Skip to main content

Rossi di Albizzate

Privacy Policy

PART I – PRIVACY NOTICE

1. Data controller

LUXUR-IT S.P.A., registered office in Milan (MI), Via Monte Napoleone 8, 20121 Italy – tax code, VAT number and registration number with the Companies Register of Milano Monza Brianza Lodi 12673360967 – REA MI-2677234 – certified e-mail luxurit@pec.it, in the person of its legal representative pro tempore.

Luxur-IT S.p.A. is the licensee of the «Rossi di Albizzate» trade mark. For any matter concerning personal data: privacy@rossidialbizzate.it.

No Data Protection Officer has been appointed, the conditions set out in Article 37 of the Regulation not being met; the assessment is documented in the controller’s records.

2. Who this notice is addressed to

This notice describes how we process the personal data of those who visit our website www.rossidialbizzate.it, of those who write to us through the forms available, of those who request our catalogues and price lists, and of those who subscribe to our commercial communications.

The subscription and document request forms, and the sending of communications, are hosted on a platform of the controller available at platform.rossidialbizzate.it. This is a system operated by Luxur-IT S.p.A. and not a third-party service: the data remain within the scope described in § 6.

This notice does not cover third-party websites that may be reached through links on our pages, for which the respective privacy notices apply.

3. Data collected automatically while browsing

The IT systems and software procedures used to operate the website and the platform acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols: IP address, browser type and operating system, URI/URL addresses of the requested resources, time of the request, method used, size of the file obtained in response, numerical code indicating the status of the response, and other parameters relating to the user’s operating system and IT environment.

Purposes and legal basis: to obtain aggregate statistical information on the use of the website, to monitor its correct operation and to ensure its security. The legal basis is the controller’s legitimate interest in providing a functioning and secure service (Article 6(1)(f) of the Regulation).

Retention: the server logs of the server hosting the subscription and sending platform are retained for 14 days and then automatically deleted. The server logs of the server hosting the website are generated and retained by the hosting provider, for security and diagnostic purposes, in accordance with the periods it sets for the service; the period applied may be obtained by writing to the contact details indicated in § 9. In both cases, this is without prejudice to any use for the purpose of establishing liability in the event of computer-related offences against the website or the platform.

4. Data provided voluntarily by the user

4.1 Contact form and requests for information

Data: company name, first and last name, role, e-mail address, telephone number, country and content of the message.

Purposes and legal basis: to respond to the request and, where applicable, to enter into negotiations. The processing is necessary in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b)) and, as regards the organisational aspects and the management of business contacts, is based on the controller’s legitimate interest (point (f)).

Retention: 24 months from the last meaningful contact, unless the contact gives rise to a contractual relationship, in which case the retention periods applicable to the relevant documentation apply.

Nature of the provision of data: the data marked as mandatory are necessary in order to reply; failure to provide them makes it impossible to respond.

4.2 Subscription to commercial communications (newsletter)

Data: company name and e-mail address, together with any optional data provided; date, time, IP address and browser used for the subscription and for the confirmation, version of the form and of the privacy notice accepted.

Purposes and legal basis: sending news, catalogues, offers and invitations relating to products under the Rossi di Albizzate trade mark. The legal basis is the data subject’s consent (Article 6(1)(a) of the Regulation and Article 130(1) and (2) of Legislative Decree 196/2003), which may be withdrawn at any time.

How it works: subscription is completed by double opt-in: after submitting the form you will receive a message containing a confirmation link, valid for 72 hours; the subscription is recorded only after you have clicked on it. The confirmation message contains no promotional content. No consent box is pre-ticked.

Measurement of opens and clicks: carried out only where a further consent has been given, specific and separate from the one referred to above (Article 122 of Legislative Decree 196/2003). Otherwise, messages are sent without any measurement: the measurement tools are simply not included in the message. Refusal does not affect the subscription.

Retention: the e-mail address and subscription data are retained until consent is withdrawn or an objection is raised. Data relating to the measurement of opens and clicks, where collected, are stripped of identifying metadata (IP address and browser) after 6 months and deleted in full after 24 months. Evidence of consent — text accepted, version of the privacy notice, date, time, IP address and browser of both the subscription and the confirmation — is retained for the duration of the processing and for 5 years thereafter, for the sole purpose of being able to produce it in the event of a dispute. The address of anyone who objects or withdraws consent is kept on a suppression list, reduced to the address alone, in order to ensure that the person is not contacted again.

4.3 Requests for catalogues and price lists, B2B business contacts

Data: company name and e-mail address, together with any optional data provided, the document requested, and the date and time of the request.

Purposes and legal basis: to deliver the requested document and to follow up on the business enquiry (Article 6(1)(b) of the Regulation).

