PRIVACY POLICY

Last updated: September 28, 2026

This Privacy Policy describes how personal data of users visiting the website https://attiqua.it/ is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection legislation.

1. DATA CONTROLLER

The Data Controller responsible for processing personal data collected through this website is:

Azienda Agricola Mandaglio Antonino
Registered office: Strada Provinciale Scoforio, 89010 Terranova Sappo Minulio (RC), Italy
VAT Number: 01431320801
REA Number: 128344 RC
Email: info@attiqua.it
Website: https://attiqua.it/

The Data Controller determines the purposes and means of processing personal data and undertakes to protect its confidentiality and security in compliance with applicable legislation.

For any information regarding the processing of personal data or to exercise data protection rights, users may contact the Data Controller at info@attiqua.it.

2. TYPES OF PERSONAL DATA COLLECTED

When users browse the website or use its services, the following categories of personal data may be collected:

Identification and contact data

First name, last name, email address, telephone number and any other information voluntarily provided through contact forms or other communication channels available on the website.

Browsing data

The IT systems and software procedures used to operate this website collect certain personal data during their normal operation, including IP addresses, browser information, device details, date and time of access and pages visited.

This data is used for technical purposes, security and to ensure the proper functioning of the website.

Other voluntarily provided data

Any additional personal information voluntarily provided by users via email, information requests or other communication channels made available by the Data Controller.

Users are advised not to provide unnecessary personal data, particularly special categories of personal data under Article 9 of the GDPR, unless strictly necessary and processed in accordance with applicable law.

3. PURPOSES AND LEGAL BASIS OF PROCESSING

Personal data collected through the website is processed for the following purposes:

A. Handling contact requests

Personal data provided through contact forms or email addresses is used to respond to enquiries, provide information and manage communications.

The legal basis is the implementation of pre-contractual measures at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR, or the legitimate interest of the Data Controller in managing incoming communications, pursuant to Article 6(1)(f), where applicable.

B. Provision of services

Personal data may be processed to provide requested services, manage contractual relationships and fulfil related obligations.

The legal basis is the performance of a contract or pre-contractual measures, pursuant to Article 6(1)(b) of the GDPR, and compliance with legal obligations, pursuant to Article 6(1)(c), where applicable.

C. Website operation and security

Technical and browsing data may be processed to ensure the proper functioning of the website, prevent fraudulent activities, detect anomalies and protect IT systems.

The legal basis is the legitimate interest of the Data Controller in maintaining website security and proper operation, pursuant to Article 6(1)(f) of the GDPR.

D. Compliance with legal obligations

Personal data may be processed to comply with applicable laws and regulations or to respond to legitimate requests from competent authorities.

The legal basis is compliance with a legal obligation, pursuant to Article 6(1)(c) of the GDPR.

E. Marketing communications

Subject to the user’s freely given, specific, informed and unambiguous consent, contact details may be used to send informational, promotional and commercial communications relating to the Data Controller’s services and activities.

The legal basis is the user’s consent, pursuant to Article 6(1)(a) of the GDPR.

Users may withdraw their consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

This purpose applies only if the Data Controller actually carries out marketing activities.

4. METHODS OF PROCESSING

Personal data is processed using electronic, digital and, where necessary, paper-based tools, with appropriate technical and organisational measures to ensure its security, confidentiality and integrity.

Processing is carried out in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation and storage limitation set out in the GDPR.

Personal data is processed only by individuals authorised by the Data Controller and, where necessary, by external service providers appointed as Data Processors.

5. DATA RETENTION PERIOD

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal obligations.

In particular:

  • Contact requests: for the time required to handle the request, generally no longer than 12 months after the communication has ended, unless further retention is justified.
  • Contractual relationships: for the duration of the relationship and thereafter for the period required by applicable civil and tax laws.
  • Browsing data: for the period strictly necessary for technical, security and operational purposes, in accordance with applicable retention policies.
  • Marketing: until consent is withdrawn and, in any case, for a proportionate period based on the actual marketing activities.

At the end of the applicable retention period, personal data will be deleted or anonymised, unless further retention is required by law or to establish, exercise or defend legal claims.

6. DISCLOSURE AND RECIPIENTS OF DATA

Personal data will not be disclosed indiscriminately.

