1. Data Controller

The Data Controller is Gruppo Cestari S.r.l., with registered office in Salerno, Italy.

Email: privacy@gruppocestari.com
Phone: +39 089 791 344
PEC: gruppocestari@pec.it

2. Types of Data Collected

Among the personal data collected by this website, either independently or through third parties, are: usage data, email, first name, last name, phone number, company name, VAT number and address.

Personal data may be freely provided by the User or, in the case of usage data, collected automatically when using this website.

3. Purpose of Processing

User data is collected for the following purposes:

Management of contact and consultation requests
Sending commercial communications and newsletters (with prior consent)
Management of the reserved area and related services
Compliance with legal and tax obligations
Aggregate and anonymous statistical analysis

4. Legal Basis for Processing

The processing of personal data is based on:

Consent: for sending newsletters and commercial communications
Contractual execution: for managing requested services
Legal obligation: for tax and regulatory compliance
Legitimate interest: for statistical analysis and service improvement

5. Processing Methods

Processing is carried out using IT and/or telematic tools, with organizational and logical methods strictly related to the stated purposes. Adequate technical and organizational security measures are adopted.

6. Data Retention

Personal data will be retained for the time necessary to achieve the purposes for which they are processed and in any case:

Contractual data: 10 years from termination of the relationship
Tax data: according to legal terms
Marketing data: until consent is withdrawn
Browsing data: 24 months

7. Data Subject Rights

The User may exercise the following rights:

Access: obtain confirmation of processing and a copy of the data
Rectification: correct inaccurate or incomplete data
Erasure: request deletion of data
Restriction: limit processing in certain cases
Portability: receive data in structured format
Objection: object to processing for legitimate reasons
Consent withdrawal: at any time, without affecting the lawfulness of previous processing

To exercise their rights, Users can send a request to privacy@gruppocestari.com.

8. Data Communication and Disclosure

Personal data will not be disclosed. They may be communicated to:

Entities providing services for IT system management
Professional firms for legal, tax and accounting consultancy
Competent authorities for legal compliance

9. Data Transfer

Personal data is processed at the Controller's premises and in the data centers of IT service providers. Data is not transferred outside the European Union.

10. Changes to Privacy Policy

The Controller reserves the right to make changes to this privacy policy at any time, informing Users on this page.