Eurovetro Logo

Privacy Policy

Information notice pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR)

Why this information?

Pursuant to Regulation (EU) 2016/679 (hereinafter "GDPR"), this page describes how personal data is processed. This is an information notice provided pursuant to Article 13 GDPR. This notice does not apply to other third-party websites that may be reached through links on this website, for which no responsibility is assumed.

Personal data that may be processed

  • Personal data: any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Recitals 26, 27, 30 GDPR).
  • Contractor/user data.
  • Browsing data: the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category includes IP addresses or domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (success, error, etc.) and other parameters relating to the user's operating system and computing environment.
  • Data voluntarily provided: the optional, explicit and voluntary sending of messages to the contact addresses indicated on this website and/or the completion of data collection forms involves the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data entered.

Information on the processing of personal data carried out through Social Media platforms

For the processing of personal data carried out by the operators of the Social Media platforms used by the Data Controller, please refer to the information provided by them through their respective privacy policies. The Data Controller processes the personal data provided by users through the dedicated Social Media pages in order to manage interactions with users (comments, public posts, etc.) and in compliance with applicable law.

Specific notices

Specific notices may appear on the pages of the Website in relation to particular services or to the processing of the data provided.

Cookies and other tracking systems. What are they? What are they for?

For Cookies and other tracking systems, please see the cookie policy in the footer of the website and at the following link.

1. Who is the Data Controller? How to contact them?

The Data Controller is Eurovetro S.r.l., with registered office at Via G. Miglio n. 1, 21040 Origgio (VA), Italy, represented by its Chairman Pierluigi Galli, who can be contacted for any information by e-mail at privacy@eurovetro.com.

2. Purposes of processing, legal basis, data retention period, nature of provision

Purpose of processing Legal basis Data retention period Nature of provision

Browsing this website.

The data necessary to use the web services is also processed in order to:

  • obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or day, geographical areas of origin, etc.);
  • check that the services offered are working correctly.

The data will be used to establish liability in the event of any computer crimes against the website.

Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the operation of the website and for browsing.

(Art. 6(1)(f) and Recital 47 GDPR)

Data subjects are guaranteed the possibility of obtaining, upon request, information on the balancing test carried out.

Browsing data is retained for the duration of the browsing session. In any case, it is not retained for more than seven days (except where needed for the investigation of crimes by the judicial authorities). Provision of data is necessary to browse the website.

Use of cookies and similar technologies.

Please see the cookie policy in the footer of the website.

For non-technical cookies and similar technologies that are not strictly necessary, processing is based on consent to the processing of personal data (Art. 6(1)(a) and Recitals 42, 43 GDPR).

Consent is given through the banner and the cookie policy of the website.

Please see the cookie policy in the footer of the website. Please see the cookie policy in the footer of the website.

In addition to browsing, personal data will be processed for:

Purpose of processing Legal basis Data retention period Nature of provision
A) Contacts, sending contact requests and information.

Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Recital 44).

Art. 6(1)(b) GDPR.

Maximum 12 months.

Provision is necessary.

Failure to provide the necessary data will make it impossible to be contacted and to receive information.

B) Direct marketing, for sending advertising or direct sales material or for carrying out market research, commercial and promotional communications, newsletters, through automated means (e-mail, SMS) and traditional means (telephone and paper mail).

Communications may contain promotional activities. Personal data will not be transferred to third parties.

In order to compare and possibly improve the results of automated communications, the Data Controller uses systems with reporting. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, opens, unique clickers and clicks; the devices and operating systems used to read the communication; details of the activity of individual users; details of e-mails sent, delivered and undelivered, and forwarded. All this data is used to compare, and possibly improve, the results of the communications.

Processing is based on consent to the processing of personal data (Recitals 42, 43).

Art. 6(1)(a) GDPR.

Until consent is withdrawn (or opt-out).

Provision is optional.

Failure to provide the necessary data will make it impossible to receive direct marketing communications.

