Privacy Policy

Last updated: May 20, 2026

This notice describes how FITEC S.r.l. processes personal data of visitors to www.fitec.it, pursuant to Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (“Privacy Code”).

1. Data Controller

FITEC S.r.l.
Via Goito 51/A — 10095 Grugliasco (TO), Italy
VAT no.: 11356270014
Email: info@fitec.it
Phone: +39 011 4175146

FITEC has not appointed a Data Protection Officer (DPO) as the conditions under Article 37 GDPR do not apply. For any privacy-related request please contact the Controller directly using the details above.

2. Categories of data processed

www.fitec.it is a fully static website: it contains no contact forms, uses no cookies, integrates no analytics tools and runs no profiling systems. No direct collection of personal data takes place through the website.

2.1 Browsing data (technical logs)

The IT systems and software procedures that run the website acquire, during their normal operation, certain browsing data the transmission of which is inherent to the use of internet protocols (e.g. IP addresses, browser type, operating system, request time, requested page). These data are processed solely for aggregated statistical purposes and to ensure proper site operation, and are erased immediately after processing.

2.2 Data provided voluntarily by the user

The site publishes an email address and a public phone number. Voluntarily sending communications to these contacts entails the subsequent acquisition of the sender's data as needed to reply. Such data is processed solely to handle the request.

2.3 Data transmitted to third-party providers during browsing

The site loads external resources from technical providers (fonts, icons). These services may receive from the user's browser the IP address, user-agent and referrer for the sole purpose of serving the resource. Further details are provided in section 5 and in the Cookie Policy.

3. Purposes and legal bases

The data above is processed for the following purposes:

  • Site operation and information security — legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR) to ensure the operation, security and integrity of the website.
  • Responding to contact requests — legal basis: pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR) or performance of an existing contract.
  • Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR), e.g. requests from judicial authorities or other competent bodies.

4. Processing methods

Data is processed using electronic tools and appropriate technical and organisational measures to ensure the security, integrity and confidentiality of the data, as required by Art. 32 GDPR. Only authorised personnel access data for the purposes indicated.

5. Data recipients

Collected data is not disseminated nor disclosed to third parties except to the following service providers acting as Processors (Art. 28 GDPR) or as independent controllers:

  • Hosting provider — runs and maintains the website; processes technical logs as Data Processor.
  • Social sharing networks (LinkedIn, X/Twitter, WhatsApp) — only when the user actively clicks share buttons within news articles, the browser connects to the respective platforms. These platforms act as independent controllers.
  • Competent authorities — where disclosure is legally required or necessary for legal defence.

6. Transfers outside the EU

The social sharing platforms listed in section 5 may involve the transfer of personal data outside the European Economic Area, exclusively when the user voluntarily activates the share button. Such transfers take place on the basis of appropriate safeguards under Articles 44-49 GDPR, in particular via Standard Contractual Clauses approved by the European Commission or adequacy decisions (e.g. the EU-US Data Privacy Framework).

7. Retention period

  • Browsing logs: up to 30 days, except where needed to investigate offences.
  • Contact emails: for the time necessary to handle the request and up to 24 months thereafter, unless a contractual relationship continues.
  • Data processed for tax/accounting obligations: 10 years, pursuant to Art. 2220 of the Italian Civil Code.

8. Rights of the data subject

Pursuant to Articles 15-22 GDPR, the data subject has the right to:

  • Access their personal data (Art. 15);
  • Rectify inaccurate or incomplete data (Art. 16);
  • Erasure of data (“right to be forgotten”, Art. 17);
  • Restrict processing (Art. 18);
  • Data portability in a structured format (Art. 20);
  • Object to processing based on legitimate interest (Art. 21);
  • Withdraw consent at any time, without affecting the lawfulness of processing already carried out (Art. 7(3)).

9. How to exercise your rights

To exercise the rights above, please write to info@fitec.it or send a written request to FITEC S.r.l.'s registered office. The request will be handled within 30 days from receipt, pursuant to Art. 12 GDPR.

10. Complaint to the supervisory authority

If you believe that the processing of your personal data infringes GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it.

11. Automated decision-making and profiling

The site does not carry out any profiling nor automated decision-making within the meaning of Art. 22 GDPR.

12. Changes to this notice

This notice may be updated at any time to reflect legal or operational changes. Updated versions will be published on this page with the date of last update.