Information pursuant to EU Reg. 2016/679 – GDPR

This page describes the data management methods and purposes adopted by our company.


The provision of personal data is essential for the execution of the contract and / or mandate. The normal operation or consultation of the website, for example, may require the provision of data relating to identified or identifiable persons.

The “owner” of the processing is Carpanelli s.r.l.

Registered office: Via Brescia 5, 20832 Desio (MB)

VAT number: 09357570960


The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to art. 6 lett. f) (legitimate interest) EU Reg. 2016/679, for the following purposes:

  • browsing on the company website;
  • possible contact request, with sending of information requested by you;
  • possible completion of data collection forms in dedicated areas of the site or our software;
  • administrative and accounting activities in general.

The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to art. 6 lett. a) (consent) EU Reg. 2016/679, for the following purposes:

  • communications activity of a technical or commercial nature, profiling, for data acquired through information with explicit consent;
  • limitated use of images.

For the purposes of the application of the provisions on the protection of personal data, the processing carried out for administrative and accounting purposes is that connected with the performance of organizational, administrative, financial and accounting activities, regardless of the nature of the data processed. In particular, the internal organizational activities, those functional to the fulfillment of contractual and pre-contractual obligations, information activities pursue these aims.


The personal data provided will be communicated to recipients, who will process the data as data processors (art. 28 of EU Reg. 2016/679) and / or as natural persons acting under the authority of the owner and manager (art. 29 of EU Reg. 2016/679), for the purposes listed above.

Specifically, the data will be communicated to:

  • subjects that provide services for the management of the information system used by our company and of the telecommunications networks in use;
  • freelancers, studios or companies in the field of assistance and consulting;
  • competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request. The subjects belonging to the aforementioned categories perform the function of Data Processing Manager, or operate in total autonomy as separate Data Controllers.

The data will not be disclosed to third parties for commercial communications.

The list of Data Processors is constantly updated and available by writing to or at the headquarters of CARPANELLI.


The personal data provided will not be transferred to countries outside the European Union. The interested party may obtain information about the guarantees for data transfer by writing an email to the address or at the headquarters of CARPANELLI.


The processing will be carried out in an automated and manual way, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed for this purpose.

In compliance with the provisions of art. 5 paragraph 1 letter. e) of the EU Reg. 2016/679 the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The storage of personal data provided depends on the purpose of the processing:

  • for contact request (maximum 1 year);
  • promotional communications generally via e-mail (maximum 24 months);
  • legal purposes (maximum 10 years);

timing determined on the basis of criteria which the interested party may have information by writing to the address or at the headquarters of CARPANELLI.


You will be able to assert your rights as expressed in the EU Regulation 2016/679, by contacting the Data Controller, by sending an e-mail to the address or at the CARPANELLI office.

You have the right, at any time, to ask the Data Controller for access to your personal data (Article 15), the rectification (Article 16) or the cancellation (Article 17) of the same, or the limitation of the processing (art. 18) or to oppose their treatment based on legitimate interest (art. 21). You also has the right to request the portability of personal data (art. 20)

Withdrawal of consent. The treatment has no legal basis in the consent but in the legitimate interest. If the processing is based on consent, you have the right to revoke the consent at any time without affecting the lawfulness of the processing based on the consent given before the revocation;

To oppose the processing and to exercise the other rights you can write to the address or at the headquarters of CARPANELLI.

You have the right to lodge a complaint with a supervisory authority.

There is no automated decision making process.


The owner reserves the right to modify, update, add or remove parts of this privacy statement at its discretion and at any time. The person concerned can check any changes at any time. In order to facilitate this verification, the information will contain the indication of the update date of the disclosure.

Update date: 16/05/2019