C) Handling your requests and requests from other data subjects, pursuant to Articles 15 et seq. GDPR (rights of the data subject).

Processing is necessary for compliance with a legal obligation to which the data controller is subject (Recital 45).

Art. 6(1)(c) GDPR.

5 years from the closure of the request, except in the event of disputes. Provision of personal data is mandatory, as it is essential in order to fulfil legal obligations.

3. Who will the personal data be disclosed to? Recipients of the data

Personal data will be disclosed to parties who will process it as independent Data Controllers or as Data Processors (Art. 28 GDPR), and will be processed by natural persons (Art. 29 GDPR) acting under the authority of the Data Controller and the Data Processors on the basis of specific instructions regarding the purposes and methods of processing. The data will be disclosed to recipients belonging to the following categories:

  • Parties providing services for the website and communication networks, including e-mail, hosting and website management;
  • Parties based in Italy with which the Data Controller has entered into agreements, subject to consent where required;
  • For direct marketing, subject to consent, parties managing direct marketing activities;
  • Competent authorities for the fulfilment of legal obligations and/or the provisions of public bodies, upon request.

The list of Data Processors pursuant to Art. 28 is available by writing to privacy@eurovetro.com or to the other contact details indicated above.

4. Will the data be transferred to non-EEA countries?

Personal data will be transferred in accordance with Articles 44 et seq. GDPR and, in particular:

  • pursuant to Art. 45 GDPR, to third countries, international organisations or, in the case of the United States, to organisations that adhere to and are certified under the EU-U.S. Data Privacy Framework, on the basis of the related adequacy decision adopted by the European Commission.

For information on the safeguards relating to the transfer of data outside the EEA, data subjects can write to privacy@eurovetro.com.

5. Is there any automated processing?

Personal data will be subject to traditional manual, electronic and automated processing. No fully automated decision-making processes are carried out.

6. What are your rights? How can you exercise them?

Data subjects may exercise their rights as set out in Articles 15 et seq. GDPR by contacting the Data Controller at the e-mail address privacy@eurovetro.com or by writing to the contact details indicated above.

The Data Controller guarantees data subjects the possibility to request, at any time, access to their personal data (Art. 15), rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18). The Data Controller communicates (Art. 19) to each of the recipients to whom the personal data has been disclosed any rectification, erasure or restriction of processing carried out. The Data Controller informs data subjects who so request about those recipients.

The Data Controller guarantees the right to data portability (Art. 20) and, in the case of requests pursuant to Art. 20, will provide data subjects with the data in a structured, commonly used and machine-readable format.

Data subjects have the right to withdraw the consent given, without affecting the lawfulness of processing based on consent before its withdrawal. To stop receiving automated direct marketing communications (e-mail, SMS-type messages, instant messaging), data subjects are invited to write an e-mail to privacy@eurovetro.com with the subject "unsubscribe from automated marketing" or to use our automatic unsubscribe systems, which are available for e-mails only (opt-out). To stop receiving traditional direct marketing communications (telephone calls with an operator and paper mail), data subjects are invited to write an e-mail to privacy@eurovetro.com with the subject "unsubscribe from traditional marketing". To stop receiving any marketing communications, data subjects are invited to write an e-mail to privacy@eurovetro.com with the subject "unsubscribe from all marketing".

If data subjects believe that the processing of personal data carried out by the Data Controller infringes Regulation (EU) 2016/679, they are free to lodge a complaint with the national supervisory authority, in particular in the Member State of their habitual residence or place of work, or of the place where the alleged infringement of the Regulation occurred (Italian Data Protection Authority, https://www.garanteprivacy.it/), or to bring proceedings before the competent courts.

7. Changes to this notice

The Data Controller may change, modify, add or remove any part of this Privacy Policy. To make it easier to check for any changes, the notice will indicate the date on which it was last updated.

Last updated: 7 October 2026

PEC: eurovetro.rclng@pec.it