Mecnafer S.P.A

T. 0039 041/538 20 62
info@mecnafer.it
More about SPENO INTERNATIONAL

Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data carried out through the website “mecnafer.it” is:

Mecnafer S.p.A.
Address: Via Banchina Molini 6, 30175 Porto Marghera (VE), Italy
Telephone: +39 041 538 20 62
E-mail: info@mecnafer.it

These contact details may be used for any questions relating to this privacy statement and, more generally, to the processing of personal data carried out by Mecnafer S.p.A.

Data Protection Officer (DPO)

Mecnafer S.p.A. has not appointed a Data Protection Officer within the meaning of Articles 37 et seq. of the GDPR.

2. Scope of this privacy statement

This privacy statement describes the processing of personal data when:

  • you browse the pages of the website “mecnafer.it”;
  • you contact Mecnafer using the contact details (telephone, e-mail) published on the site;
  • the site measures its audience by means of Google Analytics 4 (GA4), with consent collected via a cookie banner implemented through the Complianz plugin.

The site does not provide:

  • any online contact form;
  • any comment area;
  • any user account creation;
  • any newsletter subscription form.

Processing activities relating to any internal reporting channel (whistleblowing) or to other external services accessible from the site are governed by specific privacy notices, which complement this statement.

3. Categories of personal data

Depending on how you interact with the site, Mecnafer may process the following categories of data.

3.1 Browsing data and technical logs

When you access the site, the IT systems and software procedures responsible for its operation collect, as part of their normal functioning, certain personal data whose transmission is implicit in the use of Internet communication protocols, including:

  • IP address;
  • date and time of the request;
  • URI/URL of the requested resources;
  • HTTP status code;
  • device and browser identifiers, operating system, language settings;
  • technical logs generated by security systems (firewalls, anti-intrusion systems, etc.).

These data are mainly used to:

  • enable connection to the site;
  • obtain aggregated and anonymised statistical information on the use of the site;
  • verify proper functioning and ensure the security of systems.

3.2 Data relating to communications (telephone, e-mail)

When you contact Mecnafer by telephone or e-mail using the contact details published on the site, the following data may be processed:

  • identification and contact data (name, surname, company, position, telephone number, e-mail address);
  • any content that you choose to include in your message or communicate orally.

No web form is present on the site; the only contact data are therefore those that you decide to provide through these channels.

3.3 Cookies and audience measurement data (Google Analytics 4)

The site uses cookies and similar technologies within the limits set by EU and Italian law on cookies and by the guidelines of the Italian Data Protection Authority (Garante) on cookies and other trackers.

In particular, the site uses:

  • technical cookies, which are necessary for the operation of the site (for example, navigation management, load balancing, security);
  • cookies and technologies for audience measurement by means of Google Analytics 4 (GA4).

Google Analytics 4 collects information such as:

  • online identifiers assigned by cookies or similar technologies;
  • IP address (GA4 does not store or log IP addresses in reports);
  • device and browser information;
  • browsing and usage information (pages viewed, events, session duration, approximate geographic area, etc.).

The detailed characteristics of each cookie (name, purpose, storage period, type – first or third party) are described in the Cookie Policy and in the cookie banner managed by the Complianz plugin.

4. Purposes and legal bases of processing

Personal data are processed for the following purposes on the legal bases indicated below, in accordance with Article 6 GDPR.

4.1 Operation, administration and security of the site

  • Purpose: to enable consultation of the site, ensure the proper technical functioning of pages and systems, monitor and prevent fraudulent or abusive activities, and guarantee the security of the infrastructure.
  • Data processed: browsing data, technical logs and security logs.
  • Legal basis: the legitimate interest of the controller in ensuring the security and proper functioning of the site (Art. 6(1)(f) GDPR).

4.2 Handling requests and communications

  • Purpose: to respond to requests for information, quotations, support or other messages sent by telephone or e-mail using the contact details indicated on the site.
  • Data processed: identification and contact data, content of communications.
  • Legal basis:
    performance of pre-contractual measures or of a contract at the request of the data subject (Art. 6(1)(b) GDPR), where a contractual relationship is envisaged or in force;
    the legitimate interest of Mecnafer in effectively managing its relationships with customers, suppliers and other stakeholders (Art. 6(1)(f) GDPR).

4.3 Audience measurement and statistical analysis (Google Analytics 4)

  • Purpose: to analyse traffic on the site, understand how pages are consulted and improve the content and structure of the site.
  • Data processed: online identifiers, browsing and usage information, event data and user-related data as collected by Google Analytics 4.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), collected through the cookie banner (Complianz), which activates or blocks audience-measurement cookies and trackers according to your choices.

