Personal Data Processing Policy (Privacy Policy)
This Policy aims to describe how personal data of users consulting this website is managed. Processing is based on the principles of fairness, lawfulness, transparency, and protection of privacy, in accordance with EU Regulation 2016/679 (GDPR).
1. Data Controller
The Data Controller is:
Company Name: [Insert Company Name / Professional]
Registered Office: [Insert Full Address]
VAT/Tax Code: [Insert VAT Number]
Contact Email: [Insert Privacy Email]
2. Types of Data Processed
The Controller collects and processes various types of data, necessary for the provision of its services:
Data provided voluntarily: Name, surname, email address, phone number, or other data entered in contact forms or during registration.
Navigation data: IP addresses, system logs, domain names of computers used by users, request times, and other parameters related to the user's operating system and IT environment.
3. Purposes of Processing: how data “could” be used
With a view to transparency and operational flexibility, please note that the data provided may be processed for the following purposes:
Provision of Services: may be used to respond to requests for information, quotes, or for the execution of contractual obligations (e.g., purchases on the site).
Legal Compliance: may be processed to comply with accounting, tax obligations, or requests from the Judicial Authority.
Maintenance and Security: may be used to monitor the proper functioning of the site and prevent illegal activities or attempted computer fraud.
Marketing Communications: with prior consent, data may be used to send newsletters, informational material, or promotional content related to the Controller's services.
Profiling and Analysis: may be processed to analyze consumption habits or browsing preferences, in order to improve the commercial offer and user experience.
Third-Party Management: may be communicated to external suppliers (hosting providers, marketing agencies, couriers) strictly necessary for business operations.
4. Legal Basis for Processing
The Controller processes personal data in the presence of at least one of the following conditions:
Execution of a contract or pre-contractual measures.
Compliance with a legal obligation to which the Controller is subject.
Express consent of the data subject (e.g., for marketing or profiling).
Legitimate interest of the Controller (e.g., for system security).
5. Processing and Storage Methods
Processing is carried out using computer and/or telematic tools, with logic strictly related to the indicated purposes and, in any case, in a manner that ensures the security and confidentiality of the data. Data will be stored for the time strictly necessary to achieve the purposes for which they were collected, or as required by civil and tax regulations.
6. Data Transfer to Third Countries
Data may be transferred to suppliers located outside the European Economic Area (EEA), such as cloud service providers or social media platforms. In such cases, the Controller ensures that the transfer is based on adequacy decisions by the European Commission or through the signing of Standard Contractual Clauses (SCCs).
7. Rights of the Data Subject
At any time, the user may exercise their rights towards the Controller (Articles 15-22 of the GDPR):
Right of Access: to know which data is processed and receive a copy.
Right to Rectification: to correct inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): to request the removal of their data.
Right to Restriction of Processing: to request the blocking of processing in certain circumstances.
Right to Data Portability: to receive their data in a structured format to transfer it to another controller.
Right to Object: to object to processing for legitimate reasons or for marketing purposes.
Requests should be sent in writing to the email address indicated in point 1. The data subject also has the right to lodge a complaint with the Data Protection Authority.
Last updated: January 28, 2026
