Privacy Policy


This notice has been prepared pursuant to Article 13 of Regulation (EU) 2016/679 “on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)” and updates previous versions issued before now.

A. Purpose of processing and legal basis

The data you provide are processed for the following purpose and purposes:
a. To respond to requests sent to us by email or through contact forms for information requests;
b. purposes strictly related and instrumental to the management of contractual and pre-contractual relationships with the data subject and for the proper performance of obligations (e.g.: acquisition of information prior to the conclusion of contracts, performance of operations based on obligations arising from the contract concluded with the data subject, for sending support for surveys necessary to assess the degree of customer satisfaction);
c. for the correct fulfilment of legal obligations and rights provided for by law (e.g. for the purposes of bookkeeping, banking management, business relations, collection of arrears or to assert or defend a right in court)
d. pre- and post-sale commercial and technical assistance.

B. Processing and storage methods

The processing of your data will be based on principles of correctness, lawfulness and transparency and may be carried out using paper and/or computer media that are in any case suitable to guarantee security and confidentiality and with the use of suitable procedures that avoid the risk of loss, theft, unauthorised access, unlawful use, undesired changes and dissemination.
and dissemination.

C. Period of retention of personal data

The data, processed for the purposes indicated above, will be kept for 10 years from the termination of the relationship, both in accordance with the provisions of the tax legislation, and as proof of the correct and timely execution of the service, which is the subject of the contractual relationship established between the parties, unless a dispute/controversy has arisen, in which case the data will be kept for the time necessary for the exercise of the right of defence and the management of the dispute, at the competent judicial authorities.

D. Scope of communication and dissemination. Possible transfer

Your data shall be processed by the undersigned, by previously appointed data processors and by strictly authorised data processors, in all cases by adopting technical and organisational measures suitable for complying with privacy regulations. In particular, your data may be communicated to companies/professional firms that provide assistance, consultancy or collaboration in accounting, administrative, fiscal, legal, tax and financial matters, to public administrations for the performance of institutional functions within the limits established by law or by the law on privacy.
functions within the limits established by law or regulations and to third party service providers to whom communication is necessary for the performance of the services covered by the contract. It is not the intention of the Data Controller to transfer the data to third countries or international organisations.

E. Provision of data and legitimacy of processing

The provision of data by interested parties is necessary to allow the Company to fulfil its legal obligations as well as its contractual obligations or to respond to pre-contractual requests. Any refusal to provide personal data, either in whole or in part, will not allow the Company to respond to the request, to execute the contract and/or to fulfil its legal obligations.

F. Rights of the data subject

Every data subject is entitled to exercise specific rights.
In particular, the rights relating to the personal data that are the subject of this information notice, as provided for and guaranteed by the Regulation, are recognised:

Right of access and rectification (Art. 15 and 16 of the Regulation): the right to access personal data and to request that they be corrected, amended or supplemented.
Right to erasure of data (Art. 17 of the Regulation): in the cases provided for by the current legislation, you may request the erasure of your personal data.
Right to restriction of processing (Art. 18 of the Regulation): the right to request the restriction of the processing of your personal data in the event of unlawful processing or contestation of the accuracy of your personal data by the data subject.
Right to data portability (Art. 20 of the Regulation): the right to request to obtain, from the Data Controller, your personal data in order to transmit them to another Data Controller, in the cases provided for by the aforementioned article.
Right to object (Art. 21 of the Regulation): the right to object at any time to the processing of personal data carried out on the basis of a legitimate interest justifying the request.
Right to lodge a complaint (Art. 77 of the Regulation): the right to lodge a complaint with the competent authority for the protection of personal data if you believe that your rights have been or are being infringed with regard to the processing of your personal data.

For any complaints or reports on the methods of data processing, it is good practice to contact the Data Controller, see below. However, you can forward your complaints or reports to the Data Protection Authority, using the relevant contact details: Garante per la protezione dei dati personali – Piazza di Montecitorio n.121 – 00186 ROMA – Fax: (+39) 06.696773785 – Phone: (+39) 06.696771, PEO: – PEC:

G. Data controller

– The data controller is Italforni srl, in the person of its legal representative, located at Via G. Rossa 5/7 – 41043 Formigine (MO), contact Tel. 059.572114, Fax 059.571156 or e-mail
– Data Protection Officer (DPO): Certim srl located in Corso Italia 70, 41058 Vignola (MO), contact Tel. 059.767693, Fax 059.767694, e-mail