Privacy Policy

Arco International S.r.l., with its registered office at Via Sostegno 6/B 25124 – Brescia (BS), VAT number 02354510980 and Tax Code 02354510980, in its capacity as the Data Controller (hereinafter referred to as “Data Controller”), informs you, pursuant to Article 13 of Legislative Decree No. 196/2003 (hereinafter, “Privacy Code”) and Article 13 of EU Regulation No. 2016/679 (hereinafter, “GDPR”), that your personal data will be processed in the following manner and for the following purposes:

1. Purpose of Processing

The Data Controller processes personal data, both identifying and non-sensitive (for example, but not limited to, name, surname, address, telephone number, email, etc. – hereinafter referred to as “personal data” or “data”) that you provide when registering on the website arcointernational.it (hereinafter referred to as “Site”), filling out and submitting a contact form to the Data Controller, or in any case, any request you make via the Site.

In addition, the Data Controller may collect anonymized information regarding navigation and interaction with the platform pages using external tools, such as Google Analytics. These data will be used for monitoring the service provided and the quality of the content displayed, and will not contain information that allows the identification of a specific individual.

2. Purpose of the Processing

Your personal data will be processed:

A. Without your explicit prior consent (Article 24, letters a), b), c) of the Privacy Code and Article 6, letters b), e) of the GDPR), for the following Service Purposes:

  • To fulfill pre-contractual, contractual, and fiscal obligations arising from existing relationships with you;
  • To allow you to register on the Site;
  • To process and manage orders received and/or purchases made online;
  • To process a contact request;
  • To manage and maintain the Site;
  • To comply with legal, regulatory, community, or authority orders;
  • To prevent or detect fraudulent activities or abuses harmful to the Site;
  • To exercise the Data Controller’s rights, such as the right of defense in court.

B. Only with your specific and separate consent (Articles 23 and 130 of the Privacy Code and Article 7 of the GDPR), for the following Marketing Purposes:

  • To send you newsletters, commercial communications, and/or advertising material regarding products or services of the Data Controller via email.

Please note that if you are already a customer of ours, we may send you commercial communications related to services and products similar to those you have already used, unless you object (Article 130, paragraph 4, of the Privacy Code).

3. Processing Methods

The processing of your personal data is carried out by the operations indicated in Article 4 of the Privacy Code and Article 4, No. 2) of the GDPR, and specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data will be processed both manually (in archives) and electronically and/or automatically (management software, Cloud Storage services, external SMTP email services).

The Data Controller will process your personal data for the time necessary to fulfill the purposes mentioned above and, in any case, for no longer than 10 years from the termination of the relationship for Service Purposes and no longer than 2 years from the collection of the data for Marketing Purposes.

4. Access to Data

Your data may be made accessible for the purposes referred to in Article 2.A) and 2.B):

  • To employees and collaborators of the Data Controller, in their capacity as internal persons in charge and/or responsible for the processing and/or system administrators;
  • To third-party companies or other entities (for example, website providers, e-payment service providers, suppliers, hardware and software technicians, credit institutions, professional firms, etc.) that perform outsourcing activities on behalf of the Data Controller, in their capacity as external data processors.

5. Data Communication

Without your explicit consent (pursuant to Article 24, letters a), b), d) of the Privacy Code and Article 6, letters b) and c) of the GDPR), the Data Controller may communicate your data for the purposes referred to in Article 2.A) to supervisory bodies, judicial authorities, where required by law. Your data will not be disseminated.

6. Data Transfer

The management and storage of personal data will take place on servers located within the European Union. The data will not be transferred outside the European Union. However, if necessary, the Data Controller may move the location of the servers to Italy and/or the European Union and/or non-EU countries. In such cases, the Data Controller ensures that the transfer of data outside the EU will comply with applicable legal provisions by entering into agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission.

7. Nature of Data Provision and Consequences of Refusal to Respond

The provision of data for the purposes referred to in Article 2.A) is mandatory. In its absence, we will not be able to provide you with the services referred to in Article 2.A). The provision of data for the purposes referred to in Article 2.B) is optional. You may therefore decide not to provide any data or later deny the processing of data already provided. In this case, you will not receive newsletters, commercial communications, and advertising material related to the products or services offered by the Data Controller, but you will still be entitled to the services referred to in Article 2.A).

8. Rights of the Data Subject

As data subjects, you have the rights set out in Article 7 of the Privacy Code and Article 15 of the GDPR, specifically the rights to:

  1. Obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
  2. Obtain the indication of: a) The source of the personal data; b) The purposes and methods of processing; c) The logic applied in case of processing carried out with the aid of electronic tools; d) The identification details of the data controller, the data processors, and the representative designated pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1 of the GDPR; e) The subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representatives in the State, data processors, or authorized persons;
  3. Obtain: a) The update, rectification, or, when you have an interest, the integration of data; b) The deletion, anonymization, or blocking of data processed in violation of the law, including data that are no longer necessary for the purposes for which they were collected or subsequently processed; c) The confirmation that the operations referred to in letters a) and b) have been brought to the attention, including the content, of those to whom the data have been communicated or disclosed, except in cases where this proves impossible or involves a disproportionate effort in relation to the right being protected;
  4. Object, in whole or in part: a) For legitimate reasons, to the processing of personal data concerning you, even if relevant to the purpose of collection; b) To the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for market research or commercial communication, through automated calling systems without an operator, via email and/or through traditional marketing methods by phone and/or postal mail.

Where applicable, you also have the rights referred to in Articles 16-21 of the GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

9. How to Exercise Your Rights

You can exercise your rights at any time by:

  • Sending a registered letter with acknowledgment of receipt to the Data Controller’s address;
  • Sending an email to info@arcointernational.it;
  • Calling the number +39 030 9307670.

10. Data Controller, Processor, and Authorized Personnel

The Data Controller is Arco International S.r.l., with its registered office at Via Sostegno 6/B 25124 – Brescia (BS). The updated list of the data processors and authorized personnel is kept at the Data Controller’s headquarters.

11. Cookie Policy

A cookie is a small text file stored on the user’s computer when they visit a website. In this way, information is saved that the site can read when revisited later. Some cookies are essential for the proper functioning of the site, while others are useful for saving certain data entered by the user without having to re-enter it at each login. The Data Controller uses cookies to allow the user to navigate the site in a more suitable and personalized way, provide content relevant to their interests, and track their preferences. Through cookies, the Data Controller can also conduct research and analysis to improve the site’s content, products, services, and, importantly, improve the site’s security by preventing fraudulent activities. Many cookies are automatically deleted from the user’s hard drive at the end of each browsing session, while others remain on the hard drive for a longer period for convenience. The user can choose to disable cookies, but this will make it impossible to add items to the quote, confirm orders, and use services requiring login. Most browsers have a “help” feature that indicates how to block cookies, be notified when a new cookie is received, or disable them altogether. You can also disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the settings of the add-on. The Data Controller also uses cookies to offer the user the best advertising offers according to their preferences: which products are viewed, which are selected, and how they interact on the Site. However, it is important to note that no interaction of the user with other sites is linked to their identity on this platform.