PRIVACY AND COOKIE POLICY
Last updated: 09/11/2026
This policy describes how the personal data of users visiting the website www.finimpianti.it (the “Website”) is processed, pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, the “GDPR”) and Italian Legislative Decree no. 196/2003 (Personal Data Protection Code), as amended by Legislative Decree no. 101/2018.
This policy applies only to this Website and not to any other websites the user may visit through links.
1. DATA CONTROLLER
The Data Controller is:
Finimpianti S.r.l.
Registered office: Via Aldo Moro 9, 10080 Oglianico (TO), Italy
Tax Code: 01941360362 – VAT No.: IT 07718800019
Phone: +39 0124 470670
Email: info@finimpianti.it
2. TYPES OF DATA PROCESSED
a) Browsing data
The computer systems and software procedures used to operate the Website collect, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This category includes, for example, IP addresses, browser type and operating system, the addresses of the requested resources, the time of the request and the server response code.
This data is used solely to ensure the proper functioning and security of the Website (for example, to prevent unauthorised access or cyber attacks) and may be used to establish liability in the event of computer crimes against the Website.
b) Data voluntarily provided by the user
By filling in the contact form on the Website or by writing to the email addresses provided, the user supplies their personal data, such as name, surname, company, email address, telephone number and the content of the message. The data entered in the contact form is sent by email to info@finimpianti.it and is not stored on the Website. Users are asked not to include in their messages any data that is not necessary for their request.
3. PURPOSES AND LEGAL BASIS OF PROCESSING
a) Operation and security of the Website (browsing data)
Legal basis: the Controller’s legitimate interest in ensuring the operation and security of the Website (Art. 6(1)(f) GDPR).
b) Replying to requests sent through the contact form or by email (requests for information, quotes, catalogues, support)
Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
c) Compliance with legal obligations and protection of the Controller’s rights, including in court
Legal basis: legal obligation (Art. 6(1)(c) GDPR) and the Controller’s legitimate interest (Art. 6(1)(f) GDPR).
Data provided through the contact form is not used for marketing purposes or for sending newsletters.
4. PROVISION OF DATA
Except for browsing data, the provision of data is optional. However, failure to provide the data marked as mandatory in the contact form will make it impossible to process the user’s request.
5. METHODS OF PROCESSING
Data is processed using computer and electronic tools, according to procedures strictly related to the stated purposes, and with appropriate technical and organisational security measures to prevent data loss, unlawful or incorrect use and unauthorised access. The Website uses an encrypted connection (HTTPS).
No automated decision-making, including profiling, is carried out.
6. RECIPIENTS OF DATA
Data may be processed by the Controller’s authorised personnel and may be disclosed, to the extent strictly necessary, to:
– the provider of the Website hosting and email services;
– parties responsible for the maintenance and development of the Website;
– couriers and shipping companies, where the sending of material is requested;
– public authorities, where required by law.
Where necessary, these parties act as Data Processors pursuant to Art. 28 GDPR. Data is not disseminated.
7. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
Data is stored on servers located within the European Union. Should any provider process data outside the European Economic Area, the transfer will take place in compliance with Art. 44 et seq. GDPR (for example, on the basis of adequacy decisions of the European Commission or Standard Contractual Clauses).
8. DATA RETENTION
– Browsing data: for the time necessary to ensure the security of the Website and in any case no longer than 6 months, unless needed to investigate crimes.
– Data sent through the contact form or by email: for the time necessary to handle the request and in any case no longer than 24 months from the last contact, unless a contractual relationship arises, in which case the retention periods required by law apply (for example, 10 years for tax and accounting records).
9. RIGHTS OF THE DATA SUBJECT
As a data subject, the user may at any time exercise the rights provided for by Articles 15-22 GDPR, and in particular the right to:
– access their personal data;
– obtain its rectification or completion;
– obtain its erasure;
– obtain the restriction of processing;
– object to processing based on the Controller’s legitimate interest;
– receive their data in a structured, commonly used and machine-readable format (portability).
Requests may be sent to the Controller by email at info@finimpianti.it or by post to the registered office address indicated in section 1.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali – www.garanteprivacy.it).
Cookies are small text files that the websites visited send to the user’s device, where they are stored and then sent back to the same websites on the next visit.
The Website uses only technical cookies, which are necessary for the proper functioning of the Website and for providing the services requested by the user (for example, session, security and performance optimisation cookies). The user’s consent is not required for these cookies, pursuant to Art. 122 of the Italian Privacy Code and the Guidelines of the Italian Data Protection Authority of 10 June 2021.
The Website does not use profiling cookies, nor third-party analytics or marketing cookies.
Users can manage or delete cookies at any time through their browser settings. Disabling technical cookies may affect the proper functioning of some parts of the Website.
11. CHANGES TO THIS POLICY
The Controller reserves the right to modify or update this policy, including in response to changes in legislation. Any changes will be published on this page, together with the date of the last update.
In the event of any discrepancy between this English version and the Italian version, the Italian version shall prevail.