This privacy notice describes how the personal data of users who browse and use this website are processed, pursuant to Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian legislation on personal data protection.
1. Data Controller
The Data Controller of the personal data is:
Sermen S.r.l.
Vicolo Raffaello Sanzio, 5
35020 Albignasego (PD)
Phone: +39 049 8629016
Email: info@sermen.com
Certified email: sermen@pec.realt.it
2. Types of data processed
2.1 Browsing data
The IT systems and software procedures used to operate the website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category includes, by way of example:
- IP address;
- type of browser and device used;
- operating system;
- domain name and addresses of the websites from which access was made;
- pages visited;
- date and time of the visit;
- time spent on the pages;
- any browsing errors.
These data are used solely to obtain anonymous statistical information on the use of the website, to check its correct functioning and to ensure the security of the systems.
2.2 Data voluntarily provided by the user
The optional, explicit and voluntary sending of messages to the email addresses indicated on the website, or the completion of any contact forms, entails the acquisition of the personal data communicated by the user.
Such data may include, by way of example:
- name and surname;
- email address;
- telephone number;
- company or organisation of affiliation;
- content of the message;
- any additional data freely entered by the user in the communication.
3. Purposes of processing
The personal data collected through the website are processed for the following purposes:
- to allow browsing and proper use of the website;
- to respond to requests for information, quotations or contact sent by the user;
- to manage administrative, technical or commercial communications requested by the data subject;
- to comply with legal obligations, regulations or requests from competent authorities;
- to ensure website security and prevent fraud, abuse or unauthorised access;
- to establish, exercise or defend a right in judicial or extrajudicial proceedings.
4. Legal basis for processing
The processing of personal data is based on the following legal grounds:
- performance of pre-contractual or contractual measures, in order to respond to requests sent by the user;
- compliance with legal obligations, where applicable;
- legitimate interest of the Controller, to ensure the security of the website, prevent abuse and protect its rights;
- user consent, where required, for example for the use of non-technical cookies or for specific promotional activities.
5. Methods of processing
Personal data are processed using IT, telematic and, where necessary, paper-based tools, according to criteria strictly related to the purposes indicated above.
The Controller adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unlawful disclosure.
6. Provision of data
The provision of browsing data is necessary for the use of the website.
The provision of data via email or contact forms is optional; however, failure to provide the necessary data may prevent the Controller from responding to the user’s requests.
7. Recipients of the data
Personal data may be processed by persons authorised by the Controller and, where necessary, disclosed to third parties that provide services functional to the management of the website and company activities.
By way of example, data may be processed by:
- hosting and technical maintenance service providers;
- email and certified email service providers;
- administrative, tax, legal or IT consultants;
- public authorities, in the cases provided for by law.
Third parties that process personal data on behalf of the Controller are appointed, where necessary, as Data Processors pursuant to Article 28 of the GDPR.
8. Transfer of data outside the European Economic Area
Personal data are processed mainly within the European Economic Area.
Where, for technical or operational reasons, data are transferred to countries outside the European Economic Area, the transfer will take place in compliance with the safeguards provided for by the GDPR, including adequacy decisions, standard contractual clauses or other appropriate measures.
9. Retention period
Personal data are retained for the time strictly necessary to achieve the purposes for which they were collected.
In particular:
- browsing data are retained for the time necessary to ensure the functioning and security of the website;
- data sent through contact requests are retained for the time necessary to manage the request and any resulting relationship;
- data necessary to comply with legal obligations are retained for the periods provided for by the applicable legislation;
- data necessary to protect the Controller’s rights may be retained for the statutory limitation period applicable to the relevant rights.
10. Cookies and tracking tools
The website may use technical cookies necessary for the correct functioning of the pages and browsing.
Any analytics cookies, profiling cookies or third-party tracking tools will be used only within the limits provided for by applicable law and, where necessary, with the user’s prior consent.
For more information on the cookies used by the website, the user may consult the dedicated Cookie Policy, where available.
11. Rights of the data subject
The user, as data subject, may exercise at any time the rights provided for in Articles 15 et seq. of the GDPR.
In particular, the user has the right to:
- obtain confirmation as to whether or not personal data concerning them exist;
- obtain access to their personal data;
- request the rectification of inaccurate data or the completion of incomplete data;
- request the erasure of data, in the cases provided for by law;
- request restriction of processing;
- object to processing, where the conditions apply;
- receive the data in a structured, commonly used and machine-readable format, where applicable;
- withdraw consent given, without affecting the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with the Italian Data Protection Authority.
12. How to exercise rights
To exercise their rights, the user may contact the Controller at the following contact details:
Email: info@sermen.com
Certified email: sermen@pec.realt.it
The Controller will respond to requests within the time limits provided for by the applicable legislation.
13. Complaint to the Supervisory Authority
If the user believes that the processing of their personal data is carried out in breach of applicable law, they have the right to lodge a complaint with the Italian Data Protection Authority, according to the procedures indicated on the Authority’s official website:
www.garanteprivacy.it.
14. Changes to this privacy notice
The Controller reserves the right to amend or update this Privacy Policy at any time, including as a result of regulatory changes or technical changes to the website.
Users are invited to consult this page periodically.
Last updated: 27 April 2026