Privacy Policy

1. Data Controller

The data controller is Durfo S.r.l., registered office at Strada Statale 456 Asti – Acqui, 280, 14049 Nizza Monferrato (AT), Italy, VAT / Tax ID 01424110068, represented by the legal representative pro tempore.

For any request concerning the protection of personal data, the Controller may be contacted via the contact form available at Request Information or at the email address info@durfo.com.

2. Types of data processed and purposes

The website processes the following categories of personal data:

• Navigation data: IP address, browser type, operating system, internet provider, date and time of access, referring and exit pages, number of clicks. Such data are collected in aggregated and anonymous form for statistical and security purposes (e.g. prevention of cyber attacks, management of possible offences).
• Data voluntarily provided by the user: name, surname, company name, email address, telephone number, address, and other data entered in contact forms or in requests for quotations/consulting. Such data are processed to respond to user requests, for contractual or pre-contractual purposes and, where applicable, to send commercial communications (only with prior consent).

The provision of navigation data is necessary for the use of the website; failure to provide voluntary data in the forms will make it impossible to process the request.

3. Legal basis of the processing

The processing of personal data is based on:

• performance of pre-contractual and contractual measures (Art. 6(1)(b) GDPR), to manage requests for quotations, orders, assistance;
• legitimate interest of the Controller (Art. 6(1)(f) GDPR), for website security and fraud prevention;
• data subject's consent (Art. 6(1)(a) GDPR), for sending commercial communications and newsletters, where applicable.

4. Processing methods and retention

Data are processed using IT and/or paper tools, with organizational and logical methods strictly related to the indicated purposes and in any case so as to ensure the security and confidentiality of the data.

Data are retained for the time strictly necessary to achieve the purposes for which they are collected and, in any case, in compliance with the retention periods provided for by applicable law. In particular:

• navigation data are retained for the time strictly necessary for security and statistical analysis purposes;
• data provided via forms are retained for the time necessary to manage the request and, in the event of a contractual relationship, for the entire duration of the relationship and subsequently for legal obligations (e.g. accounting and tax obligations).

5. Data disclosure and transfer abroad

Personal data may be disclosed, for the above purposes, to:

• internal subjects of the Controller (administrative, commercial, technical, legal staff);
• service providers functional to the Controller's activity (e.g. hosting providers, IT service providers, communication agencies, couriers, professional firms);
• public authorities and private entities to whom disclosure is required by law.

Some of the services used (e.g. Google Analytics, third-party cookies, social plugins) may involve a transfer of data to countries outside the EU. The transfer takes place in compliance with the guarantees provided for by the GDPR (e.g. adequacy decisions of the EU Commission, standard contractual clauses).

6. Cookies and tracking technologies

The website uses technical cookies and, subject to consent, third-party profiling and analytics cookies. For complete information on the cookies used, their purposes and management methods, please refer to the Cookie Policy, which forms an integral part of this notice.

7. Rights of the data subject

Pursuant to Art. 15-22 of Regulation (EU) 2016/679, the data subject has the right to:

• obtain confirmation of the existence or otherwise of personal data concerning them;
• access such data, know their origin, purposes and methods of processing;
• obtain rectification, updating, erasure, restriction of processing, portability;
• object, on legitimate grounds, to processing and revoke consent at any time;
• lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Requests must be addressed to the Data Controller, contactable as indicated in point 1.

8. Changes to this notice

This Privacy Policy may be updated for regulatory changes or changes in the Controller's activities. The updated version will be published on this page with an indication of the last update date.

Last update: 11/09/2026