Address of its Registered office and Administrative headquarters:Via Mistrali 7, 43046 Rubbiano di Solignano PR, Italy
Phone: +39 0525 305811
Mail: surfacesolutions.EMEA@lincotek.com
Certified e-mail address: surfacesolutions@pec.lincotek.it
VAT number, Tax Code and ITVAT: IT 02087600348
Economic Administrative Index No.:PR 209992
Paid-up Share Capital € 7925778,00

www.lincoteksurfacesolutions.com/

privacy@lincotek.com

Business sector and activities:

• Contract manufacturer for integrated special services in Industrial Gas Turbine market (IGT) and Aviation market. (Surface Solutions

The User has arrived at these web pages via an advertisement on the internet or via an informational or promotional communication, upon prior specific consent given to:

• each product SBU, namely Surface Solutions, Equipment and MedicalBusiness Units (autonomous Data Controllers);
• As regards the product Additive, Lincotek Group S.p.A. will disclose the User’s personal data to the Surface Solution and Medical Business Units, as these latter are involved in the manufacturing and distribution of the product Additive (joint Data Controllers after data transfer);
• one of our suppliers (Lead or List Provider) for the purpose of being contacted for commercial communications by Third parties, also for products and/or services other than those for which the consent was given.

The User can:

• Be constantly kept up to date regarding the offered services and products;
• Request information free of charge and/or sales quotes for our products by filling out the dedicated contact form;
• Be contacted by experts in the field, so that the User’s application may be passed on to the relevant recipient that can better deal with it and provide the necessary information.

The User can also contact the company by sending an email to the email address specified on the website Contact us page.

Personal data are processed lawfully, fairly and in a transparent manner, and they shall be adequate, relevant and limited to the minimum necessary and, where necessary, kept up to date and collected for specified, explicit and legitimate purposes pursuant to Articles 5 and 6 of EU General Data Protection Regulation 2016/679 (GDPR) following consent if so required.

Personal Data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing, and against accidental loss, destruction or damage, by taking suitable technical and organisational measures (Integrity and Confidentiality).

In case of substantial modification to this Privacy Policy and to the related data processing the User shall be informed and shall have the right to decide whether or not to continue to use our services.

• Web pages and/or Social Media Profiles of the Data Controller.

Personal data NOT collected from the Data Subject:

• Web pages and/or Social Media Profiles of Suppliers -Lead Providers;
• Private databases (Purchase / Rental from Suppliers-List Providers, etc.);
• Public databases (international public IPaddresses etc.);
• Internet / Search engines / Social Networks

• Users: legal persons and other professionals, including the personal data of the workers and persons treated as such, corporate representatives, shareholders of the companies that are already customers of ours or potential ones

Personally identifiable information, contact details and other information: Name and Surname, Company Name, Country, City, Phone, E-mail address, Occupation and Capacity, Reason for the request, IP, Date and Time of the recording, IMEI number, MAC ADDRESS, where applicable, and any further information associated to the Data Subject’s device

• Information, brochure, advice, feasibility, quotations, assistance, quotation monitoring and customer satisfaction measurement, etc.
• including the necessary processing of other Subjects’ data whose services are used to promote, place and conclude a contract, and who are involved in the correct and complete management of requests -this data processing occurring upon prior notification to these Subjects (own Sales Network and/or Distributors and/or Agent).

Lawfulness of processing:

• Implementation of pre-contractual measures;
• Legitimate interest;
• Consent is not required.

• For a periodstrictly necessary for the correct and complete management of the request; further processing and retention at the request of the Data subject.
• Blocking/anonymisationof data once the request has been handled or after 24 months in case of Marketing consent

Lawfulness of processing:

• Legitimate interest of the Data Controller;
• Consent is not required

• • Duration of the contract (for the Data Controller).
  • Upon termination, data retention occurs in compliance with the legal requirements in force in the Country where data are stored (of the Recipient of the communication or Parent Company)

Lawfulness of processing:

• Consent (optional and revocable at any time);
• Legitimate interest of the Data Controller: for products or services that are similar to those objects of the previous saleby writing an e-mail; Data subjects shall object to the processing of their personal data on the occasion of the first communication or of the following ones (Soft Spam, art. 130, paragraph 4, Privacy Code as further amended by Legislative Decree);
• When there is no explicit initial refusal to consent to data processing and objection is possible at any time.

• Duration of the processing and retention period up to 24 months, starting from the date on which Consent was given.
• Duration of the contract (Soft Spam);
• Close to the expiry of the relevant period a new request for explicit consent must be made, failing which the data processing shall be stopped / only anonymisationand statistic in aggregate form are possible.

Lawfulness of processing:

• Consent given to our Suppliers (Lead or List Provider) for the purpose of being contacted for commercial communications by Third parties, also for products and/or services other than those for which the consent was given;
• Subsequent Consent given to us via our Forms and/or Web chat or to the Supplier via the Supplier’s Forms and/or Web chat to be used for both giving consent or objecting to being contacted by us;
• When there is no explicit initial refusal to consent to data processingand objection is possible at any time (withdrawal of consent can be done by contacting the Supplier and/or us).

• Duration of the processing and retention period determined by the Suppliers;
• Duration of the processing and retention period: see purposes connected with Pre-contractual Measures and/or Direct Marketing.

