Privacy Policy
Download PDFVersion 2.0 — editorial update 2026-09-09. “DA DEFINIRE” marks company information still to be completed; it does not confirm that measures or services are already operational.
1. Controller and contact details
The controller is Italimpianti S.r.l., registered office Piazza del Duomo 16, 20123 Milan, operational office Via delle Sorti 1/E, 25050 Pian Camuno (BS), Italy, VAT no. 03981190162. Privacy contact: DA DEFINIRE. Certified e-mail (PEC): DA DEFINIRE. You may also write to the registered office, marking your letter “Privacy”.
2. Data protection officer
Designation and contact details of the DPO, or the company's privacy contact person: DA DEFINIRE.
3. Data processed
Browsing may involve processing IP addresses, technical device and browser data, requested pages and security records. We also process information voluntarily supplied through forms, e-mail and telephone: contact details, enquiries, CVs and reports. The specific notices distinguish these activities. For browser storage and external services see the Cookie Policy.
4. Purposes, legal bases and retention
| Processing | Purpose and legal basis | Retention |
|---|---|---|
| Browsing and security | Operating and protecting the website; legitimate interests, Article 6(1)(f) GDPR | DA DEFINIRE |
| Enquiries and quotations | Responding to requests and taking pre-contractual steps, Article 6(1)(b); relevant professional correspondence, Article 6(1)(f) | DA DEFINIRE from the last contact, unless a contractual relationship follows |
| Applications | Assessing applications and taking pre-contractual steps, Article 6(1)(b) and Article 111-bis of the Italian Privacy Code | DA DEFINIRE |
| Whistleblowing | Obligations under Italian Legislative Decree 24/2023, Article 6(1)(c) | As necessary, and no longer than five years after notification of the final outcome |
| Optional LIFE communications | Only if activated: consent, Article 6(1)(a) | Until withdrawal; further criteria: DA DEFINIRE |
| Contractual, tax and accounting obligations | Contract performance and legal obligations, Article 6(1)(b) and (c) | Normally ten years for accounting documents, subject to other applicable periods |
| Protection of rights | Establishing, exercising or defending rights, Article 6(1)(f) | Duration of the dispute and applicable limitation periods |
| Optional statistics | Aggregate analysis using Plausible, with prior consent, Article 6(1)(a) | DA DEFINIRE |
At the end of the applicable period, data must be deleted or anonymised unless retention is legally required or justified by a documented need to protect rights. Changing periods on this page does not automatically activate deletion in the systems.
5. Providing data
Fields marked * are necessary for handling the request described in the form. Without them we may be unable to respond or assess an application. Other information is optional. Refusing optional external services and statistics does not prevent access to the website. Whistleblowing reports may be anonymous.
6. Methods and security
Processing uses IT systems and, where necessary, paper records, following necessity and confidentiality principles. Organisational and technical safeguards actually implemented, including backups, access controls and multi-factor authentication: DA DEFINIRE.
7. Recipients
Relevant data may be processed by authorised staff and providers within their functions. Hosting provider and country: DA DEFINIRE. Technical management: Zepoch Sagl, Switzerland; contractual role and Article 28 agreements: DA DEFINIRE. E-mail services: DA DEFINIRE. Form protection: Cloudflare Turnstile; configuration and terms: DA DEFINIRE. Other recipients, advisers and agencies actually involved: DA DEFINIRE. Data are not intended for publication or sale.
8. International transfers
Technical management may involve Zepoch Sagl in Switzerland. Transfers to countries recognised as adequate by the European Commission rely on Article 45 GDPR; otherwise an applicable safeguard is needed, such as standard contractual clauses and any supplementary measures. Actual countries, providers, safeguards and how to obtain a copy: DA DEFINIRE. Hosting within the EU is not assumed for every service.
9. Rights and complaints
Under the conditions and limits of Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You may withdraw consent without affecting the lawfulness of earlier processing. Write to the privacy contact or registered office. We normally respond within one month; any justified extension is notified within that period. You may complain to the Italian Data Protection Authority or seek a judicial remedy.
10. Automated decisions
Use or exclusion of solely automated decisions producing legal or similarly significant effects, including any logic and consequences: DA DEFINIRE.
11. Children
The website is not intended for children under 14. Do not submit unnecessary information about minors.
12. Specific notices and updates
See the notices for enquiries, applications, whistleblowing, LIFE and the Cookie Policy. Each document includes a version and editorial update and can be downloaded as a PDF. Substantial changes to processing require updated information and, where necessary, a new consent choice.