The cookie banner is configured so that Google Analytics cookies that are not strictly necessary are only activated after you have given your consent to statistics cookies. The technical configuration with Google services may be adjusted and optimised over time to better reflect your consent choices.

4.4 Compliance with legal obligations

  • Purpose: to comply with obligations arising from EU or Italian law, regulations or requests from authorities (for example civil, accounting, administrative, compliance or whistleblowing-related obligations).
  • Data processed: categories of data limited to what is necessary in order to fulfil each specific obligation.
  • Legal basis: compliance with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR).

If Mecnafer were to process data in the future for purposes other than those described above, additional information would be provided in advance in accordance with Article 13(3) GDPR.

5. Mandatory or optional nature of data provision

  • Provision of browsing data is implicit in the use of Internet communication protocols. Without such data, it may be technically impossible to consult the site.
  • Provision of communication data (by telephone or e-mail) is optional, but necessary for Mecnafer to handle your request. In the absence of such data, Mecnafer may not be able to respond properly.
  • The activation of non-essential audience measurement cookies (Google Analytics 4) is optional and based on your consent. Refusal or withdrawal of your consent does not affect access to the site, but may limit the accuracy of the statistical analyses carried out by Mecnafer.

6. Recipients of data and transfers to third countries

6.1 Recipients

Data are processed only by authorised Mecnafer staff, acting on the basis of documented instructions and bound by confidentiality obligations.

Data may be disclosed, to the extent strictly necessary, to the following categories of recipients:

  • providers of IT, hosting, maintenance and support services for the site and infrastructure;
  • providers of audience-measurement services (such as Google Ireland Limited for Google Analytics 4);
  • external advisers (for example law firms, accounting and tax consultants);
  • public authorities, supervisory bodies or courts, where required by law or by their requests.

Third parties that process personal data on behalf of Mecnafer are designated as processors under Article 28 GDPR and act on the basis of specific contracts.Complianz

6.2 Transfers to third countries

Use of Google Analytics 4 may involve the transmission of certain data to countries outside the European Economic Area, in particular the United States, as part of Google’s global infrastructure.

In such cases, Mecnafer endeavours to ensure that such transfers are framed in accordance with Articles 44 et seq. GDPR (for example, through standard contractual clauses and/or other recognised mechanisms). More detailed information on the safeguards implemented may be obtained by contacting Mecnafer at the contact details indicated in section 1.

7. Retention periods

In line with the principle of storage limitation (Art. 5(1)(e) GDPR), Mecnafer keeps personal data for no longer than is necessary for the purposes for which they are processed.

Indicatively:

  • browsing data and technical logs: kept for a limited period strictly necessary for the operation and security of the site (for example a few weeks or months), unless a longer retention period is required in the event of security incidents or requests from authorities;
  • data from communications (e-mail exchanges, etc.): kept for the time required to handle the request and, where appropriate, for the limitation periods provided by law for the protection of Mecnafer’s rights;
  • Google Analytics 4 audience-measurement data: GA4 is currently configured with the following retention settings:
    event data: 2 months;
    user-level data: 14 months.

These settings correspond to retention options offered by Google Analytics 4 for user and event data and may be adjusted if Mecnafer modifies its configuration, in compliance with the principle of data minimisation.

8. Rights of data subjects

Under Articles 15 to 22 GDPR, you have the following rights with regard to your personal data, subject to the applicable conditions:

  • right of access: to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, to access the data and certain information (purposes, categories, recipients, retention periods, etc.);
  • right to rectification: to obtain the rectification of inaccurate data and the completion of incomplete data;
  • right to erasure (“right to be forgotten”): to obtain the deletion of your data in the cases provided for by the GDPR;
  • right to restriction of processing: to obtain the restriction of processing in the cases provided for by the GDPR;
  • right to data portability: where the processing is based on your consent or on a contract and is carried out by automated means, to receive your data in a structured, commonly used and machine-readable format and to transmit those data to another controller;
  • right to object: to object at any time, on grounds relating to your particular situation, to processing based on the legitimate interest of Mecnafer, including any profiling;
  • right to withdraw consent: where processing is based on your consent (for example for certain audience-measurement cookies), you may withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You may exercise your rights by writing to info@mecnafer.it or to the postal address indicated in section 1.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, Italy – website: www.garanteprivacy.it – e-mail: protocollo@gpdp.it, in accordance with Article 77 GDPR.

9. Security of processing

Mecnafer implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, in accordance with Article 32 GDPR.

10. Changes to this privacy statement

This privacy statement may be updated periodically, in particular to reflect changes in applicable legislation or in the processing activities carried out by Mecnafer (for example changes to audience-measurement tools or the introduction of new online services).

The updated version will be published on this page and will indicate the date of the latest revision.

Date of latest update: 23.11.2025