Personal data protection policy notice

Dear User,

Pursuant to Article 13 of the European regulation 2016/679 (hereinafter the “GDPR”), below we provide you with information regarding the processing of personal data that may provided by you to Manuli Ryco S.p.A. through the website Manuli (

Data Controller details

The Data Controller is Manuli Ryco S.p.A. (hereinafter “MR” or “Data Controller”), with  registered office at via Pietro Paleocapa, 7 – 20121 Milano who can be contacted at the e-mail address and/or at the telephon number 02-62713326.


We are committed, as Data Controller, to safeguarding the privacy of our website visitors and services users when we determinate the purpose and methods of processing their personal data, which will be processed, in accordance with the GDPR and the principles of fairness, loyalty and transparency.

Type of data processed

Below are the general categories of data that we may process:

  1. Browsing data

We may process data related to the use of our website and services. Usage data may include IP address, geograpic position, browser type and version, operating system, referral source, legth of visit, page views and website navigation paths, as well as information about when, how often and how you use the service. The sourse of the usage data is our analytical tracking system. Those usage data may be processed for the analysis of website and service usage.

The legal basis for this processing is out legitimate interest, which is the monitoring and improvement of our website and services.

  1. Service related-data

The processing of data voluntarily and explicitly sent by you through the “Financial Data” and “Annual Report” sections of the site or through e-mail to the addresses indicated on this site involves the acquisition of your following data: first name, last name, company, address and e-mail as well as any other personal data requested by the form or entered in the message.

The legal basis for this processing is to respond to the request or provision of the service as well as our legitimate interest in maintaining the personal information of persons who communicate voluntarily with us.

The provision of this data is optional; failure to provide it will not allow MR to follow up on requests for information and/or provide the requested service.

  1. Recruiting data

The processing of your data contained in your curriculum vitae, sent through the “Careers” section of the site (which involves the acquisition of you following data: first name, last name, address and e-mail as well as any other personal data requested by the form or entered in the message) is aimed exclusively at evaluating the profile of candidates and selecting them. Those data may be disclosed to other company of the group but they will not be disclosed to third parties. In the event of a negative selection outcome, the data will be deleted according to the retention policies specified below. Any sensitive data included in resumes (relating, in particular, to racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, association s or organizations of a religious, philosophical, political or trade union nature, as well as personal data suitable for revealing the state of health and sex life) will result in the immediate deletion of such data in absence of a written declaration of consent of the person concerned to their processing by MR. The legal basis of this processing is our legitimate interest namely the identification and selection of workforce.

The provision of data is optional; failure to provide it will not allow MR to follow up on requests for information and/or the selection process.

  1. Account data for access to the restricted area

We may process account data. Account data may include the user’s first name, last name and cell phone, company to which the user belongs and e-mail address. Account data may be processed for the purposes of accessing the restricted area of the website, managing MR’s website, providing of MR’s services, ensuring the security of MR’s website and services, maintain backup of MR’s database and communicating with the user.

The legal basis of this processing is our legitimate interest in verifying access to the documentation published in the restricted area.

  1. Marketing data

Only with your consent pursuant to Article 6(1)(a) GDPR, MR may process your personal data for information, promotional and commercial purposes regarding its products and services. The legal basis of this processing is your consent. Such consent is optional and failure to give it will not prevent the provision of the service you have requested from us, but only the possibility that MR will send you material and/or informative/advertising communications deemed of interest.

Methods of treatment

The processing of your personal data may be carried out both by automated and non-automated means, by means of the following operations: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. The processing is carried out in compliance with the rules of security and confidentiality provided by law. The processing is carried out exclusively by the Data Controller, external data processors in charge of providing the services requested from the user and by the persons in charge of the processing.

Recipients of personal data

The data collected for the purposes indicated above may be communicated to companies that carry out functions strictly connected and instrumental to the operation of the individual services requested, as well as to associated companies and/or part of MR group in Italy and abroad. In order to fulfil legal obligations, your data may also be communicate to competent Authorities and Public Bodies.

The data collected for marketing and profiling purposes indicated above cloud be communicated to associated companies and/or part of the MR group involved in marketing and profiling activities, as well as to suppliers – specifically identified as external data processors – appointed by MR to carry out activities related and instrumental to marketing and profiling activities including, for example, companies that offer e-mailing services for marketing purposes, companies that offer support in carrying out market studies or companies that offer profiling tools.

International transfers of personal data

The Data Controller does not transfer your personal data outside the Europea Economic Area.

Data Retention

This section outlines our data retention policies and procedures designed to ensure compliace with legal obligations in relation to the retention and deletion of personal data.

Personal data that we process for any purpose or purposes will be retained no longer than is necessary for that purpose or those purposes.

We will retain your personal data as follows: in some cases it is not possible to specify in advance the retention periods for personal data. In these cases, we will determine the retention period based on the following criteria:

  • necessity;
  • obligation of law;
  • our legitimate interest.

Right of data subjects

In relation to the processing operations described in this notice, as a data subject, you may exercise the rights enshring in Articles 15 to 22 of the GDPR and, in particular, the following rights:

  • right of access – right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to your personal data;
  • right to rectification – right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the suplementation of incomplete data;
  • right to erasure (right to be forgotten) – right to obtain, without undue delay, the erasure of personal data concerning you. The right to erasure does not apply to the extent that the processing is necessary for the performance of a legal obligation or the performance of a task carried out in the public interest or for the establishment, exercise of defence of a right in court;
  • right to restriction of processing – right to obtain restriction of processing;
  • right to data portability – right to receive, in a structured, commonly used and machine-readable format, personal data concerning you and to provide it to another Data Controller;
  • right to object – right to object to the processing of personal data concerning you on grounds relating to your particular situation and in any case to the use of your data for marketing purposes;
  • right not to be subjected to automated decision-making – right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;
  • right of complaint to the Supervisory Authority – right to lodge a complaint with the Data Protection Authority:;
  • right to revoke the consent – right to revoke the consent given on any occasion without affecting the lawfulness of the processing previously carried out.

You may exercise any right in relation to his or her personal data by sending an email with the relevant request to the following address:


This policy is effective as of 17/12/2018 and updated to 19/06/2024.

We may update this policy from time to time by posting a new version on our website.

You should check this page occasionally to make sure you are happy with any changes to this policy.

We may notify you of significant changes to this policy via email or other communication systems.