Privacy policy

1. Data controller

The controller of personal data is Aquaforma S.r.l., with registered office at Viale Europa 46, 24048 Treviolo (BG), VAT 04852690165, REA BG-494128, share capital 10.000,00 € i.v..

For any request about your data you can write to info@aquaforma.it or to the certified address (PEC) aquaforma@casellapec.com.

2. What data we collect

We collect only the data you voluntarily provide through the forms on the site, together with the technical data needed to handle them and measure their effectiveness.

• Identity and contact data: first name, last name, email address, phone number.
• Request data: the message content and any information you choose to state, such as the work location and expected timing.
• Technical browsing data: IP address and information strictly needed to prevent form abuse and automated submissions.
• Request source data: if you arrive from an advertisement, the campaign parameters in the link (utm_source, utm_medium, utm_campaign and similar) are attached to the request to understand which campaign generated the contact.

3. Purposes and legal bases

• Answering your information and quote requests — legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
• Complying with legal, accounting and tax obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Sending commercial communications and updates — legal basis: your explicit consent (Art. 6(1)(a) GDPR), revocable at any time.
• Preventing form abuse and automated submissions — legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).
• Measuring advertising campaign effectiveness — legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).

4. Nature of provision

Providing the data marked with an asterisk in the forms is necessary to handle your request: without it we cannot contact you back. Providing data for marketing purposes is instead optional, and refusal does not affect handling of the request.

5. Processing methods and retention

Data is processed with IT and paper tools, adopting technical and organisational measures adequate to ensure its security and prevent unauthorised access.

Data collected to handle the request is kept for the time needed to fulfil the request itself and, if the request turns into a contractual relationship, for the period required by legal obligations (generally 10 years for accounting and tax records). Data processed for marketing is kept until consent is withdrawn.

6. Recipients of the data

Data may be shared with parties acting as processors or carrying out instrumental activities, including: the platform hosting provider, the email service provider, accounting and tax consultants, and any fitting teams in charge of surveys.

If you choose to load the Google map on the contact page (with an explicit click), Google Ireland Limited will process the related browsing data as an independent controller, under its own privacy policy at policies.google.com/privacy.

The up-to-date list of processors is available on request by writing to info@aquaforma.it.

7. Transfers of data outside the EU

The site is hosted on servers located within the European Union. Should transfers of data to third countries become necessary in the future, they will take place on the basis of European Commission adequacy decisions or standard contractual clauses.

8. Your rights

You may exercise at any time the rights under Articles 15 to 22 GDPR by writing to the addresses in point 1.

• Access to your personal data and obtaining a copy.
• Rectification of inaccurate data or completion of incomplete data.
• Erasure of data (right to be forgotten), in the cases provided by law.
• Restriction of processing.
• Data portability in a structured, readable format.
• Objection to processing based on legitimate interest.
• Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

9. Complaint to the supervisory authority

If you believe the processing of your data breaches the law, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the competent supervisory authority in your country of residence.

10. Changes to this policy

We reserve the right to update this policy, for example in case of regulatory changes or new services. The version published on the site is the current one, with the last-update date shown.