Last revision: February 4, 2026

1. Preamble and regulatory references
This information explains the processing of personal data collected through this website, including those obtained through cookies, tracking technologies and, where applicable, contact forms and other features that may be active on the site.
The information is addressed to anyone who accesses or uses this website, describing the methods of collecting, using and protecting the user’s personal data, as well as the rights recognized by law.
These provisions do not apply to other websites, pages or online services accessible via external links that may be present on the site; please consult their respective privacy policies.
This information is provided in compliance with major national and international data protection regulations, including:

• Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC, the so-called ePrivacy Directive
• Other applicable regulations.

2. Who manages your data and how can you contact us?
Your personal data is processed by:
Iltuositoonline.it
Via Roma 123, 00100 Rome (RM)
info@iltuositoonline.it
VAT Number: GB0000000000

For any information regarding the processing of personal data or to exercise their rights under the regulations, data subjects may contact the Data Controller.

3. On what legal bases do we process your data?
The processing of personal data collected through this website (including that obtained through cookies, similar technologies, contact forms and other features that may be active on the site) is based on one or more of the following legal bases:

1. Performance of pre-contractual or contractual measures: when the processing is necessary to respond to user requests, provide requested services and, where the site provides for it, manage orders, accounts or contractual relationships.
2. Compliance with legal obligations: when the processing is necessary to comply with tax, accounting, administrative or security obligations, or requests from authorities.

A further legal basis, the Legitimate interest of the data controller, it may be used for specific purposes (e.g. ensuring IT security, preventing fraud, protecting the Holder's rights in legal proceedings).

The failure to accept or the withdrawal of consent may limit some of the features or services of the site.

4. What data do we collect when you visit the site?
During navigation on this site, the following data may be collected, also through cookies and similar technologies such as pixel tags, web beacons, local storage and equivalent technologies – the following data:

• Navigation and technical data information such as IP addresses, device identifiers, operating system and browser data, requested URLs, connection times, technical logs, technical preferences, usage data collected via cookies and tracking technologies (pixel tags, web beacons, local storage, and equivalent tools).

• Voluntarily provided identification details information entered in the digital forms on the website (e.g., name, surname, email, phone number) and/or provided through the sending of emails or other contact channels, used to respond to requests, provide services, or provide any advice.

5. How we process your data, how we protect it, and for how long we retain it.
The personal data collected through this site is processed mainly using electronic and digital tools, following the principles of lawfulness, fairness, data minimisation, integrity, and confidentiality.

Appropriate technical and organisational measures are taken to prevent unauthorised access, loss, alteration or unauthorised disclosure of data, including:

• Encrypted communications (HTTPS): communications between your browser and the site are protected using HTTPS encryption, a measure designed to reduce the risk of interception or manipulation of data transmitted during browsing;

Data is stored according to the following timelines:

• Cookie preferences and consents: retained for 180 days, as per the Cookie Policy present on this website.
• Navigation and technical data retained for no longer than is strictly necessary for security purposes and, as a rule, for no more than 12 months, after which they are deleted or anonymised, barring any longer retention periods required by law or by the need to establish, exercise or defend legal claims.
• Data relating to any contractual relationships established with the Data Controller: where applicable, they are kept for the duration of the relationship and, subsequently, for the period required by applicable legal obligations (for example, in accounting and tax matters).
• Data entered via forms or specific requests: retained for the time necessary to respond to the request and fulfil the related purpose, and subsequently for any period required by legal obligations.

6. Who can receive your data?
They may access the personal data collected through this website, within the limits of their respective competences and purposes:

• Authorised internal subjects by the Data Controller, who are duly instructed on privacy and security matters;
• Suppliers and third parties appointed as Data Controllers (for example: technical providers and IT services, site maintenance, email service providers, consultants, where applicable);
• Third-party entities that provide integrated services on the website (e.g., fonts, maps, image display), which may process technical data as independent data controllers in accordance with their own information (in such case, please also consult the individual information of these third parties);
• Competent public authorities and control bodies, within the limits imposed by law or to meet requests from the judicial authorities;

The updated list of external recipients can be made available upon request by writing to the contact details of the Data Controller.

7. Where can your data be transferred?
The personal data collected through this website may be processed within the European Union / European Economic Area. In some cases, the use of third-party services may involve a transfer to third countries. In the case of any transfers to the United States, these take place to providers that adhere to the EU-US adequacy framework (Data Privacy Framework) or, failing that, on the basis of Standard Contractual Clauses.

8. What are your rights regarding the data collected?
The user, in accordance with applicable regulations, has the right to:

• To obtain confirmation as to whether personal data concerning them is being processed and, if so, to obtain access to such data and related information (right of access).
• Requesting the rectification, updating or cancellation of inaccurate or no longer necessary data (right to rectification and erasure).
• Request the restriction or object to the processing of data, including for promotional/profiling purposes, where applicable.
• Request data portability in a structured and interoperable format (where technically feasible).
• To withdraw the consent granted at any time, without prejudice to the legality of the processing based on the consent given before the withdrawal (for example, for the sending of commercial communications or newsletters, where active).
• Withdraw consent given for the use of non-technical cookies, and for the processing of data collected via tracking tools.
• Report any irregularities or abuses to the relevant supervisory authorities.

To exercise these rights, it is sufficient to send a request to the contact details of the Data Controller. The Data Controller will respond without undue delay and, in any case, within one month of receiving the request, a period of two additional months may be extended in case of particular complexity or a high number of requests, in which case the Data Controller will inform the person concerned.

9. How is the data of minors processed?
The protection of minors is a fundamental priority.

This website is not directed directly at minors and does not intentionally collect data from them through its forms. If, in the context of a request or question, the user provides personal data relating to third parties — including any minors — they must ensure that they have the necessary legal authorization; such data will be processed within the limits and for the purposes of the request, in compliance with applicable regulations. For requests for rectification, restriction or deletion, please contact the Controller.

10. How to report or make complaints to the authorities?
If you believe that the processing of your personal data through this website is not in compliance with current regulations, you can file a complaint free of charge with the competent supervisory authorities, including:

• The Data Protection Authority of your state of citizenship or residence;

11. How do we inform you about changes to this privacy policy?
This information is subject to periodic review for regulatory compliance or changes to the services offered via the website. Any significant changes will be communicated via this page.
Last revision: February 4, 2026