Privacy Policy EU

Privacy Policy EU

This privacy statement was last updated on February 13, 2023 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;

we aim to limit our collection of personal data to only the personal data required for legitimate purposes;

we first request your explicit consent to process your personal data in cases requiring your consent;

we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;

we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.


The website offers informative and sometimes interactive content. We may collect or receive personal information for a number of purposes connected with our business operations which may include the following list.

navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

For this purpose we use the following data:

IP addresses, the type of browser used, the operating system, the domain name and addresses of websites from which access was made, information on the pages visited by users within the site, the time of access, permanence on a single page, internal path analysis and other parameters relating to the user’s operating system and IT environment.

contact details

For this purpose we use the following data:

name and surname, email address, telephone number


The data controller informs you that the personal data provided may be processed directly or also through duly authorized third parties, as well as to implement any contractual obligations and to provide services. In particular, the data is processed exclusively for the purposes connected to the service in question:

Provide information and/or the service requested by the user, manage the contracts finalized by the user, carry out the related administrative, accounting, tax and legal obligations, as well as process the requests sent by the user. The treatments put in place for these purposes are necessary for the fulfillment of contractual obligations and do not require a specific consent from the interested party. The data are indispensable for the establishment of the contractual relationship (including the pre-contractual phase) and/or for its execution. their missing, partial or incorrect conferment could result in the impossibility of providing you with the services offered.
Detect your experience of using our platforms, the services we offer and ensure the correct functioning of the web pages and their contents. The treatments put in place for these purposes are based on a legitimate interest of the Data Controller.
Send you communications relating to promotions and/or information for which you may be entitled to benefit, in the interest of the Data Controller. The treatments put in place for these purposes are carried out with the specific consent provided by the user, with the exception of communications relating to information and/or services similar to those already subscribed to by the user (soft spam) for which the treatment is based on a legitimate interest of the Data Controller. The data processed does not derive from an obligation and their provision is optional and is based on the consent of the interested party.

The data processed for soft spam purposes are mandatory to provide the service offered.

Carry out profiling activities that is analysis and processing of information relating to the user, his preferences, habits, consumption choices and/or browsing experiences. This activity is also carried out through the use of technologies such as cookies. The treatments put in place for these purposes are carried out with the specific consent provided by the user, with the exception of an activity of analysis of elementary information relating to his information preferences. The data processed does not derive from an obligation and their provision is optional and is based on the consent of the interested party.


The processing of personal data is mainly carried out using electronic procedures and supports for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the principles of lawfulness, correctness, non-excess and pertinence established by current legislation. privacy legislation. The data is processed exclusively by subjects specifically appointed by the Data Controller or by third parties related to the reference site/project/service managed. Personal data is stored in adequate security within the physical, virtual and Cloud technological infrastructure managed by the Data Controller or by qualified and accredited suppliers and partners.


Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.


From this website it is possible to connect, through specific links, to other websites, or third-party websites.

The Data Controller declines any responsibility regarding the possible request and/or release of personal data to third party sites and regarding the management of authentication credentials provided by third parties. We cannot guarantee that these third parties will handle your personal data reliably and securely. We advise you to read the privacy statements of these websites before using them.

The owner has social media profiles on social networks such as Facebook and Instagram. The website can use social plug-ins. Social plug-ins are special tools that allow you to incorporate the features of the social network directly within the website (e.g. the Facebook “like” function).

All social plug-ins on the site are marked with the respective logo owned by the social network platform (e.g. Facebook, Google, Instagram, Linkedin).

When you visit a page of our site and interact with the plug-in (e.g. by clicking the “Like” button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform and memorized from this. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as the methods by which to exercise one’s rights, please consult the privacy policy adopted by the individual social networks.


The data could be processed on behalf of the data controller by professionals and/or companies in charge of carrying out technical, managerial, development, administrative, accounting, tax, legal activities, etc.

The owner also reserves the right to use servers, clouds and other IT tools for archiving and managing personal data owned or managed by third parties, ensuring that the service providers will be selected among those who provide adequate guarantees, as required by the ‘art. 46 of EU Regulation 2016/679 “European regulation on the protection of personal data”.

