Privacy notice on the processing of personal data

Effective date: 23 December 2025

Introduction

This notice is drafted pursuant to Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003 (Privacy Code), as well as the Guidelines of the Italian Data Protection Authority.

Data controller

The controller of personal data processing is:

C.I.T.I. S.n.c.
Via Enrico Fermi 21/9
20060 Gessate (MI) – Italy

Email: f.citisnc@gmail.com
VAT / Tax ID: 01285480156

The Controller has not appointed a Data Protection Officer (DPO).

Types of data processed

The website may collect personal data provided voluntarily by the user, including:

  • first and last name;
  • email address;
  • phone number;
  • any information entered in contact or quotation request forms.

Purposes of processing

Personal data are processed for the following purposes:

  • responding to information or quotation requests;
  • providing technical or commercial advice;
  • complying with legal obligations;
  • ensuring the proper operation of the website.

Legal basis

Processing is based on:

  • the Controller’s legitimate interest in responding to requests;
  • the performance of pre-contractual measures at the user’s request;
  • any applicable legal obligations.

Processing methods

Data are processed using IT and telematic tools, in compliance with the principles of security, confidentiality and integrity of data.

No special categories of personal data or criminal conviction data are processed.

Disclosure of data

Personal data are not disseminated.

They may be disclosed to third parties only where necessary to:

  • comply with legal obligations;
  • respond to requests from competent authorities;
  • manage the technical operation of the website (hosting, maintenance).

Data retention

Personal data are retained for the time strictly necessary to fulfil the purposes for which they were collected.

Contact requests are retained for a maximum of 12 months, unless further legal obligations apply.

Data transfers

Data are processed within the European Union. Should they be transferred to non-EU countries, this will occur in accordance with the safeguards provided by the GDPR.

User rights

The user has the right to:

  • access their personal data;
  • request rectification or erasure;
  • restrict or object to processing;
  • request data portability;
  • lodge a complaint with the Italian Data Protection Authority.

Requests may be sent by email to the Controller’s contact details.

Changes to this notice

The Controller reserves the right to amend this notice at any time. Changes will be published on this page.