Privacy & cookies.
How we process the personal data of website visitors and job applicants, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Last updated: 31 October 2026
1. Data controller
Suardi S.p.A., registered office at Via Sarnico 66, Predore (BG), Italy, tax code and VAT no. 03231070164.
Email: info@suardispa.it · Certified email (PEC): suardispa@legalmail.it · Tel. +39 035 93 8184.
You can use these contact details for any question about the processing of your data or to exercise the rights described in section 7.
2. Data we process
Browsing data
The systems that run this website automatically collect some data whose transmission is inherent in the use of Internet protocols: IP address, date and time of the request, requested resource, response status, browser and operating system. This data is recorded in the server’s technical logs and is not used to identify or profile users.
Data you provide
- Job applications through the “Careers” form: full name, email, phone number, any notes and the attached CV. The CV is not stored on the website: it is forwarded by email to the office that handles recruitment.
- Email messages sent to the addresses published on the website: the data contained in the message, used to reply.
Please do not include special categories of data (for example health data) in your CV or notes unless strictly necessary; if present, they are processed only within the limits set by law.
Whistleblowing reports are submitted on the dedicated platform whistleblowing.suardispa.it, which has its own privacy notice.
Anti-bot check
The application form is protected by an anti-bot check hosted on our own servers (ALTCHA, open-source software): your browser solves a small mathematical task and the server verifies the result. No external services, cookies or tracking techniques are used.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Enabling browsing and keeping the website secure, including against automated submissions | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Assessing unsolicited job applications and contacting applicants | Pre-contractual steps taken at the applicant’s request (Art. 6(1)(b) GDPR) and Art. 111-bis of Italian Legislative Decree 196/2003 |
| Replying to requests sent by email | Request of the data subject (Art. 6(1)(b) GDPR) and legitimate interest |
| Showing videos hosted on YouTube | Consent, given through the banner or the button on the video (Art. 6(1)(a) GDPR) |
| Complying with legal obligations and protecting the controller’s rights | Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest |
Providing the data in the application form is optional, but the application cannot be assessed without the required fields. No automated decision-making or profiling takes place.
4. Retention
- Technical logs: for as long as needed for the security and operation of the service, unless required to investigate unlawful activity.
- Job applications: for as long as needed for recruitment and in any case no longer than 24 months from receipt, unless an employment relationship is established.
- Email correspondence: for as long as needed to handle the request and any follow-up.
- Cookie preferences: in your browser for up to 6 months, after which you are asked again.
5. Recipients and transfers
Data is processed by authorised staff of Suardi S.p.A. and may be disclosed to suppliers acting as data processors, in particular for website hosting and email services (OVH). Data is not disseminated.
The website loads its typefaces from Google Fonts (Google Ireland Ltd.): your browser sends your IP address to Google to download them, without cookies. If you choose to watch the videos, YouTube (Google) is also involved. Google may transfer data to the United States on the basis of the EU-US Data Privacy Framework and standard contractual clauses.
6. Cookies and external content
This website does not use profiling cookies or any analytics or marketing tools. Only technical information, which does not require consent, is stored in your browser:
| Name | Type | Purpose | Duration |
|---|---|---|---|
suardi-cookie-consent | Local storage, technical | Remembering the choice made in the banner | 6 months |
suardi-promo-… | Local storage, technical | Avoiding showing homepage announcements too often | Until cleared from the browser |
Some project pages contain YouTube videos (in privacy-enhanced mode, youtube-nocookie.com). They are loaded only if you accept external content in the banner or press “Load the video”: YouTube may then set cookies and collect data according to its own privacy policy. The other videos on the website are hosted on our own servers.
You can change your choice at any time from the link, also available at the bottom of every page. Cookies already set by third parties can be deleted from your browser settings.
7. Your rights
You may at any time ask the controller for access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Articles 15-22 GDPR), by writing to the contact details in section 1. Consent can be withdrawn at any time, without affecting processing already carried out.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Updates
This notice may be updated, for example when new services are added to the website. The date of the latest revision is shown at the top.