For all the purposes indicated in this disclosure, the personal data of a common nature of the interested party may be communicated to all the companies belonging to the group, subsidiaries, connected companies, etc. in compliance with the rights and guarantees established by current legislation.

The data controller informs you that the personal data provided may be processed directly or also through duly authorized third parties, as well as to implement any contractual obligations and to provide services. We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety. If our website or organization is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.


We inform you that the personal data collected from the website, if registered, will be kept by the Data Controller only for the period necessary for their use.

We also inform you that the data you provide will be processed for the entire duration of the information/contractual relationship between us to complete the requested service and further stored exclusively for the period envisaged for the fulfillment of legal obligations and at the latest for the following 10 years from the end of the contractual relationship, unless it is necessary to keep them further to defend or assert a right or to fulfill any further legal obligations or orders from the Authorities.

In any case, the personal data collected is kept until the user requests and/or expresses an explicit desire to unsubscribe from the service and/or withdraw consent.


We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use consist of:


HTTP Strict Transport Security


At any time, the interested party may exercise, pursuant to Legislative Decree 196/2003 and articles 15 to 22 of EU Regulation 2016/679, the right to:

• rights of information and access. The interested party may at any time request and obtain from the Data Controller information on the personal data processed (including the existence of an ongoing processing of personal data concerning him), he also has the right to access it according to the provisions of art. 15 of EU Regulation 2016/679, and extract a copy, provided that the rights and freedoms of others are not violated.

• right to rectification. The interested party has the right to verify the correctness of their data, to obtain the updating, correction and integration of inaccurate personal data concerning them, without unjustified delay, according to the provisions of art. 16 of EU Regulation 2016/679.

• right to erasure. If the conditions indicated in art. 17 of EU Regulation 2016/679 can request the cancellation of their data by the Data Controller.

• right to restriction. When the conditions referred to in art. 18 of EU Regulation 2016/679, the interested party may request the limitation of data processing. In this case, the Data Controller will not be able to process the data for any other purpose other than their conservation or for the “assessment, exercise or defense of a right in court or to protect the rights of another natural person or law or for reasons of significant public interest of the Union or of a Member State”.

• Get data portability. The interested party has the right to receive their data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to request and obtain, without obstacles, their transfer to another Data Controller.

• right of opposition. When the personal data have been processed for the purposes of “the execution of a task of public interest or connected to the exercise of public powers vested in the data controller” or “the processing is necessary for the pursuit of the legitimate interest of the data controller of the treatment or third parties provided that the interests or the fundamental rights and freedoms of the data subject who require the protection of personal data do not prevail, in particular if the data subject is a minor”, the Data Subject may object to the processing for related reasons to your particular situation. Furthermore, the interested party may at any time oppose the processing for direct marketing purposes, without it being necessary to indicate specific reasons.

• right to object. If the interested party believes that the processing of their personal data is carried out in violation of EU Regulation 2016/679 “he has the right to lodge a complaint with a supervisory authority, especially in the Member State in which he habitually resides, works or of the place where the alleged violation has occurred.

• right not to be subject to a decision based solely on automated processing. The interested party can oppose the fully automated processing of his personal data, including profiling, unless this form of processing is necessary for the purpose of concluding and/or executing the contract, is required by current legislation or is conducted following the explicit consent of the interested party, who can revoke it at any time.

• Withdraw consent at any time. The interested party can revoke the consent to data processing at any time. However, the withdrawal of consent does NOT affect the lawfulness of the processing based on the consent given before the withdrawal.

The interested party exercises his rights by writing to the Data Controller at the addresses indicated above, specifying the subject of his request, the right he intends to exercise and attaching a photocopy of the identity document certifying the legitimacy of the request.


We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.



Via Leopardi 24, 24060 Rogno, BG, Italy



Email: moc.slacimehcnap@ycavirp

Phone number: +39035977488

Download Customer Privacy Policy 

Download Supplier Privacy Policy 

Allegato Politica Integrata del 20.12.2019