It may be shared, within the limits of the purposes described above, with the following categories of recipients:

  • Employees and collaborators authorised by the Data Controller.
  • IT service providers, hosting providers and website maintenance providers.
  • Email and communication service providers.
  • Legal, tax and professional consultants, where necessary.
  • Public authorities and competent bodies, where required by law.

External parties processing personal data on behalf of the Data Controller will be appointed as Data Processors pursuant to Article 28 of the GDPR, where required.

Users may request an updated list of Data Processors by contacting the Data Controller.

7. TRANSFERS OF DATA OUTSIDE THE EU

Personal data is generally processed within the European Economic Area.

If personal data needs to be transferred to countries outside the European Economic Area for technical or organisational reasons, such transfers will comply with Articles 44 et seq. of the GDPR. Transfers will be based on an adequacy decision issued by the European Commission or, where applicable, appropriate safeguards such as Standard Contractual Clauses.

Users may request further information about the safeguards adopted by contacting the Data Controller.

8. COOKIES AND TRACKING TECHNOLOGIES

The website may use cookies and similar technologies to ensure proper website functionality, improve the browsing experience and, where applicable, collect statistical information or carry out marketing activities.

Cookies may be divided into the following categories:

Technical cookies

These are necessary for the proper functioning of the website and to enable users to browse and use requested features. They do not require prior consent where permitted by law.

Analytics cookies

These may be used to collect information about website usage, such as the number of visitors, pages viewed and browsing behaviour. Where not exempt under applicable law, they are used only with the user’s consent.

Profiling and marketing cookies

These may be used to analyse user preferences and deliver personalised content or advertising. They are installed only with the user’s consent.

Users may manage their preferences through the cookie banner and any consent management tools available on the website, or by changing their browser settings.

For further information about the cookies actually used, their providers, retention periods and consent management, please refer to the relevant Cookie Policy, if available.

9. PROVISION OF PERSONAL DATA

Providing personal data is voluntary, except where such data is necessary to comply with legal obligations or perform a contract.

Failure to provide data required to process a specific request may make it impossible to provide the requested service or respond to the user.

Refusing consent for optional processing, such as marketing or non-essential cookies, does not affect the ability to browse the website or use services that do not require such processing.

10. DATA SUBJECT RIGHTS

Under Articles 15 to 22 of the GDPR, users have the right to:

  • Obtain confirmation as to whether personal data concerning them is being processed.
  • Access their personal data and obtain information about how it is processed.
  • Request the rectification of inaccurate data or completion of incomplete data.
  • Request the erasure of personal data in the cases provided for by law.
  • Request restriction of processing in the cases provided for by the GDPR.
  • Object to the processing of personal data, where applicable.
  • Receive personal data in a structured, commonly used and machine-readable format and, where applicable, request its transmission to another controller.
  • Withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • Not be subject to decisions based solely on automated processing, including profiling, in the cases provided for by Article 22 of the GDPR.

To exercise these rights, users may contact the Data Controller using the contact details provided in this Privacy Policy.

The Data Controller will respond within the time limits set out in Article 12 of the GDPR.

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it if they believe that their personal data has been processed in breach of applicable law.

11. DATA SECURITY

The Data Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, alteration or accidental or unlawful destruction.

Security measures are determined by considering the nature of the data processed, the purposes of processing and the risks to the rights and freedoms of data subjects.

Despite the adoption of appropriate security measures, no IT system can guarantee absolute security.

12. LINKS TO THIRD-PARTY WEBSITES

The website may contain links to third-party websites or platforms.

The Data Controller is not responsible for the personal data processing practices of the operators of such external websites.

Users are encouraged to review the relevant privacy policies before providing personal data through third-party platforms.

13. CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to update or amend this Privacy Policy at any time, including following regulatory, organisational or technological changes.

Any changes will be published on this page, together with the date of the latest update.

Users are encouraged to review this Privacy Policy periodically.

14. CONTACT DETAILS

For any questions, requests for clarification or matters relating to the processing of personal data and the exercise of rights under the GDPR, users may contact the Data Controller at:

Azienda Agricola Mandaglio Antonino
Address: Strada Provinciale Scoforio, 89010 Terranova Sappo Minulio (RC), Italy
Email: info@attiqua.it
VAT Number: 01431320801
REA Number: 128344 RC

Website: https://attiqua.it/