we use your personal data to deal with your request.
Legal basis: we collect your personal data in order to eventually stipulate a work collaboration/employment.

When subscribing to the newsletter:
Purpose: by subscribing to the mailing list or the newsletter, the e-mail address of the User is automatically added to a list of contacts to whom will be transmitted e-mails containing general and promotional information related to this Site.
Legal basis: we collect personal data related to the subscription to the newsletter in line with the legitimate interest

When you use the chat with Step Engineering:
Purpose: the function is an immediate communication between the users of the site Step Engineering.com and Step Engineering S.r.l. for informational questions.
Legal basis: we collect your personal data to communicate about activities and products of Step Engineering on legitimate interest.


2.2 Third party services

Email addresses managing and sending emails
These services allow to manage a database of email contacts used for communication with the user.
These services may also allow us to collect data relating to the date and time the messages are displayed by the User, as well as to the User’s interaction with them, such as information on clicks on the links inserted in the messages.
Mailchimp
Mailchimp is an address management and e-mailing service provided by Mailchimp Inc.
Personal data collected: Email, Name and Surname.
Place of data processing: USA – Privacy Policy

Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses Personal Information collected for the purpose of evaluating the use of this Site, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its advertising network.
At the following link: https://tools.google.com/dlpage/gaoptout?hl=it is available the browser add-on for the deactivation of Google Analytics.
Personal data collected: Cookies and usage data
Place of data processing: USA – Privacy PolicyOpt Out 

Interaction with Social Networks
These services allow you to make interactions with social networks, or other external platforms, directly from the pages of this site.
The interactions and information acquired from this Site are subject to the User’s privacy settings related to each social network.
If an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, the same collect traffic data relating to the pages in which it is installed.
Linkedin Button and social widget (LinkedIn Corporation)
Linkedin button and social widgets are services of interaction with the social network Linkedin, provided by LinkedIn Corporation.
Personal data collected: Cookies and usage data
Place of data processing: USA – Privacy Policy
Facebook “Like” button and social widget (Facebook, Inc.)
Facebook “Like” button and social widgets are services of interaction with the social network Facebook, provided by Facebook, Inc.
Personal data collected: Cookies and usage data
Place of data processing: USA – Privacy Policy

Chat
These services allow us to manage information provided by the client used to communicate with him/her.
These services may also allow us to collect data relating to the date and time the messages are displayed by the User, as well as to the User’s interaction with them, such as information on clicks on the links placed in the messages.

Widget Video Youtube (Google Inc.)
Youtube is a video content visualization service managed by Google Inc. that allows this Site to integrate such contents within its pages.
Personal data collected: Cookies and usage data
Place of data processing: USA – Privacy Policy 

Google Font (Google Inc.)
Google Fonts is a service of character styles visualization managed by Google Inc. that allows this Site to integrate such contents within its pages.
Personal data collected: Cookies and usage data
Place of data processing: USA – Privacy Policy 

Google Maps (Google Inc.)
Google Maps is a map visualization service managed by Google Inc. that allows this site to integrate such contents within its pages.
Personal data collected: Cookies and usage data
Place of data processing: USA – Privacy Policy 

Google Traduttore (Google Inc.)
Google Translate provides an automatic translation of the site in various languages that the user can choose from the widget at the top of every page of the site.
Personal data collected: Cookies and usage data
Place of data processing: USA – Privacy Policy 

Notice: we do not intend to further process your personal data for purposes other than those mentioned above.

Step Engineering can provide your personal data to internal recipients. These recipients are allowed access to your data in order to achieve the purposes previously described. Inside Step Engineering it can be allowed to the following categories of recipients:
• Marketing: for promotion of services and events via newsletter, as well as for offers; upon request by telephone or through the “Contact” form on our website
• Administration: to evaluate offers and contracts; and related payment methods

Besides Step Engineering, in some cases, the access to the Data may be allowed to persons involved in the organization of the site (legal, system administrators) or external subjects (suppliers of third party technical services, hosting providers) appointed, if necessary, Responsible of Data Treatment by Owner.
Step Engineering does not share your personal data with any external recipient (third parties) who intends to use it for direct marketing purposes, unless you have specifically consented that.

The retention of personal data will be in paper and / or electronic format, and for the time strictly necessary to fulfill the purposes referred to in Point 1, in compliance with your privacy and current regulations.
For direct marketing and profiling purposes, we store your data for a maximum period equal to that envisaged by the applicable legislation (respectively equal to 24 and 12 months).
Invoices, accounting documents and transaction data are stored for 11 years in accordance with the law (including tax obligations).

In case of the oblivion exercise through the request for explicit cancellation of personal data processed by the owner, we remind you that such data will be kept, in a protected form and with limited access, only for purposes of ascertainment and repression of crimes, no more than 12 months from the date of the request and then will be securely deleted or anonymised irreversibly.

Finally, we remind you that for the same purposes, the data relating to electronic traffic, excluding the contents of communications, will be kept for a period of no more than 6 years from the date of communication, based on art. 24 of the Law n. 167/2017, which implemented the EU Directive 2017/541 on anti-terrorism.

If you do not exercise any active action (for example navigation, searches and / or any other way of using the service) on StepEngineering.it for a period of 27 months, you will be classified as an inactive user and your personal data will be deleted automatically.

4.1. Export and cancellation of the processing of personal data
To export your personal data (takeout) or request cancellation, you can send a request to the email address privacy@stepconsulting.eu.
Your personal data will be exported within 30 days or, in case the export becomes particularly complex, within three months.
The cancellation will be carried out in the scheduled technical times and in accordance with the retention period specified in Point 4.

4.2. Exercise of you rights
Any person who uses our service can:

    • obtain from the owner, at any time, information about the existence of their personal data, the origin of the same, the purposes and methods of treatment and, if present, to obtain access to personal data and information referred to in Article 15 of the GDPR
    • request the updating, rectification, integration, deletion, limitation of data processing if one of the conditions provided in Article 18 of the GDPR occurs, the transformation into anonymous form or blocking of personal data, processed in violation by law, including those that do not need to be kept for the purposes for which the data were collected and / or subsequently processed
    • to object, in whole or in part, for legitimate reasons, to the processing of data, even if pertinent to the purpose of the collection and processing of personal data provided for the purposes of commercial information or commercial communication. Each user also has the right to withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation
    • receive personal data, provided knowingly and actively or through the use of the service, in a structured format, commonly used and readable by automatic device, and transmit them to another data controller without impediments
    • propose a complaint to the Italian Data Protection Authority

We remind you that for any question or request concerning your personal data and the respect of your privacy you can write to the dedicated address privacy@stepconsulting.eu

No internet transmission is completely secure or error-free, nor data stored without vulnerable aspects.
The data are collected by the subjects mentioned in Point 3, according to the indications of the relevant legislation, with particular regard to the security measures provided by the GDPR (Article 32) for their processing by means of IT tools, manual and automated and with strictly related logic to the purposes indicated in Point 1 and in any case in such a way as to guarantee the security and confidentiality of said data.
We constantly update the software for the management of our website.

No internet transmission is completely secure or error-free, nor data stored without vulnerable aspects.
The data are collected by the subjects mentioned in Point 3, according to the indications of the relevant legislation, with particular regard to the security measures provided by the GDPR (Article 32) for their processing by means of IT tools, manual and automated and with strictly related logic to the purposes indicated in Point 1 and in any case in such a way as to guarantee the security and confidentiality of said data.
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Furthermore we constantly update the software for the management of our website.

Last updated on 04/06/2018.