Privacy Policy

PRIVACY POLICY

Pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) and the Guidelines of the Privacy Garante (Italian Data Protection Authority)

The purpose of this Privacy Policy is to describe, in a transparent and easily accessible manner, how the personal data of users who consult and use the services of the website www.camisana.it is managed and processed.

1. Data Controller

The Data Controller for personal data is:

• Company Name: Camisana S.r.l.
• Registered Office: Via Praga, 12 – 24040 Verdellino (BG)
• VAT No. / Fiscal Code: 00253450167
• Email Contact: info@camisana.it
• Certified Email (PEC): amministrazione@pec.camisana.it

2. Types of Data Processed and Legal Basis

Data is collected in compliance with the principle of data minimization (only data strictly necessary for the website’s purposes is processed) according to the following legal bases:

• Navigation and Technical Data: IP addresses, browser parameters, request times.
  • Legal basis: Legitimate interest of the Data Controller (Art. 6.1.f GDPR) to ensure website security and prevent fraud or cyberattacks.
• Data Provided Voluntarily (Contact Forms / Email): First name, last name, email address, telephone number, and company data sent spontaneously for quote requests or information.
  • Legal basis: Execution of pre-contractual or contractual measures (Art. 6.1.b GDPR). The user is free not to provide this data, but doing so may make it impossible to receive a response.
• Cookies and Tracking Data:
  • Legal basis: Explicit, free, and revocable consent of the data subject (Art. 6.1.a GDPR) expressed via the cookie banner.

3. Consent and Cookie Management Methods

In accordance with current guidelines, the website adopts the following interaction methods:

• Prior Blocking: No third-party profiling, marketing, or statistical cookies are installed before the user has expressed active consent.
• Local Storage of Consent: Users are informed that the Data Controller does not maintain a centralized digital registry (database) of consents given on the website. The user’s choice (acceptance or rejection of cookies) is stored exclusively locally on the user’s device via a dedicated technical cookie (provided by the GDPR Cookie Compliance system).
• Management and Withdrawal: Users can modify or withdraw their consent at any time by deleting cookies from their browser or changing preferences directly from the website banner (using the appropriate cookie settings button or link).

4. Processing Methods and Security

Processing is carried out using mainly IT and electronic tools, adopting appropriate technical and organizational security measures (such as the HTTPS encryption protocol) aimed at preventing data loss, unlawful use, or unauthorized access.

5. Data Recipients and Transfers

The personal data collected will not be disseminated. It may be communicated exclusively to:

1. Internal personnel of Camisana S.r.l. who have been properly instructed.
2. External Data Processors (e.g., web hosting provider, website maintenance agency, legal/administrative consultants) with whom a regular appointment contract has been entered into pursuant to Art. 28 GDPR.

Transfers Abroad: Data is stored on servers located within the European Economic Area (EEA). Should the use of third-party services (e.g., Google, Meta) involve transferring data to non-EU countries (such as the United States), this will occur exclusively to providers adhering to the Data Privacy Framework or equipped with Standard Contractual Clauses approved by the European Commission.

6. Retention Period

• Technical/Navigation Data: Deleted or anonymized immediately after processing (except in the case of necessity for the investigation of crimes).
• Contact Form Data: Retained for the time strictly necessary to handle and fulfill the user’s request (maximum 24 months in the absence of subsequent business relations, unless otherwise required by legal or fiscal obligations).
• Consent Cookies: The technical cookie that stores the user’s choice on the browser has a maximum duration of 12 months, after which it will expire and the banner will be displayed again.

7. Rights of the Data Subject

Users may exercise their rights under Articles 15-22 of the GDPR at any time by sending an email to  info@camisana.it:

• Right of access and to receive a copy of the data.
• Right to rectification, integration, or erasure (right to be forgotten).
• Right to restriction of processing or to object to processing for legitimate reasons.
• Right to data portability.

Data subjects also have the right to lodge a complaint with the Italian Supervisory Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it).

8. Links to External Sites

The website may contain links to third-party websites. The Data Controller is not responsible for the privacy policies or the content published on such websites.

9. Changes to this Privacy Policy

This Privacy Policy may be updated at any time for regulatory adjustments or changes to the services offered. Users are invited to consult this page periodically.

10. Updates

Last Updated: June 2026