The price list is always freely downloadable: its delivery is in no case conditional upon subscription to commercial communications or upon the provision of personal data. For other documents — catalogues and presentation materials — the request entails subscription to commercial communications on the terms set out in § 4.2; the form states this before submission and consent is collected by means of a box that is not pre-ticked.

Retention: 24 months from the last meaningful contact, unless the request gives rise to a contractual relationship, in which case the retention periods applicable to the relevant documentation apply; as regards the subscription, the periods set out in § 4.2 apply.

4.4 Links to social media profiles

The links to our social media profiles (Instagram and LinkedIn) are simple hyperlinks and do not entail any transmission of data before the click. Any subsequent processing is governed by the privacy notices of the respective platforms.

5. Cookies and tracking tools

The website uses cookies and similar tools, described in the cookie policy available at www.rossidialbizzate.it/en/cookie-policy/, which forms an integral part of this notice. Non-technical cookies are installed only with prior consent, given through the banner shown on first access and modifiable at any time through the «Manage consent» control available on every page of the website.

6. Recipients of the data

The data may be processed, as processors appointed pursuant to Article 28 of the Regulation, by the following parties:

  • Aruba S.p.A., Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy – hosting services for the website www.rossidialbizzate.it, e-mail services and the outgoing mail service used to send the communications; servers located in Italy;
  • ARiSystems, Via Edoardo Ferravilla 3/6, 40127 Bologna (BO), Italy, VAT number IT04264761208 – supply of the virtual servers hosting the subscription and sending platform (platform.rossidialbizzate.it); servers located in Bologna, Italy;
  • the supplier engaged to develop and technically administer the subscription and sending platform (platform.rossidialbizzate.it), appointed as processor pursuant to Article 28 of the Regulation; the identity of the supplier may be obtained by writing to the contact details given in § 9;
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – website usage statistics (Google Analytics 4), exclusively where the user has consented to the «Statistics» category.

The data may also be disclosed to the controller’s legal, accounting and tax advisers, to the extent necessary, and to the competent authorities where provided for by law. Employees who access the data act under the authority of the controller, on the basis of a specific appointment and written instructions, and do not constitute «recipients» within the meaning of Article 15(1)(c) of the Regulation.

The data are not disclosed to third parties for their own purposes, nor disseminated, nor transferred or sold.

7. Transfers to third countries

Processing generally takes place within the European Economic Area. The providers listed in § 6 are established in Italy and their servers are located in Italy, with the sole exception of the statistics service provided by Google Ireland Limited.

Google Ireland Limited is established in Ireland; in the course of providing the service, data may be transferred to Google LLC, established in the United States of America. The transfer takes place on the basis of the adequacy decision adopted by the European Commission on 10 July 2023 in respect of the EU-U.S. Data Privacy Framework, to which Google LLC adheres, and, additionally, of the standard contractual clauses adopted by the European Commission pursuant to Article 46(2)(c) of the Regulation, accompanied by the transfer impact assessment carried out by the provider. A copy of the safeguards adopted may be obtained by writing to the contact details given in § 9.

The transfer takes place only if the user consents to the «Statistics» category: in the absence of such consent the tool is not executed and no data are transmitted.

8. Rights of the data subject

You may exercise the following rights at any time:

  • access to your data and obtaining a copy (Article 15), including the recipients to whom the data have been disclosed, and portability (Article 20);
  • rectification (Article 16), erasure (Article 17) and restriction of processing (Article 18);
  • objection to processing based on legitimate interest (Article 21(1));
  • withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Article 7(3)).

OBJECTION TO COMMERCIAL COMMUNICATIONS

You have the right to object at any time, without having to give any reason and free of charge, to the processing of your data for direct marketing purposes. Following the objection, the data will no longer be processed for such purposes (Article 21(2) and (3) of the Regulation).

The objection may be exercised with one click on the unsubscribe link at the bottom of every communication, or by writing to the contact details given in § 9.

You also retain the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome – www.garanteprivacy.it) or to bring proceedings before the courts.

9. How to exercise your rights

By writing to privacy@rossidialbizzate.it or to Luxur-IT S.p.A., Via Monte Napoleone 8, 20121 Milan, Italy. We will reply within one month of receipt of the request, a period which may be extended by a further two months where the request is particularly complex, in which case the reasons for the extension will be communicated (Article 12(3) of the Regulation).

10. Automated decision-making and minors

There is no automated decision-making or profiling within the meaning of Article 22 of the Regulation. The website is addressed to business operators and is not intended for minors: we do not knowingly collect data relating to minors.

11. Updates

This notice may be updated. The version in force, with the date of last revision, is always available at www.rossidialbizzate.it/en/privacy-policy/ and, in Italian, at www.rossidialbizzate.it/it/privacy-policy/. Previous versions are kept in the controller’s records.

Last revised: 09/09/2026.