Privacy Policy

Data voluntarily provided by the user: by filling in the Site forms (contact request, quote request, catalogue download, newsletter subscription) the user provides identification and contact data such as name, company name, email address, phone, city, country and the content of the message.

Browsing data: the Site's IT systems acquire, during normal operation, some data whose transmission is implicit in the use of Internet protocols (e.g. IP addresses, request time, page visited). Such data is used in aggregate, anonymous form solely to ensure the proper functioning of the Site and for statistical purposes.

Cookies and measurement tools: see the Cookie Policy for details on cookies and analytics tools, which are activated only with the user's prior consent.

a) Responding to requests (contact, quote, catalogue): processing is necessary for the performance of pre-contractual measures taken at the data subject's request (art. 6.1.b GDPR).

b) Newsletter: processing is based on the consent given through voluntary subscription (art. 6.1.a GDPR). Subscription can be withdrawn at any time.

c) Site usage statistics through measurement tools using identifiers: consent (art. 6.1.a GDPR), given via the cookie banner.

d) Security and proper functioning of the Site: legitimate interest of the Controller (art. 6.1.f GDPR).

Data is processed with electronic tools, with security measures adequate to prevent unauthorised access, disclosure, alteration or destruction.

Data collected through the forms is stored in the Controller's management system for the time needed to respond to the request and, for commercial purposes connected to the established relationship, for a maximum of 24 months from the last contact. Newsletter subscription data is kept until unsubscription.

Data may be processed by technical service providers acting as data processors under art. 28 GDPR, including: Vercel Inc. (Site hosting), Supabase Inc. (management system database infrastructure), Google Ireland Ltd. (measurement services, only with consent).

Data is not disseminated or sold to third parties.

Some providers may process data in third countries (e.g. the United States). In such cases the transfer takes place on the basis of adequacy decisions of the European Commission (EU-US Data Privacy Framework) or standard contractual clauses (SCC).

Data subjects may exercise at any time the rights under arts. 15-22 GDPR: access, rectification, erasure, restriction, data portability, objection and withdrawal of consent (without affecting the lawfulness of prior processing).

Requests should be addressed to info@rexpo-italy.com. Data subjects also have the right to lodge a complaint with the competent supervisory authority (for Italy: Garante per la Protezione dei Dati Personali — www.garanteprivacy.it).

Providing the data marked as mandatory in the forms is necessary to respond to the request; failure to provide it makes it impossible to process the request. Provision of the remaining data is optional.

The Controller reserves the right to amend this notice. Updated versions are published on this page with the revision date.