Privacy Notice

01Data controller

The controller can be contacted at the details above on any matter concerning the processing of personal data and the exercise of your rights. No Data Protection Officer has been appointed, as the statutory conditions requiring one do not apply.

02What data we collect

Data you give us

When you complete the contact or quote request forms, or write to us by email or WhatsApp, we collect the data you provide, including:

• identity and contact details: first name, surname, email, telephone or mobile, address and town;
• business details: company name, VAT number, province;
• the content of your enquiry and any attached files (photographs, drawings, technical files);
• your contact preferences (consent to being contacted on WhatsApp, for example).

Data collected automatically

While you browse, and for the operation and security of the site, technical data may be processed such as IP address, browser and device type, pages visited, date and time of access, along with data collected through cookies and similar technologies (see the Cookie Policy).

03Purposes and legal bases

We process your data for the following purposes, each with its own legal basis under Article 6 GDPR:

04Whether providing data is required

Providing the data marked as required in the forms is necessary for us to act on your enquiry: without it we cannot prepare a quote or reply to you. Providing the other data is optional. Consent to cookies and to marketing purposes is always freely given and can be withdrawn.

05Who we share data with

Data is processed by the controller’s authorised staff and may be shared, within the limits of the purposes above, with:

• providers of IT, hosting and website maintenance services (as processors under Article 28 GDPR);
• providers of email and messaging services (WhatsApp/Meta, for example) where you contact us through those channels;
• providers of analytics and marketing services (Google, for example), within the limits of the cookie consent you have given;
• couriers and logistics operators, for delivering the finished work;
• commercial and local partners (our exclusive partner in Switzerland, for example) where needed to act on your enquiry;
• advisers, professionals and authorities, where required by law.

Data is not disclosed publicly and is not subject to automated decision‑making producing legal effects concerning you.

06Transfers outside the European Union

Some providers (Google and Meta, for example) may process data in countries outside the EU, in particular the United States. In those cases the transfer takes place on the basis of the appropriate safeguards provided for by the GDPR, such as the European Commission’s Standard Contractual Clauses or the provider’s certification under the EU-U.S. Data Privacy Framework. You can ask us about the safeguards applied using the controller’s contact details.

07How long we keep data

• data relating to enquiries and quotes that did not proceed: for as long as needed to handle the enquiry and, as a rule, up to 24 months;
• data relating to clients and contracts: for the duration of the relationship and thereafter for the period required by tax and statutory obligations (as a rule 10 years);
• data processed on the basis of consent (marketing): until consent is withdrawn;
• browsing data and cookies: for the durations set out in the Cookie Policy.

At the end of these periods the data is deleted or anonymised, save where it needs to be kept to establish, exercise or defend a legal claim.

08Your rights

As a data subject you may exercise at any time the rights provided for by Articles 15-22 GDPR:

• access to your data and information about the processing;
• rectification of inaccurate data and completion of incomplete data;
• erasure (the “right to be forgotten”) in the cases provided for;
• restriction of processing;
• portability of the data you have provided to us;
• objection to processing based on legitimate interests and to marketing;
• withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise your rights write to info@ilpolistirolo.it. You also have the right to lodge a complaint with the supervisory authority: in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it).

09Children

The site and our services are aimed at a professional, adult audience. We do not knowingly collect data from children under 14. If you believe a child has provided us with data without authorisation, please contact us and we will delete it.

10Users accessing the site from outside the European Union

The site is operated from Italy. If you access it from a country outside the EU, your data will be processed in accordance with the GDPR, which we apply as our reference standard. Users resident in jurisdictions with specific legislation (the United Kingdom under the UK GDPR, or California under the CCPA/CPRA, for example) are afforded the rights provided by those laws, including the right to know, to access and to request deletion of their data, and to opt out of its “sale” (which in any event we do not carry out). To exercise them, use the controller’s contact details.

11Changes to this notice

We may update this notice to reflect changes in legislation or in how we work. The current version is always published on this page with the date it was last updated. Please check it from time to time.