• Telephone call to landline numbers established by operator assistance and/or traditional mail (Italy: after consultation of the Italian Public Register of Objections / Outside Italy: after checking compliance with the legislation in force in the Country where the Data subject is established);
• Telephone call to mobile numbers established by operator assistance.

Automated contact methods:

• Fax;
• Text messages (SMS);
• Multimedia messages (MMS);
• E-mails;
• Newsletters;
• Chat and messaging (WhatsApp and other similar Instant Messaging solutions);
• Targeted advertising: online advertising,through Audience segmentation (for example age, geographical location, interests, etc.).

For more information about the different types of cookies we use and how to disable cookies please read the Cookie Policy.

Thanks to these technological tools we candeliver the same promotional communication to many recipients simultaneously by means of the above-mentionedcontact methods for marketing purposes.

These technical tools also allow us to know how advertising campaigns are performing by monitoring all visitors’ interactions and the storage of statistical information about the user’s web navigation in anonymous and aggregate form: for example we can find out how many users clicked a link and opened the message, the content of the message that aroused the greatest interest, the users’ geographical location when they sent the email, etc.

Italy:

a.Supervisory and monitoring Authorities and Bodies;
b.Police and Judicial Authorities;
c.Business transferees, transferees of a business branch, of legal relationships in bulk or of single legal relationships (for example the assignment of receivables or the transfer of contracts);
d.Persons/entities providing professional consultancy services also in partnership;
e.Persons/entities providing ICT services (Hosting/Data Center);
f.Credit agencies to check the solvency

European Union:

g.Companies, even foreign ones, that are associated or belong to the Group or to the Parent company LINCOTEK GROUP S.P.A. (Italy), also considering the existence of telematic IT links or of correspondence (Lincotek Surface Solution –Lincotek Medical –Lincotek Equipment);
h.As for the product Additive, data will be disclosed to the product Strategic Business Units Surface Solution and Medical, since these latter are involved in the manufacturing and distribution of the product;
i.Persons/entities providing ICT services (Hosting/Data Center); companies within the LINCOTEK GROUP S.P.A. (Italy);
j.Persons/entities providing ICT services (Hosting/Data Center)

Switzerland:

k.Companies, even foreign ones, that are associated or belong to the Group or to theParent company.

USA:

l.Companies, even foreign ones, that are associated or belong to the Group or to theParent company.

China:

m.Companies, even foreign ones, that are associated or belong to the Group or to theParent company.

Singapore:

n.Other commercial parties authorized to distribute our products based ontheir territorial competence corresponding to the same area to which the customer or the prospective customer belongs

Personal data may also be processed by external parties appointed as Data Processors acting in the name and on behalf of the Data Controller. The appointed external Data Processor shall receive adequate operative instructions. The above-mentionedexternal parties are included in the following categories:

Italy:

o.Persons/entities providingcompliance support services on a continuous basis;
p.Persons/entities providing IT, ICT, Cloud, Web and Digital Marketing services;
q.Persons/entities providing digital and physical archiving services and electronic storage;
r.Persons/entities providing mailing services and electronic mail services;
s.Persons/entities providing market research support services;
t.Companies or professional consultants providing other services;
u.Agents and other commercial parties authorized to distribute our products and services based ontheir territorial competence corresponding to the same area to which the customer or the prospective customer belongs;
v.Lincotek Trento S.p.A.: Web and Digital Marketing services.

European Union:

w.Agents or other commercial parties authorized to distribute our products based ontheir territorial competence corresponding to the same area to which the customer or the prospective customer belongs;
x.Entities providing IT, ICT, Cloud, Web and Digital Marketing services;

• Switzerland: Level of personal data protection being considered as adequate by a decision of the European Commission (Art. 25, paragraph 6, Directive 95/46/EC and Art. 45, paragraph 3 GDPR);
• USA, China and Singapore: the Personal data of Data subjects who are outside the EU/EEA shall be transferred to other commercial parties authorized to distribute our products within their territory, specifically to those customers or potential ones located in the same geographical area;For this reason, pursuant to Art. 3, paragraph 2 of GDPR, the European Regulation is not applicable and the personal data protection law in force in the States where the Data Recipients reside shall therefore apply.

A copy of your personal data maybe obtained by following the instructions provided in the following section “Rights of the Data subject-Lodge a complaint with a Supervisory Authority”

As regards Indirect Marketing, Data subjects can exercise their rights against us and/or the Supplier (Lead or List Provider). In order to guarantee these Rights and Claims, the Data Controller shall duly and immediately inform the Supplier about any Data Subject Access Request received by us or by the Supplier or by both, in particular when Data subjects object to processing of their personal data.

The Data Controller shall provide Data subjects with all relevant information on their requests to exercise their rights (pursuant to Articles 15 to 22 of GDPR) without undue delay and, in any case, no later than one month after the receipt of such request,as provided for by Article12 of GDPR.

If Data subjects no longer want to receive further advertisements,they shall write following statement in the subject header: “please erase my personal data -marketing”. In case of promotional advertising (Targeted Advertising) on websites and/or internet search engines and/or social networks, through the platform in use it is possible to know the reason why a Data subject is part of a target audience or a custom audience, in case he/she sees a promotional advertisement, and also how it is possible to get out of such audience: objection is possible at any time, consent is revocable by removing “Follow” or “Like” or “Hide ad or advertiser” in the section “Why you see this advertisement”, that can be selected directly from the Promotional Post