Privacy Policy
This Privacy Policy describes how XXXXXXXXXXXXXX processes and protects the personal data of users who interact with this website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Directive 2002/58/EC, and applicable European and national data protection laws.
1. Data Controller
Company Name: XXXXXXXXXXXXXX
Tax Identification Number: XXXXXXXXXXXXX
Registered Address: XXXXXXXXXXXXXX
Email: XXXXXXXXXXXXXX
Phone: XXXXXXXXXXXXXX
2. Data Protection Officer (if applicable)
If the company designates a Data Protection Officer (DPO), users may contact them at: XXXXXXXXXXXXXX
3. Categories of Data Processed
The data collected through the website may include:
- Identification data (name, surname).
- Contact data (email, phone number, address).
- Technical and browsing data (IP address, browser type, device, pages visited, session duration).
- Commercial information provided voluntarily by the user.
4. Purpose of Processing
Personal data will be processed for the following purposes:
- Managing enquiries sent through contact forms.
- Providing information about services.
- Managing administrative, contractual, or commercial relationships.
- Sending newsletters or commercial communications when explicitly authorised.
- Improving website performance and security.
- Analysing user behaviour through cookies (see Cookies Policy).
5. Legal Basis for Processing
The legal bases applicable to the processing are:
- The user’s consent (Art. 6.1.a GDPR).
- Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
- Compliance with legal obligations (Art. 6.1.c GDPR).
- Legitimate interest of XXXXXXXXXXXXXX (Art. 6.1.f GDPR), such as ensuring website security.
6. Data Retention Period
Data will be retained only for the time necessary to achieve the intended purpose, and never longer than legally permitted.
- Contact enquiries: retained for up to 12 months.
- Contractual data: retained for the duration of the relationship and for the legally required period afterward.
- Marketing data: until consent is withdrawn.
- Technical logs: for the minimum period required for security.
7. Data Recipients
Your data may be shared with:
- Service providers acting as data processors (hosting, email service providers, analytics, CRM).
- Public authorities when legally required.
- No data will be sold to third parties under any circumstances.
8. International Data Transfers
International transfers will only take place when necessary and always under approved guarantees (Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms).
9. User Rights
Users may exercise their rights at any time:
- Right of access.
- Right to rectification.
- Right to erasure (right to be forgotten).
- Right to restrict processing.
- Right to data portability.
- Right to object.
- Right to withdraw consent without affecting the lawfulness of prior processing.
Requests may be sent to: XXXXXXXXXXXXXX
10. Data from Minors
The website does not knowingly collect data from minors under 14 years of age. If accidental collection occurs, the data will be deleted immediately.
11. Data Accuracy
Users must provide truthful, up-to-date information and are responsible for any damages resulting from inaccurate data.
12. Security Measures
XXXXXXXXXXXXXX implements appropriate technical and organisational measures, including encryption, secure servers, access controls, and continuous monitoring.
13. Automated Decision-Making
No automated decisions, including profiling, will be made from user data.
14. Cookies
This website uses cookies. For more information, please refer to the Cookies Policy.
15. Forms
Data Controller: XXXXXXXXXXXXXX
Email: XXXXXXXXXXXXXX
Registered Address: XXXXXXXXXXXXXX
Consent for Processing Personal Data (mandatory):
By submitting this form, the user expressly consents to XXXXXXXXXXXXXX processing their personal data for the purpose of managing their enquiry, responding to the request made, and providing the information or services required. Personal data will not be transferred to third parties unless there is a legal obligation to do so.
Optional Consent for Commercial Communications:
The user may voluntarily consent to receive commercial communications, newsletters, promotional offers, or updates from XXXXXXXXXXXXXX through electronic means. This consent is optional and may be withdrawn at any time.
Consent for the Use of External Service Providers:
The user is informed that XXXXXXXXXXXXXX may rely on external service providers (such as hosting, CRM solutions, email delivery services, or technical support providers) exclusively for the correct management of the services requested. All such providers operate under GDPR-compliant data processing agreements.
Information About User Rights:
Users may exercise their rights of access, rectification, erasure, restriction of processing, portability and objection, as well as withdraw their consent at any time, by contacting XXXXXXXXXXXXXX at the email address provided above. Users also have the right to file a complaint with the relevant supervisory authority.
Legal Basis for Processing:
The processing of data collected through this form is carried out on the basis of the user’s explicit consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
