PRIVACY POLICY
(pursuant to Article 13 of Regulation (EU) 2016/679)

This Privacy Policy is intended to describe, pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter also “GDPR”), the methods used to process the data of users/visitors (hereinafter also referred to as “Data Subjects”) who browse the website www.par-tec.it (hereinafter the “Website”). This information notice is provided exclusively for the Website mentioned above and not for any other websites or sections/pages/spaces owned by third parties that may be consulted by the user via specific links.

  1. DATA CONTROLLER

The Data Controller is PAR-TEC S.p.A. (hereinafter the “Data Controller”), Tax Code 12938200156, with registered office at Via Panfilo Castaldi 11, 20124 Milan, which can also be contacted at the following certified email address (PEC): par-tec@pec.it.

  1. PERSONAL DATA SUBJECT TO PROCESSING

The Data Controller will process the following categories of Personal Data:

a. Browsing data

Personal Data collected during your browsing of the Website. Such Personal Data include, for example, the IP address, location (country), domain names of the computer or device you use, the URI (Uniform Resource Identifier) addresses of requested resources, the time of requests, the method used to submit requests to the server, the size of files returned in response, the numerical code indicating the server response status (successful, error, etc.), and so forth.

The operation of the Website involves the use of information systems and software procedures that collect information about Website users as part of their normal functioning. Although the Data Controller does not collect such information with the intention of associating it with identified individuals, users may nonetheless be identifiable either directly through such information or by using other data collected—in which case such information constitutes Personal Data.

b. Personal Data voluntarily provided

The Data Controller will process the Personal Data provided in connection with requests submitted to the email addresses and phone numbers available on the Website or voluntarily entered in the relevant contact forms. Where necessary, specific information notices pursuant to Article 13 of the Regulation and any requests for consent will be progressively displayed on the pages provided for this purpose and accessible through the Website.

c. Cookies

The Data Controller will process Personal Data collected through cookies and other tracking tools. For further details about Personal Data processed through cookies and tracking tools, please refer to the relevant Cookie Policy.

  1. PURPOSES OF PROCESSING AND LEGAL BASIS

Personal Data will be processed for the following purposes:

a) Allow Website browsing and interaction with its content, including Website security management

The Data Controller will process the browsing Personal Data referred to in paragraph 2(a), pursuant to Article 6(1)(b) GDPR. Providing Personal Data for this purpose is optional; however, failure to provide such data would make it impossible to access and browse the Website.

b) Manage and respond to specific requests or provide the requested services

The Data Controller will process the Personal Data referred to in paragraph 2(b) pursuant to Article 6(1)(b) GDPR. Providing Personal Data is optional but necessary to receive a response.

c) Sending of periodic newsletters (direct marketing)

With the Data Subject’s prior consent, the Data Controller will process the Personal Data referred to in paragraph 2(b) for sending promotional communications via email regarding corporate events and information on products and services offered by Par-Tec or by companies belonging to the same group. Processing is based on consent pursuant to Article 6(1)(a) GDPR.

d) Soft opt-in communications (direct marketing based on legitimate interest)

The Data Controller may process Personal Data relating to products or services previously purchased, in order to offer products or services similar to those of interest to the Data Subject.
This processing is based on the Data Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR (“soft opt-in”).
Data Subjects may object at any time pursuant to Article 21 GDPR.

e) Compliance with legal obligations

Personal Data referred to in paragraph 2 will be processed to fulfil legal obligations pursuant to Article 6(1)(c) GDPR.

f) Establishment, exercise or defence of legal claims

Personal Data referred to in paragraph 2 will be processed to protect the legitimate rights and interests of the Data Controller in judicial or extrajudicial proceedings, pursuant to Article 6(1)(f) GDPR.

  1. METHODS OF PROCESSING PERSONAL DATA

Personal Data will be processed using manual, electronic, and telematic tools, with logic strictly related to the purposes described above and in compliance with the security requirements set out in the applicable law, particularly Article 32 GDPR.

  1. RETENTION OF PERSONAL DATA

Personal Data processed for the purposes described in paragraph 3 will be retained only for the time strictly necessary to achieve those purposes, in line with the principles of minimisation and storage limitation under Article 5(1)(c) and (d) GDPR.

In particular:

  • Personal Data provided by the Data Subject, including data related to assistance requests submitted by phone, email or forms, will be retained for purpose b) in a non-anonymised form for the time reasonably necessary to fulfil the purpose and, in any case, for a maximum of 1 year.
  • Personal Data collected for newsletter purposes (purpose c) will be retained until consent is withdrawn.
  • Personal Data collected for soft opt-in purposes (purpose d) will be retained as long as reasonably necessary to pursue the legitimate interest identified in this Privacy Policy.
  • Personal Data processed for legal obligations (purpose e) will be retained for the time prescribed by the relevant applicable law.
  • The Data Controller reserves the right to retain Personal Data for the time necessary for the establishment, exercise or defence of legal claims, including in pre-litigation or extrajudicial contexts.
  1. RECIPIENTS

Personal Data may be shared, for the purposes described in paragraph 3, with the following Recipients:

  • Persons authorised by the Data Controller pursuant to Articles 29 and 32 GDPR and Article 2-quaterdecies of Legislative Decree 196/2003, bound by confidentiality obligations;
  • Subjects acting as data processors under Article 28 GDPR, such as providers of technical, hosting, maintenance or consulting services necessary for the Website’s operation;
  • Entities, authorities or third parties to whom disclosure is required by law or by order of authorities, acting as independent data controllers.
  1. DATA TRANSFERS

Personal Data will not be transferred to Recipients located outside the European Economic Area.
Should such transfers occur, they will be carried out in compliance with Articles 44–49 GDPR, including, where applicable, the adoption of Standard Contractual Clauses approved by the European Commission or other lawful safeguards consistent with EDPB Recommendations 01/2020.

  1. DATA SUBJECT RIGHTS

Data Subjects may exercise the following rights at any time:

  1. Right of access (Art. 15 GDPR)
  2. Right to rectification (Art. 16 GDPR)
  3. Right to erasure / right to be forgotten (Art. 17 GDPR)
  4. Right to restriction of processing (Art. 18 GDPR)
  5. Right to data portability (Art. 20 GDPR)
  6. Right to withdraw consent (Art. 7(3) GDPR)
  7. Right to object (Art. 21 GDPR)
  8. Right to lodge a complaint with the Data Protection Authority (Art. 51 GDPR)
  1. UPDATES TO THIS WEBSITE POLICY

The Data Controller reserves the right to amend or update this Privacy Policy. In the event of substantial changes in the way Personal Data is processed, a clear notice will be displayed on the Website and, where necessary, Data Subjects will be contacted directly. Those who do not accept such changes are invited to discontinue use of the Website and withdraw any consent previously provided.

  1. HOW TO CONTACT THE DATA CONTROLLER AND EXERCISE RIGHTS

For questions or to exercise the rights described above, the Data Subject may send a written communication to:

PAR-TEC S.p.A.
Via Panfilo Castaldi 11, 20124 Milan
Email: privacy@par-tec.it

The Company has not appointed a Data Protection Officer (DPO), as it is not required to do so under Article 37 GDPR.

Last updated: November 2025