Privacy Policy

Pursuant to Regulation (EU) 2016/679 ("GDPR") and the applicable data protection legislation, Cosvitec S.r.l. provides users of this website with information regarding the processing of personal data collected while browsing and using the online services available on the website.

1. Data Controller

The Data Controller of personal data is:

Cosvitec S.r.l.
VAT Number: 07838020639
Via Galileo Ferraris 171
80142 Naples (NA) – Italy
E-mail: info@cosvitec.eu

2. Categories of Personal Data Processed

While browsing the website and using the services provided, the following categories of personal data may be collected and processed:

  • Identification and contact data voluntarily provided by users (such as name, surname, email address, telephone number, and any information entered into contact forms);
  • Browsing and technical data automatically collected by the website's systems;
  • Data collected through cookies and similar technologies, as described in the Cookie Policy;
  • Technical information relating to the user's device, browser, IP address, and operating system.

3. Browsing Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is inherent in the use of Internet communication protocols.

Such information may include:

  • IP addresses or domain names of the devices used by visitors;
  • URI (Uniform Resource Identifier) addresses of requested resources;
  • the time and date of requests;
  • the method used to submit requests to the server;
  • the size of files obtained in response;
  • the numerical status code indicating the server response;
  • other parameters relating to the user's operating system and technical environment.

This information is used solely to obtain anonymous statistical information on website usage, ensure the proper functioning of the website, and maintain the security of the information systems.

4. Data Voluntarily Provided by Users

The voluntary submission of information through contact forms available on the website or through email communications to the addresses published on the website results in the acquisition of the personal data necessary to respond to requests.

Such data will be processed exclusively for the purpose of handling requests for information, assistance, or contact submitted by users.

5. Purposes of Processing

Personal data are processed for the following purposes:

  • to allow the proper operation and navigation of the website;
  • to respond to requests submitted through contact forms or email communications;
  • to provide information regarding the services and activities offered by Cosvitec S.r.l.;
  • to ensure the security of networks, systems, and information;
  • to carry out aggregated statistical analyses relating to website usage;
  • to comply with legal obligations and requests from competent authorities;
  • to establish, exercise, or defend legal claims.

6. Legal Basis for Processing

The processing of personal data is based on one or more of the following legal grounds:

  • the implementation of pre-contractual measures requested by the data subject;
  • compliance with legal obligations to which the Data Controller is subject;
  • the legitimate interests of the Data Controller in ensuring website security and managing incoming requests;
  • the consent of the data subject, where required by applicable law.

7. Methods of Processing

Personal data are processed using electronic and, where necessary, paper-based tools in accordance with the principles of lawfulness, fairness, transparency, data minimization, integrity, and confidentiality established by the GDPR.

Appropriate technical and organizational measures are implemented to ensure a level of security appropriate to the risk and to prevent unauthorized access, loss, alteration, disclosure, or misuse of personal data.

8. Provision of Data

Providing personal data through the website's contact forms is voluntary.

However, failure to provide information marked as necessary may prevent the Data Controller from responding to requests or providing the requested services.

9. Data Retention

Personal data are retained only for the period necessary to achieve the purposes for which they were collected.

  • Data submitted through contact forms: up to 12 months following the completion of the request;
  • Browsing data: up to 12 months, unless longer retention is required for security purposes or legal obligations;
  • Statistical and analytics data: according to the retention settings of the services used and in compliance with applicable legislation.

Personal data may be retained for longer periods where necessary to comply with legal obligations or to protect the rights and legitimate interests of the Data Controller.

10. Recipients of Personal Data

Personal data may be disclosed to parties acting on behalf of the Data Controller as data processors or authorized persons, including:

  • IT service providers, hosting providers, and website maintenance suppliers;
  • technical, legal, tax, and administrative consultants;
  • analytics and website performance service providers;
  • public authorities and competent bodies where required by law.

Personal data will not be publicly disclosed or disseminated.

11. International Data Transfers

The use of certain technological services, including web analytics tools, may involve the transfer of personal data to countries outside the European Economic Area (EEA).

Any such transfers are carried out in compliance with Articles 44 et seq. of the GDPR and through the adoption of appropriate safeguards as required by applicable data protection laws.

12. Rights of Data Subjects

Data subjects may exercise the rights granted under Articles 15–22 of the GDPR at any time, including:

  • the right to obtain confirmation as to whether personal data concerning them are being processed;
  • the right to access personal data;
  • the right to request correction of inaccurate or incomplete data;
  • the right to request erasure of personal data where applicable;
  • the right to restrict processing;
  • the right to object to processing on legitimate grounds;
  • the right to data portability;
  • the right to withdraw consent at any time where processing is based on consent.

To exercise these rights, data subjects may contact the Data Controller at: info@cosvitec.eu

13. Right to Lodge a Complaint

If a data subject believes that the processing of personal data violates applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), or the supervisory authority of the Member State in which they reside or work.

14. Changes to this Privacy Policy

Cosvitec S.r.l. reserves the right to update or amend this Privacy Policy at any time in order to reflect legal, technological, or organizational changes.

Any updates will be published on this page and will become effective upon publication.

Last updated: June 2026