PRIVACY POLICY OF CARPMETAL S.R.L.

1. Data Controller

The Data Controller (i.e. the company responsible for managing personal data) is:

CARPMETAL S.R.L.

Registered office: Via Giuseppe di Vittorio, 6 – 25030 Adro (BS) – Italy

Phone: (+39) 030/7356598 | (+39) 030/7450347 

Fax: (+39) 030/7450145

Email: info@carpmetal.it

2. Types of Personal Data Collected

This website processes only the personal data voluntarily provided by users when requesting information, quotations, or direct contact with CARPMETAL S.R.L.

Providing personal data is optional; however, the absence of such information may make it impossible for the company to process your request.

During normal browsing, the information technology (IT) systems and software procedures of this website automatically collect certain technical information, the transmission of which is inherent to the use of Internet communication protocols.

Such information may include:

  • IP address.
  • Type of browser used (user agent).
  • Date and time of the connection.
  • User’s geographic location based on their IP address.

This information is collected anonymously and is used solely for statistical and security purposes.

This website does not include contact forms or newsletter subscriptions and therefore does not directly collect any additional personal data.

3. Purpose of Personal Data Processing

The personal data collected are processed for the following purposes:

  • Provision of the services requested by users, including responding to requests for information, quotations, or customer support.
  • Marketing and commercial communications, within the limits of any consent provided.
  • Statistical analysis and traffic monitoring, in anonymous and aggregated form.
  • Protection of IT security and the prevention of abuse.

4. Legal Basis for Data Processing

The processing of personal data is based on the following legal grounds:

  • Consent of the data subject, where required.
  • Performance of a contract or actions taken at the request of the data subject prior to entering a contract.
  • Compliance with legal obligations.
  • Legitimate interest of the Data Controller, for example to ensure website security and improve its services.

5. Methods of Data Processing

The processing of personal data is carried out using IT and telecommunication tools, in compliance with the principles of lawfulness, fairness, transparency, and the protection of privacy.

  • Browsing data are stored on the servers of the hosting provider.
  • The website does not perform any automated profiling processes.

6. Data Recipients

Personal data may be communicated to third parties strictly for the purposes mentioned above, such as:

  • IT service providers and technical consultants responsible for the management and maintenance of the website.
  • Google LLC, through the Google Analytics (GA4) service.

Regarding Google Analytics 4, Google states that for users located within the European Union:

  • Data are collected via domains and servers located in the EU.
  • IP addresses are not stored.

Google acts as Data Processor, while CARPMETAL S.R.L. remains the Data Controller.

7. Data Retention Periods

  • Browsing data and statistical information collected through Google Analytics are retained for a maximum period of 6 months.
  • Hosting logs are retained for a period of 90 days, except when required for criminal investigations or in response to requests from judicial authorities.

8. Data Subject Rights

  • Users may exercise at any time the rights provided under Articles 15–22 of the GDPR, including:

    • The right of access to personal data.
    • The right to rectification of inaccurate or incomplete data.
    • The right to erasure (“right to be forgotten”).
    • The right to restriction of processing.
    • The right to data portability.
    • The right to object to processing.
    • The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given prior to withdrawal.

9. How to Exercise Your Rights

To exercise their rights, the data subject may send a request by email to: info@carpmetal.it
No specific forms are required.

Requests will be processed as quickly as possible and, in any case, within the deadlines set by the GDPR.

10. Cookie Policy

This website may use technical cookies to ensure the proper functioning of its pages, as well as third-party cookies (e.g., Google Analytics) for statistical purposes.

For more information on the types of cookies used and on how to manage your consent, please refer to the full Cookie Policy available via the dedicated link on the website.

11. Amendments to this Privacy Policy

CARPMETAL S.R.L. reserves the right to modify this Privacy Policy at any time, ensuring that any changes are appropriately made visible on the website for a reasonable period.

Users are encouraged to periodically review this section to stay informed of any updates.