Privacy & cookies.
How we process the personal data of website visitors and job applicants, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Last updated: 2 November 2026
1. Data controller
Suardi S.p.A., registered office at Via Sarnico 66, Predore (BG), Italy, tax code and VAT no. 03231070164.
Email: info@suardispa.it · Certified email (PEC): suardispa@legalmail.it · Tel. +39 035 93 8184.
You can use these contact details for any question about the processing of your data or to exercise the rights described in section 7.
2. Data we process
Browsing data
The systems that run this website automatically collect some data whose transmission is inherent in the use of Internet protocols: IP address, date and time of the request, requested resource, response status, browser and operating system. This data is recorded in the server’s technical logs and is not used to identify or profile users.
Data you provide
- Job applications through the “Careers” form: full name, email, phone number, any notes and the attached CV. The CV is not stored on the website: it is forwarded by email to the office that handles recruitment.
- Email messages sent to the addresses published on the website: the data contained in the message, used to reply.
Please do not include special categories of data (for example health data) in your CV or notes unless strictly necessary; if present, they are processed only within the limits set by law.
Whistleblowing reports are submitted on the dedicated platform whistleblowing.suardispa.it, which has its own privacy notice.
Statistics (only with consent)
If you accept statistics, the website uses Google Analytics 4 to measure, in aggregate form, visits, page views, traffic sources and device types. Google Analytics 4 does not log or store full IP addresses. Without consent the tool is not loaded.
Anti-bot check
The application form is protected by an anti-bot check hosted on our own servers (ALTCHA, open-source software): your browser solves a small mathematical task and the server verifies the result. No external services, cookies or tracking techniques are used.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Enabling browsing and keeping the website secure, including against automated submissions | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Assessing unsolicited job applications and contacting applicants | Pre-contractual steps taken at the applicant’s request (Art. 6(1)(b) GDPR) and Art. 111-bis of Italian Legislative Decree 196/2003 |
| Replying to requests sent by email | Request of the data subject (Art. 6(1)(b) GDPR) and legitimate interest |
| Measuring website use in aggregate form (Google Analytics) | Consent, given through the banner (Art. 6(1)(a) GDPR) |
| Showing videos hosted on YouTube | Consent, given through the banner or the button on the video (Art. 6(1)(a) GDPR) |
| Complying with legal obligations and protecting the controller’s rights | Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest |
Providing the data in the application form is optional, but the application cannot be assessed without the required fields. No automated decision-making or profiling takes place.
4. Retention
- Technical logs: for as long as needed for the security and operation of the service, unless required to investigate unlawful activity.
- Job applications: for as long as needed for recruitment and in any case no longer than 24 months from receipt, unless an employment relationship is established.
- Email correspondence: for as long as needed to handle the request and any follow-up.
- Statistics: in Google Analytics, for the retention period set in the property (2 or 14 months); the
_gacookies remain in your browser for up to 2 years unless you withdraw consent. - Cookie preferences: in your browser for up to 6 months, after which you are asked again.
5. Recipients and transfers
Data is processed by authorised staff of Suardi S.p.A. and may be disclosed to suppliers acting as data processors, in particular for website hosting and email services (OVH). Data is not disseminated.
The accessibility widget (Sienna, open-source software) is loaded from the abacus85.it server and, only if you switch on the dyslexia-friendly font, downloads that font from website-widgets.pages.dev; it does not use profiling cookies. The website loads its typefaces from Google Fonts (Google Ireland Ltd.): your browser sends your IP address to Google to download them, without cookies. With your consent to statistics, browsing data is processed by Google Analytics (Google Ireland Ltd.), acting as data processor; if you choose to watch the videos, YouTube (Google) is also involved. Google may transfer data to the United States on the basis of the EU-US Data Privacy Framework and standard contractual clauses.
6. Cookies and external content
This website does not use profiling or marketing cookies. Technical information stored in your browser does not require consent; Google Analytics statistics cookies and YouTube videos are only enabled if you accept them in the banner (“Accept” or “Customise”).
| Name | Type | Purpose | Duration |
|---|---|---|---|
suardi-cookie-consent | Local storage, technical | Remembering the choice made in the banner | 6 months |
asw-user-settings | Local storage (or cookie), technical | Remembering the settings chosen in the accessibility widget (contrast, text size…) | Until cleared from the browser |
suardi-promo-… | Local storage, technical | Avoiding showing homepage announcements too often | Until cleared from the browser |
_ga | Third-party statistics cookie (Google Analytics), only with consent | Distinguishing visitors anonymously for statistics | 2 years |
_ga_T6D3BFEZ9B | Third-party statistics cookie (Google Analytics), only with consent | Keeping session state for statistics | 2 years |
Some project pages contain YouTube videos (in privacy-enhanced mode, youtube-nocookie.com). They are loaded only if you accept external content in the banner or press “Load the video”: YouTube may then set cookies and collect data according to its own privacy policy. The other videos on the website are hosted on our own servers.
If you withdraw consent to statistics, Google Analytics is switched off and the _ga cookies are deleted. You can change your choice at any time from the link, also available at the bottom of every page. Cookies already set by third parties can be deleted from your browser settings.
7. Your rights
You may at any time ask the controller for access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Articles 15-22 GDPR), by writing to the contact details in section 1. Consent can be withdrawn at any time, without affecting processing already carried out.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Updates
This notice may be updated, for example when new services are added to the website. The date of the latest revision is shown at the top.