Privacy Policy

Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

in keeping with the principle of transparency, the following information is provided so that data subjects are aware of the characteristics and methods of the processing of their data.

a) Identity and contact details

Please note that the data will be processed, as Data Controller, by INPROOV S.r.l., registered with the Padua Companies Register, VAT No. 05369890289, with registered office at Via della Croce Rossa 8, 35129 Padua, Italy, who can be contacted by email at info@inproov.net;

b) Purposes of processing, legal basis and legitimate interest

As a general rule, the performance of the consulting contract does not involve INPROOV S.r.l. processing personal data for which the client is the data controller.

This notice informs the Client that, in any event, even in the residual cases in which Inproov’s provision of the service requires the processing of personal data of the Client’s shareholders, directors, employees, professionals and collaborators, data for which the Client is the Data Controller, the data provided will be processed in compliance with the principle of adequacy laid down by current legislation. Inproov is ready to accept appointment as Data Processor should the client consider it appropriate to give its own instructions on the processing of such data.

The personal data requested from the data subject are processed for the following purposes:

1. performance of obligations arising from the contract to which the Supplier/Client is a party;
2. fulfilling, before the performance of a contract, specific requests from the Supplier/Client/Third Party;
3. administration of suppliers/clients, contracts, orders, deliveries and invoices;
4. preparation of quotations and projects, handling of requests;
5. compliance with legal obligations under civil, tax and accounting provisions;
6. handling any disputes arising from contractual liability;
7. promotion of products, sending newsletters, promotional activities including by telephone or by email marketing, social media marketing or similar tools.

The legal basis for processing for the purposes under points 1, 2, 3 and 4 is your wish to conclude the contract, and the processing is necessary for the performance of a contract to which the Client is a party and for taking pre-contractual steps at the Client’s request (Art. 6(1)(b) GDPR).

Processing for the purposes under points 5 and 6 is necessary for the legitimate interest of the Data Controller in complying with the contractual obligations entered into by the parties, as well as for compliance with legal obligations (Art. 6(1)(c) and (f) GDPR). Refusal to provide certain data may make it impossible to perform the contract to which the Supplier/Client is a party.

Processing for the purposes under point 7 requires the express consent of the data subject

c) Recipients and categories of recipients of personal data

The data are processed by persons authorised to process data under the responsibility of the Data Controller for the purposes set out above, using both manual and electronic means, with organisation and processing logic strictly related to those purposes and in accordance with risk-minimisation procedures.

The data may also be disclosed to third parties providing ancillary services such as freight transport companies, legal, tax and business consultancies, IT technical services, communication and email services, and sales agents.

In addition, an up-to-date list of all recipients and of any external Data Processors is available at the Data Controller’s premises.

e) Transfer of data to a third country

Some technical service providers of the website may process data in the United States: Resend, to send the requests made through the contact form, and, only with consent to statistics cookies, Google (Google Analytics) and Microsoft (Microsoft Clarity), as described in the cookie policy.

The transfer is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses approved by the Commission. The Data Controller does not transfer data to international organisations.

f) Data retention period

The data are kept in paper and/or electronic form for the period necessary to achieve the purposes for which they were collected and in compliance with legal obligations.

g) Rights over the data

Where the relevant conditions are met, the data subject may exercise the following rights:

1. the right of access to their personal data; the right to obtain their rectification or erasure, or the restriction of processing concerning them;
2. the right to object to processing and the right to withdraw consent for the processing purposes that require it, without affecting the lawfulness of processing based on consent given before its withdrawal;
3. the right to data portability (applicable only to data in electronic format), as governed by Article 20 of the GDPR.

To exercise the above rights, the data subject may submit a request by email.

h) Complaints

The data subject is informed of their right to lodge a complaint with the national data protection supervisory authority (www.garanteprivacy.it).

i) Provision of data

Please note that where the provision of personal data for the purposes under point b) is a legal or contractual obligation or a requirement necessary to enter into a contract, failure to provide the data will prevent the data subject from completing the procedure.

j) Processing for other purposes

The Data Controller will not further process personal data for a purpose other than that for which they were collected.

k) Profiling

The Data Controller does not use automated processes for profiling purposes.

l) Promotion and marketing

Subject to your consent, personal data may be processed so that you receive promotions about the various types of products offered by our Company.

Such processing includes traditional and non-conventional marketing, newsletters, telemarketing, commercial information, the sending of advertising material, market research, direct selling or commercial communications, services and other activities of the Data Controller.

Providing the data is optional, and failure to consent to such processing prevents the activities described above from being carried out.

You have the right to withdraw at any time the consent previously given for the purposes of this paragraph, using the methods described above.

The data required for the above activities will be processed for a period of five years.