Privacy Policy

Information on the processing of personal data pursuant to the GDPR

1. Data controller

Technofluid S.r.l.
Registered office: [Full address], Messina (ME) - Italy
VAT: [VAT number].
Email: pr*****@*********id.it
PEC: [PEC address].
Telephone: +39 090 7386877

2. Legal basis of the Treatment

The processing of personal data is based on the following legal bases, pursuant to Article 6 of the EU Regulation 2016/679 (GDPR):

Execution of a contract (Art. 6.1.b): for the processing of orders and the provision of requested services
Fulfilment of legal obligations (Art. 6.1.c): for tax, accounting and regulatory obligations
Legitimate interest (Art. 6.1.f): for fraud prevention and service improvement
Consent (Art. 6.1.a): for marketing and profiling activities

3. Personal Data Collected

3.1 Data provided voluntarily

Category	Type of data	Purpose
Identifying data	Name, surname, tax code, VAT number	Account registration, billing
Contact details	Email, telephone, address	Communications, shipments
Payment data	Credit card data (via secure gateways)	Payment processing
Navigation data	IP address, cookies, access log	Site operation, security, analysis

3.2 Automatically collected data

During navigation, certain technical data are automatically collected, including:

IP address and browser type
Operating system and device used
Pages visited and time spent
Referrer site

4. Purpose of Processing

Personal data are processed for the following purposes:

Order management: processing, shipping and after-sales service
Legal compliance: tax, accounting and regulatory obligations
Communications of service: order confirmations, shipment updates, customer service
Marketing (prior consent): newsletters, promotions, customised offers
Improvement of services: anonymous statistical analysis of site use
Security: fraud prevention and site protection

5. Data recipients

Personal data may be communicated to

Couriers and forwarders for the delivery of products
Banking institutions and payment gateways for payment processing
Consultants and professionals (accountants, lawyers) for legal fulfilment
IT service providers for hosting and site maintenance
Competent authorities when required by law

Data are not sold or passed on to third parties for marketing purposes without explicit consent.

6. Extra-EU Data Transfer

Some service providers (e.g. Google, Facebook) may process data outside the European Union. In this case, the transfer takes place in compliance with the guarantees provided by the GDPR, through:

Adequacy Decisions of the European Commission
Standard Contract Clauses (SCC)
Other appropriate regulatory guarantees

7. Conservation Period

Type of data	Storage period
User account data	Until account deletion or request for deletion
Order and invoicing data	10 years (tax obligations)
Data for marketing	Until revocation of consent or max. 24 months after last contact
Navigation logs	12 months

8. Rights of the Data Subject

Pursuant to Articles 15-22 of the GDPR, you have the right to:

📋 Right of Access

Obtaining confirmation of processing and copies of personal data

✏️ Right of Rectification

Correcting inaccurate or incomplete data

🗑️ Right to Cancellation

Request deletion of data (“right to be forgotten”)

⏸️ Right to Limitation

Limiting treatment under certain circumstances

📦 Right to Portability

Receive data in a structured and readable format

🚫 Right of Opposition

Objecting to processing for legitimate interest or marketing

To exercise your rights, please contact us at pr*****@*********id.it

9. Complaint to the Control Authority

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Data Protection Authority:

Data Protection Authority
Piazza Venezia, 11 - 00187 Rome
Email: ga*****@**dp.it
PEC: pr********@******dp.it
Website: www.garanteprivacy.it

10. Cookies

The site uses technical, analytical and profiling cookies. For detailed information, please consult our Cookie Policy.

11. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure, including:

SSL/TLS encryption for data transmission
Firewalls and intrusion detection systems
Limited access to data on a need-to-know basis“
Regular backups and disaster recovery procedures

12. Changes to the Privacy Policy

We reserve the right to change this Privacy Policy at any time. Changes will be posted on this page with an indication of the date of update.

Last updated: January 2026