Privacy Policy

---

World Metal Exchange recognizes the importance of preserving the confidentiality, integrity and security of your personal data and informs you the personal data you provide to World Metal Exchange through the web site (“The Site”) or app (“The App”) will be processed in compliance with the current European Privacy law, Reg. EU 2016/679 (GDPR). The data processing carried out is based on principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and confidentiality.

The Privacy Policy of website/app may be regularly updated and the date of last update will be indicated on the website page. Through this Privacy Policy, we inform you how we process your personal data. We

recommend you read this Privacy Policy in its entirety so that you can better make the appropriate choices. Amendments and updates will be mandatory as soon as they are posted on the website or app.

Data Subject are those who submit their personal data using the website or app and are the final beneficiaries of the protection provided by the Reg. UE 2016/679 (GDPR). In case of non-acceptance of modification to the Privacy Policy, the Data Subject must cease using the website and may request deletion of the personal data.

World Metal Exchange s.r.l. with legal seat in Milan at Largo Augusto no.7, postcode 20122, VAT code

13127100967, email address faas@pennings-metaalrecycling.nl 

While using the website or app, the data controller processes the following categories of personal data

provided by Users.

a) Professional Users and Third-party Supplier data: Personal data of the Data Subject, i.e. name,

surname, tax code, email, address, phone number, city and all company data;

b) Tax and payment data: Tax code, Vat code, credit card number, bank account;

c) Browsing data: Includes IP addresses or domain names of computers used by Users who connect to

the Site, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the

time of the request, the method used in submitting the request to the server, the size of the file

obtained in response, the status of the response given by the server (the numerical code indicating

successful completion, error, etc.) and other parameters related to the User's operating system and

computer environment.

Not providing personal data necessary for the conclusion of the contract will cause the impossibility to use the website or app owned by World Metal Exchange.

Processing of personal data is necessary for the following reasons:

- Enable Users to use the Website: Allow navigation of the website;

- Improve, monitoring the website navigation: develop, personalize, and improve the Website or

technical problem solving (server, database);

- Compliance with law: based on art. 6.1 of Reg. 679/2016 (GDPR) or fulfilling any obligation

required by law;

- For the execution of the contract with the Users: Execution of any obligation arising from the

contract with the Users;

- Registration and authentication of the Users: to enable the Users to register on the web site/app,

log in and be identified and also be identified by external platforms;

- Support of the Users: In order to respond to Users' requests

- Statistic purpose: To conduct anonymous studies, research, market statistics, send commercial

information or to improve the service.

- Payment management: In order to manage the payment by credit cards, bank transfer or other

payment methods;

- Fraudulent conduct: for the exclusive purposes of security and prevention of fraudulent conduct

and safeguard the security of infrastructure based on the consent of the User;

- Communication of Personal Data for third-party marketing purposes: communicate to third

parties operating in the sector  of Metal business for them to use to send commercial and/or promotional

information or to carry out market research.

World Metal Exchange website allows interactions with external platforms which data processing is

governed by respective Privacy Policy. World Metal Exchange is not responsible for the privacy policies

and data protection policies of any such third parties and their affiliates. We strongly recommend you to

review the Privacy Policies of all third parties and their affiliates in order to know how they would

process the personal information they may collect from you.

Personal Data are processed by paper and automated tools for the time strictly necessary to achieve the

purposes for which they were collected. The treatment of Personal Data is carried out for the following

activities:

- collection, recording, organization, storage, consultation, processing, modification, selection,

extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of

data.

Personal data are processed exclusively by:

a) Authorized personnel of the data controller such as employees;

b) Individuals acting as data controllers;

c) Individuals who carry out activities necessary for the services offered by the World Metal Exchange,

or individuals with whom it is necessary to interact for the execution of the Services, or delegated to

carry out technical maintenance activities (including the maintenance of network equipment and

electronic communication networks), or companies in the group or related to the Owner (Italian or

foreign) that carry out administrative or statistical purposes;

d) Business partners for their own autonomous and distinct purposes;

e) Individuals, entities or authorities to whom it is obligatory to communicate your Personal Data by

law or orders of the authorities;

Individuals listed above are required to use all safeguards to Protect Personal data and they may access

the data in order to perform their tasks.

Personal data will not be released indiscriminately in any way.

If necessary, for purposes related to use the website/app some personal data may be shared with data

recipients or Data Controller outside the European Economic Area (EEA). The personal data that may be

transferred are:

a) Personal data of users and suppliers;

b) Voluntarily provided data;

The Data Controller will take all appropriate measures in order to guarantee high level of protection. In

fact, the data transfer will be conducted through appropriate safeguards such as adequacy decisions,

standard data protection clauses adopted by the European Commission.

Listed hereinafter are the data controllers to whom World Metal Exchange transfers data outside the

European Union (EEA):   faas@pennings-metaalrecycling.nl 

Personal Data will be retained for as long as necessary to achieve the purpose stated in art. 4 of this

Privacy Policy and in compliance with the law. For more information on retention times, you can contact

the Data Controller by email at fabio@wmetrade.com

At the end of the retention period, all data will be deleted or stored in the way that the Data Subject cannot be identified.

La gente scrive cose entusiastiche su di te sui social media? Condividi le testimonianze per poter trasformarRegarding the personal data processed by the Data Controller, the Data Subject has the right to:

a) Access to his/her Personal Data (according to art. 15 GDPR);

b) Rectification of his/her Personal Data (according to art. 16 GDPR);

c) Deletion of his/her Personal Data (according to art.17 GDPR);

d) Restriction the processing of Personal Data (according to art. 18 GDPR);

e) Data portability (according to art. 20 GDPR)

f) Object to processing of his/her Personal Data (according to art. 21 GDPR)

g) Withdrawal of his/her consent for the stated purposes;

h) File a claim with the relevant supervisory authority “Garante Privacy” (according to art. 77 GDPR);

In order to exercise any right, the Data Subject can send a written request to   faas@pennings-metaalrecycling.nl . The requests will be handled by the Data Controller immediately and processed as soon as possible, in any case within 30 days.