Raffmetal achieves TISAX certification and takes a decisive step towards excellence in data security

Raffmetal achieves TISAX certification and takes a decisive step towards excellence in data security

January 12, 2024

Raffmetal, Europe's leader in the production of recycled aluminium alloys, has achieved a significant milestone in the field of cyber security.

"It is a great pride for us to announce that we have obtained the prestigious TISAX certification." Affirm, Michele Nardi and Stefano Vampini, IT Manager and Accounting Manager respectively, who have supervised the whole process.

TISAX certification is an information security assessment and certification system designed specifically for the automotive sector. This platform is designed to facilitate the exchange of sensitive information between companies and their suppliers, while ensuring high standards of information security.

Obtaining this certification, validated by DNV, proves that Raffmetal sticks to strict data security standards, ensuring compliance with regulations and laws on the protection of sensitive information.

Furthermore, through regular evaluations, the company identifies and introduces measures to mitigate the associated risks by taking preventive measures to continuously improve its performance.

"Being TISAX-certified consolidates our position as a reliable business partner in the automotive sector, opening up new opportunities and strengthening the trust of our current and future customers." claims Sales Manager Paolo Gamberini.

This achievement comes from the collective efforts of a multidisciplinary team of highly competent IT, administrative, legal and business technicians and of all the employees who, through their commitment, have adopted best practices in information security.

To sum up, TISAX certification assures customers that they will find in Raffmetal a reliable supplier operating within a solid regulatory and operational framework, bringing significant benefits to the supply chain in terms of credibility, reputation, regulatory compliance and effective management of information security risks.

With the addition of this certification, Raffmetal continues to confirm its commitment to excellence and consolidate its position as a benchmark in the field of recycled aluminium alloys for the automotive industry.

Back to the news

INFORMATION NOTE pursuant to Art. 13 L.D. 196/2003

Dear Sir/Madam,
please be informed that Legislative Decree no. 196 of June 30th 2003 (Personal Data Protection Code) provides the regulations concerning the protection to persons and other subjects regarding the processing of personal data.
In line with the above-mentioned decree, the processing of your data shall always be based on principles of accuracy, honesty and transparency further to the safeguarding of your privacy, confidentiality and rights.

In accordance with the requirements of art. 13 of Legislative Decree no. 196/2003, pleased be informed as follows:
1. The data you provide will be processed for the purposes indicated below:
- mailing of commercial information;
- advertising of events, products and news;
- news on the visit you made to the company;
- mailing of newsletters;
- registration in the company database.
2. The data will be processed using manual and electronic systems used to save, manage and transmit the data, for reasons strictly related to the stated purposes, according to the data in our possession.
3. The collection of data is optional, and lack of consent to provide the same information will not have any consequence.
4. Your non-sensitive personal data may be communicated to:
- all those subjects to whom the regulations and laws grant the right to access such data;
- our collaborators and employees, within the scope of their relative duties;
- post offices, hauliers and couriers pursuant to the sending of documents and/or material, when the communication is necessary or essential for the performance of our activities and according to the terms and for the purposes stated above;
- all those physical and/or juridical persons, when the communication is necessary or essential for the performance of our activities and according to the terms and for the purposes stated above.
5. The Data Controller is Raffmetal S.p.A., with registered office in Casto (BS) Via Malpaga, no. 82, in the person of its legal representative.
6. The Chief Processor is Raffmetal S.p.A., with registered office in Casto (BS) Via Malpaga, no. 82, in the person of its legal representative.
7. Users are entitled, at any moment in time, to exercise their rights against the Data Controller, as foreseen by art. 7 of Legislative Decree no. 196/2003 which, to assist you further, we include below:

Legislative Decree no. 196/2003
Art. 7 - Rights to access personal data and other rights

1. The Data Subject has the right to request confirmation as to whether or not personal data concerning you exists, regardless of their being already recorded, and communication of such data in an intelligible form.
2. The Data Subject has the right to obtain indications on:
a) the source of the personal data;
b) the purposes and methods of the processing;
c) the logic applied to the processing, if the latter is carried out with the aid of electronic means;
d) the identification data concerning the Data Controller, data processors and the representative designated as per Section 5 (2);
e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as Representatives for the Country, Chief Processors or Designated Officers.
3. The Data Subject has the right to obtain:
a) updating, rectification or, where interested therein, integration of the data;
b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
4. The Data Subject is entitled to oppose, totally or partially:
a) on legitimate grounds, the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b) the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.