Last update: January 2025

This policy describes how Isolcell S.p.A., located at Via A. Meucci, 7 – 39055 Laives (BZ), Italy, processes personal data as Data Controller under Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

Isolcell S.p.A.

Via A. Meucci, 7

39055 Laives (BZ) – Italy

Tel. +39 0471 95 40 50

Email: isolcell@isolcell.com

PEC (if applicable): [insert]

2. Types of data processed

Browsing data

– IP addresses

– Access logs

– Technical data on browser, device, session

– Cookies and similar technologies (see Cookie Policy)

Data voluntarily provided by the user

– First and last name

– Contact details (email, phone)

– Company and job role

– Information submitted via contact forms

Data for commercial or pre-contractual purposes

– Product/service inquiries

– Meeting or demo bookings

– Newsletter subscriptions

3. Purposes and legal bases

Website browsing

Ensure technical operation and security.

Legal basis: legitimate interest (Art. 6.1.f GDPR)

Handling contact requests

Respond to information or support requests.

Legal basis: pre-contractual measures (Art. 6.1.b)

Commercial and informational activities

Providing information, organising visits and demonstrations.

Legal basis: pre-contractual measures / legitimate interest

Newsletter and marketing communications

Sending news, updates and events.

Legal basis: consent (Art. 6.1.a)

Legal and fiscal obligations

Legal basis: compliance with legal obligations (Art. 6.1.c)

Legal defence

Legal basis: legitimate interest

4. Processing methods

Data is processed via electronic and/or paper tools with adequate security measures.

No automated decision-making or profiling occurs without explicit consent.

5. Provision of data

Necessary for purposes 3.2 and 3.3; optional for newsletter (3.4).

6. Data disclosure

Recipients may include:

– Authorised internal staff

– IT/hosting/maintenance providers

– Consultants and professionals

– Technical or commercial partners

– Authorities when legally required

All providers are appointed Data Processors under Art. 28 GDPR.

7. Data transfers outside the EU

Possible transfers (cloud, analytics, newsletter) follow GDPR Art. 44–49 through:

– Standard Contractual Clauses

– Adequacy decisions

– Additional safeguards

8. Data retention

– Browsing logs: 30–180 days

– Contact requests: up to 24 months

– Newsletter data: until consent withdrawal

– Administrative documents: as required (10 years)

9. User rights

Access, rectification, erasure, restriction, portability, objection, and consent withdrawal.

Requests to: isolcell@isolcell.com

Complaints may be filed with the Italian Data Protection Authority.

10. Minors

The site is not intended for users under 16.

11. Policy updates

This policy may be updated at any time.