The data controller is Vetroresina Padana S.p.A., with headquarters at Via Abetone Brennero 174/A, 46025 Poggio Rusco (MN). For more information, please write to info@vetroresinapadana.com or commerciale@vetroresinapadana.com.
1 – Data Processed
The forms collect your name, company, contact information, message content, and—in the technical sections—any project information you choose to provide. The fields marked as required on the form are necessary to submit your request.
Navigation and Security. The systems that make the site available receive the IP address and technical information from the HTTP request—including the address of the requested resource—to enable the service to function. When a form is submitted, the available IP address is also used in Cloudflare Turnstile’s anti-spam check.
Direct emails. When you send an email to the addresses listed on the website, your email address and any other personal information contained in the message are processed in order to review your request and respond to it.
Required and Optional Information. In the forms, failure to fill in required fields will prevent submission. The other fields are optional; however, the absence of essential technical information may prevent the project from being evaluated or may require us to request clarification. Even when communicating via email, please provide only information relevant to the request.
2 – Purpose and Legal Basis
The data is used to respond to and, if requested, take precontractual measures at the initiative of the data subject (Art. 6, para. 1, subpar. b, GDPR). Security and abuse prevention are based on the data controller’s legitimate interest (Article 6(1)(f) of the GDPR).
The pre-contractual basis indicated above pertains to the necessary activities requested by the individual who is a party to the potential contract. The data of contacts writing on behalf of a company are processed for VP’s legitimate interest in managing requests and relationships with the represented organization, to the extent necessary and in compliance with the data subject’s rights (Art. 6, para. 1, subpar. f, GDPR).
The legal requirements and the handling of requests to exercise rights are based on the relevant legal obligations (Art. 6, para. 1, subpar. c, GDPR). The purposes related to customer relationships are described in Section 09.
3 – Target Audience and Technical Services
Requests are sent via turboSMTP to authorized representatives at Vetroresina Padana and managed in the company’s Microsoft 365 mailboxes. The hosting services, Cloudflare Turnstile, and iubenda are involved, respectively, in the infrastructure, form security, and preference management. Data is neither sold nor disclosed.
Within VP, data is processed by authorized individuals who need it to respond to requests and carry out the commercial, technical, or administrative activities within their purview. The involvement of the technical service providers listed above pertains to their respective services; it does not replace VP’s handling of the request.
4 – Storage
Vetroresina Padana receives inquiries, responds to them, and, when appropriate, prepares a quote. Inquiries, responses, and correspondence remain in the company’s email inboxes; quotes are also stored in the relevant database. Currently, there is no established retention period, and no periodic deletion is scheduled. This description of current practice does not define an unlimited retention period in compliance with the GDPR: specific periods or criteria—distinguished by unfulfilled requests, customer relationships, and legal obligations—must still be identified and applied. The retention periods for suppliers’ technical data also need to be verified.
5 – Rights of the Data Subject
You may request access to, correction, deletion, restriction, or portability of your data (where applicable), or object to its processing. You may also file a complaint with the Data Protection Authority. To exercise your rights, please use the contact information provided above.
You can write to info@vetroresinapadana.com, specifying the right you intend to exercise and providing the information needed to identify the request or the record to which it refers. If there are reasonable doubts regarding your identity, we may request only the additional information necessary to verify it.
A response will be provided without undue delay and, as a general rule, within one month of receipt. In the cases provided for by the GDPR, this deadline may be extended by an additional two months, provided that the extension and the reasons for it are communicated within the first month. The exercise of these rights is, in principle, free of charge, subject to the exceptions provided for by law.
6 – Transfers and Automated Processes
Vetroresina Padana does not sell or disclose the data it receives. However, the data is processed by the technical service providers used for the services described above: the internal management of requests does not confirm that all processing takes place within the European Economic Area. The contractual roles, locations, and potential data transfers of these service providers have yet to be verified. In the event of transfers outside the European Economic Area, the conditions and safeguards applicable under the GDPR must be identified. No profiling or automated decision-making is planned.
7 – Cookies and Preferences
Iubenda manages the banner and stores explicit acceptance or rejection. No optional analytics or marketing technologies have been added; both options leave the necessary protections in place. For verified tools and known durations, please refer to the Cookie Policy. No consent for newsletters or marketing is added to the contact forms.
8 – Customers and Company Contacts
Data from the report. When a request leads to a business relationship, we process the identifying information and contact details of the customer and their representatives, the information necessary for quotes, orders, and contracts, and, where applicable, billing and payment information. These categories include only the information actually necessary for the business relationship, not new data requested from website visitors.
Purpose. The data is used to prepare and manage offers, fulfill orders, handle operational communications and administrative and tax obligations, and resolve any disputes. The legal basis is the performance of the contract when the data subject is a party to it, compliance with legal obligations, and—for the management of corporate contacts or the protection of a right—the relevant legitimate interest, within the limits of necessity and proportionality (Article 6(1)(b), (c), and (f) of the GDPR).
Access to data. Authorized VP personnel who are monitoring the report will be involved, as well as—for services that have actually been used—the technical providers listed in Section 03. Any disclosures required to comply with legal obligations or to protect a right are limited to the relevant parties and to the pertinent information.