Privacy Policy

The Controller processes common personal data provided by data subjects, including:

– personal and contact details;
– data necessary for managing contractual, commercial, and administrative relationships;
– data voluntarily provided by phone, mail, fax, email, or through reserved areas of the website;
– data related to information requests, quotations, bookings, assistance, or related services.

a) Management of contractual and pre-contractual relationships
Data are processed to handle information requests, prepare quotations and offers, manage bookings, requested services, relationships with suppliers and partners, and to issue administrative and fiscal documents. Processing is necessary for the performance of pre-contractual and contractual measures pursuant to Art. 6(1)(b) GDPR.

b) Compliance with legal obligations
Data are processed to comply with civil, fiscal, accounting regulations and with requests from judicial or administrative authorities. Processing is necessary to comply with legal obligations pursuant to Art. 6(1)(c) GDPR.

c) Internal administrative and operational purposes
Data are processed for inclusion in company databases, internal statistical analysis, management of payments and collections, and communication related to the company’s economic and commercial activities. Processing is based on the Controller’s legitimate interest pursuant to Art. 6(1)(f) GDPR.

d) Non-intrusive commercial communications
Data may be used to send information related to the Controller’s services or those of affiliated companies, in compliance with Art. 130 of the Italian Privacy Code. Processing is based on the Controller’s legitimate interest pursuant to Art. 6(1)(f) GDPR.

Data are processed using paper, electronic, and telematic tools, in compliance with the principles of lawfulness, fairness, transparency, minimization, and security. Adequate technical and organizational measures are adopted to ensure integrity, confidentiality, and protection of personal data.

Personal data may be disclosed to:

– employees, collaborators, and consultants of the Controller;
– service companies (couriers, postal services, messaging services);
– factoring, credit recovery, and credit insurance companies;
– IT and telecommunication service providers;
– manufacturers or licensors of supplied services/products when necessary for service delivery;
– legal, tax, and labor consultants;
– banking institutions for payment management;
– entities authorized by law.

All such parties act as Data Processors or authorized personnel, according to their respective roles.

Data are retained for the time necessary to achieve the purposes described above and in accordance with civil and fiscal regulations.

Providing personal data:

– is mandatory for contractual and legal purposes;
– is optional for commercial communications.

Failure to provide data necessary for contractual purposes may prevent the establishment or continuation of the relationship.

Data subjects may exercise the rights provided by Articles 15–22 GDPR, including:

– right of access;
– rectification;
– erasure;
– restriction of processing;
– data portability;
– objection;
– withdrawal of consent (where applicable).

Requests may be sent to the Controller or the DPO using the contact details provided above.

During navigation, the website may automatically collect technical data necessary for its operation, including:

– IP address;
– date and time of access;
– requested URL;
– server response code;
– browser and device information.

These data are used exclusively to ensure proper website functioning, monitor security, and produce aggregated and anonymous statistics.

The website uses only technical cookies, required for navigation and not used for profiling purposes.

Any external services required for website operation (hosting, CDN, security, backup) act as Data Processors pursuant to Art. 28 GDPR and ensure adequate data protection measures.

The website may contain links to third-party sites. The Controller is not responsible for their privacy policies and encourages users to review their respective notices.

Technical and organizational measures are adopted to ensure:

– secure access to reserved areas;
– protection against unauthorized access;
– prevention of accidental data loss or destruction;
– automatic antivirus updates.

Access to reserved areas is granted through personal credentials (username and password), which users must keep confidential.