Information notice pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR)
Pursuant to Regulation (EU) 2016/679 (hereinafter "GDPR"), this page describes how personal data is processed. This is an information notice provided pursuant to Article 13 GDPR. This notice does not apply to other third-party websites that may be reached through links on this website, for which no responsibility is assumed.
For the processing of personal data carried out by the operators of the Social Media platforms used by the Data Controller, please refer to the information provided by them through their respective privacy policies. The Data Controller processes the personal data provided by users through the dedicated Social Media pages in order to manage interactions with users (comments, public posts, etc.) and in compliance with applicable law.
Specific notices may appear on the pages of the Website in relation to particular services or to the processing of the data provided.
For Cookies and other tracking systems, please see the cookie policy in the footer of the website and at the following link.
The Data Controller is Eurovetro S.r.l., with registered office at Via G. Miglio n. 1, 21040 Origgio (VA), Italy, represented by its Chairman Pierluigi Galli, who can be contacted for any information by e-mail at privacy@eurovetro.com.
| Purpose of processing | Legal basis | Data retention period | Nature of provision |
|---|---|---|---|
|
Browsing this website. The data necessary to use the web services is also processed in order to:
The data will be used to establish liability in the event of any computer crimes against the website. |
Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the operation of the website and for browsing. (Art. 6(1)(f) and Recital 47 GDPR) Data subjects are guaranteed the possibility of obtaining, upon request, information on the balancing test carried out. |
Browsing data is retained for the duration of the browsing session. In any case, it is not retained for more than seven days (except where needed for the investigation of crimes by the judicial authorities). | Provision of data is necessary to browse the website. |
|
Use of cookies and similar technologies. Please see the cookie policy in the footer of the website. |
For non-technical cookies and similar technologies that are not strictly necessary, processing is based on consent to the processing of personal data (Art. 6(1)(a) and Recitals 42, 43 GDPR). Consent is given through the banner and the cookie policy of the website. |
Please see the cookie policy in the footer of the website. | Please see the cookie policy in the footer of the website. |
In addition to browsing, personal data will be processed for:
| Purpose of processing | Legal basis | Data retention period | Nature of provision |
|---|---|---|---|
| A) Contacts, sending contact requests and information. |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Recital 44). Art. 6(1)(b) GDPR. |
Maximum 12 months. |
Provision is necessary. Failure to provide the necessary data will make it impossible to be contacted and to receive information. |
|
B) Direct marketing, for sending advertising or direct sales material or for carrying out market research, commercial and promotional communications, newsletters, through automated means (e-mail, SMS) and traditional means (telephone and paper mail). Communications may contain promotional activities. Personal data will not be transferred to third parties. In order to compare and possibly improve the results of automated communications, the Data Controller uses systems with reporting. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, opens, unique clickers and clicks; the devices and operating systems used to read the communication; details of the activity of individual users; details of e-mails sent, delivered and undelivered, and forwarded. All this data is used to compare, and possibly improve, the results of the communications. |
Processing is based on consent to the processing of personal data (Recitals 42, 43). Art. 6(1)(a) GDPR. |
Until consent is withdrawn (or opt-out). |
Provision is optional. Failure to provide the necessary data will make it impossible to receive direct marketing communications. |
| C) Handling your requests and requests from other data subjects, pursuant to Articles 15 et seq. GDPR (rights of the data subject). |
Processing is necessary for compliance with a legal obligation to which the data controller is subject (Recital 45). Art. 6(1)(c) GDPR. |
5 years from the closure of the request, except in the event of disputes. | Provision of personal data is mandatory, as it is essential in order to fulfil legal obligations. |
Personal data will be disclosed to parties who will process it as independent Data Controllers or as Data Processors (Art. 28 GDPR), and will be processed by natural persons (Art. 29 GDPR) acting under the authority of the Data Controller and the Data Processors on the basis of specific instructions regarding the purposes and methods of processing. The data will be disclosed to recipients belonging to the following categories:
The list of Data Processors pursuant to Art. 28 is available by writing to privacy@eurovetro.com or to the other contact details indicated above.
Personal data will be transferred in accordance with Articles 44 et seq. GDPR and, in particular:
For information on the safeguards relating to the transfer of data outside the EEA, data subjects can write to privacy@eurovetro.com.
Personal data will be subject to traditional manual, electronic and automated processing. No fully automated decision-making processes are carried out.
Data subjects may exercise their rights as set out in Articles 15 et seq. GDPR by contacting the Data Controller at the e-mail address privacy@eurovetro.com or by writing to the contact details indicated above.
The Data Controller guarantees data subjects the possibility to request, at any time, access to their personal data (Art. 15), rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18). The Data Controller communicates (Art. 19) to each of the recipients to whom the personal data has been disclosed any rectification, erasure or restriction of processing carried out. The Data Controller informs data subjects who so request about those recipients.
The Data Controller guarantees the right to data portability (Art. 20) and, in the case of requests pursuant to Art. 20, will provide data subjects with the data in a structured, commonly used and machine-readable format.
Data subjects have the right to withdraw the consent given, without affecting the lawfulness of processing based on consent before its withdrawal. To stop receiving automated direct marketing communications (e-mail, SMS-type messages, instant messaging), data subjects are invited to write an e-mail to privacy@eurovetro.com with the subject "unsubscribe from automated marketing" or to use our automatic unsubscribe systems, which are available for e-mails only (opt-out). To stop receiving traditional direct marketing communications (telephone calls with an operator and paper mail), data subjects are invited to write an e-mail to privacy@eurovetro.com with the subject "unsubscribe from traditional marketing". To stop receiving any marketing communications, data subjects are invited to write an e-mail to privacy@eurovetro.com with the subject "unsubscribe from all marketing".
If data subjects believe that the processing of personal data carried out by the Data Controller infringes Regulation (EU) 2016/679, they are free to lodge a complaint with the national supervisory authority, in particular in the Member State of their habitual residence or place of work, or of the place where the alleged infringement of the Regulation occurred (Italian Data Protection Authority, https://www.garanteprivacy.it/), or to bring proceedings before the competent courts.
The Data Controller may change, modify, add or remove any part of this Privacy Policy. To make it easier to check for any changes, the notice will indicate the date on which it was last updated.
Last updated: 7 October 2026
We use Google Analytics to collect anonymous statistics on visits and embed YouTube videos. You can accept or decline this. See our privacy policy for details. privacy policy.