PRIVACY / GDPR

Personal data privacy notice

Information on personal data processed through this website pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

The data controller is DI PAOLO ARREDAMENTI RAPPRESENTANZE S.R.L., with registered office at Viale Cesare Battisti, 80, 64020 Bellante (TE), Italy. VAT number and Italian tax code: 02228890675. Privacy enquiries: info@dipaolorappresentanze.it; telephone: +39 339 849 6815.

2. Personal data collected

Through the contact form we collect your name, email address, optional company name and message. If you contact us by email or phone, we process the information you provide. When browsing, the hosting infrastructure may process technical data such as IP address, request date and time, requested URLs, browser and device details, and security logs. Please do not submit sensitive or unnecessary information in your message.

3. Purposes and legal bases

Handling enquiries: responding to messages, providing information and assessing potential business partnerships; legal basis: steps taken at the data subject’s request prior to entering into a contract (Article 6(1)(b) GDPR), or legitimate interests in managing business correspondence (Article 6(1)(f)), depending on the enquiry. Security and operation: keeping the website available and preventing misuse; legitimate interests (Article 6(1)(f)) and, where applicable, legal obligations (Article 6(1)(c)). Compliance: retaining information where necessary to meet legal obligations or establish, exercise or defend claims. Contact-form submissions are not automatically used to subscribe visitors to marketing communications.

4. Whether data is required

Fields marked with an asterisk are required to reply to your enquiry; the “Company” field is optional. Without the required information the form cannot be submitted. Other contact channels remain available.

5. Processing and recipients

Data is processed using IT systems and appropriate technical and organisational safeguards. Authorised personnel and suppliers supporting hosting, email and website maintenance may have access, acting as processors under Article 28 GDPR where appropriate. Information is not made publicly available. Form submissions are forwarded to the company email address.

6. Retention

Enquiries and related correspondence are kept for as long as necessary to handle them and any resulting business relationship, unless longer retention is required by law or for the protection of legal rights. Technical logs are retained in accordance with hosting settings and security needs. Before publication: verify and specify actual retention periods or more precise criteria for email and technical logs.

7. Transfers outside the EEA

Technology providers may transfer data outside the European Economic Area. Where this happens, a valid GDPR transfer mechanism must apply (such as an adequacy decision or standard contractual clauses with the required safeguards). To verify: the actual locations, subprocessors and terms of the hosting, email and external service providers.

8. Cookies, preferences and external resources

The website uses a browser-local preference (localStorage, key dpr-language) to remember the selected language. This preference is not automatically sent to the controller like a cookie. Pages load Google Fonts, which involves requests to Google domains and may involve processing of technical data by that provider. The current site code does not include visitor analytics or advertising pixels. Important: check cookies actually set by the server and any subsequently installed services before launch. If non-essential technologies requiring consent are introduced, a suitable consent mechanism must be implemented before they run.

9. Your rights

Subject to the conditions in Articles 15–22 GDPR, you may request access, rectification, erasure, restriction, data portability and object to processing. In particular, you may object to processing based on legitimate interests where applicable. Contact info@dipaolorappresentanze.it. You may also lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.

10. Automated decisions and children

The contact form does not involve solely automated decisions producing legal or similarly significant effects. This website is intended for professional contacts and is not specifically directed at children.

11. Changes

This notice may be revised if the website, service providers or processing activities change. Please consult this page for the latest version.