Privacy policy for idrauliko.it
Data controller
Mr Massimiliano Figurelli
Controller's email address: info@idrauliko.it
idrauliko S.r.l
VAT number 03004630186
Registered office: Via Robecchi Brichetti, 40 – 27100 Pavia (PV)
Operating office: Piazza G. Citterio, 2 – 20900 Monza (MB)
Legal basis for processing
We process data mainly on the basis of users' consent. Consent is given through the banner that appears when users first access this website.
Providing data, and therefore consenting to its collection and processing, is optional.
Users may refuse consent and withdraw consent at any time through the button at the bottom of each page or through their browser's cookie settings. However, refusing consent may make some services unavailable and reduce the website browsing experience.
Data used for website security and prevention of abuse and spam are processed on the basis of the Controller's legitimate interest in protecting the website and its users. In these cases, users always have the right to object to processing (see User rights).
Purposes of processing
Besides purposes connected with and necessary for providing the service, data collected by the website are processed for the following purposes:
Security
Data and information are collected to protect the website (spam filters, firewalls, virus detection) and users, and to prevent or uncover fraud or abuse against the website. Data are recorded automatically and may include personal data (IP addresses) that may be used, in accordance with applicable laws, to block attempts to damage the website or harm other users, or other harmful or criminal activity. These data are never used to identify or profile users and are deleted periodically. Consent is not required.
Requests and professional advice
When users voluntarily submit data to request professional advice or commission professional services, the data are used solely to fulfil the user's request.
Analysis and statistics
Personal data: city; usage data; browser information; device information; city latitude; city longitude; number of users; session statistics; tracking tools.
Processing methods
The Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of personal data.
Processing uses computers and/or telematic tools, with organisational procedures and methods strictly related to the stated purposes. In addition to the Controller, data may in some cases be accessible to other people involved in operating this website (administrative staff, lawyers, system administrators) or external parties (third-party technical service providers, couriers, hosting providers, IT companies), appointed as Data Processors where necessary. An updated list of Data Processors may always be requested from the Controller.
The website may collect data when users voluntarily use services such as communication forms (contact forms, requests for prescriptions or consultations), and these data are used exclusively to provide the requested service. Data collected by third parties relate to plugins that improve users' experience while browsing the website.
Types of data collected
Personal data collected by this website, independently or through third parties, include:
Usage data; tracking tools; first name; surname; phone number; email.
Full details of each type of data collected are provided in the relevant sections of this privacy policy or through specific notices displayed before the data are collected.
Personal data may be freely provided by users or, in the case of usage data, collected automatically when this website is used.
Unless otherwise specified, all data requested by this website are mandatory to provide the requested services. If users choose not to provide them, the website may be unable to provide the service. Where this website states that some data are optional, users may withhold them without affecting the service's availability or operation.
Users unsure which data are mandatory are encouraged to contact the Controller.
Unless otherwise stated, any cookies or other tracking tools used by this website or the controllers of third-party services used by this website serve to provide the service requested by users, as well as the further purposes described here and in the Cookie Policy.
Place of processing
Data are processed at the Controller's premises and at the web hosting provider's data centre (Netsons).
Data retention period
Data collected during website operation are retained for the time strictly necessary to carry out the stated activities. On expiry, data are deleted or anonymised unless there are further reasons to retain them.
When processing is based on users' consent, the Controller may retain personal data until that consent is withdrawn. The Controller may also be required to retain personal data for longer to fulfil a legal obligation or an authority's order.
Personal data are deleted at the end of the retention period. Therefore, once that period expires, the rights of access, erasure, rectification and data portability can no longer be exercised.
Data collected for requests for advice or professional engagements are retained for the time needed to perform the engagement and for related purposes (legal protection, etc.).
Transfer of collected data to third parties
Data collected by the website are generally not provided to third parties, except in specific cases: a lawful request by judicial authorities and only where provided for by law; where necessary to provide a specific service requested by users.
Transfer of data outside the EU
We may need to share some collected data with services located outside the European Union. In particular, with Google, Facebook and Microsoft through social plugins. Transfers are authorised on the basis of the services' Standard Contractual Clauses (see the sections on third-party services).
Details of personal data processing
Personal data are collected for the following purposes and using the following services:
Contacting users
Contact form (this website) — By completing the contact form with their data, users consent to their use to respond to requests for information or any other request indicated by the form's heading.
Personal data processed: surname; email; first name; phone number; various types of data.
Tag management
These services enable centralised management of tags or scripts used on this website. Using these services causes users' data to flow through them and, where applicable, be retained.
Google Tag Manager (Google Ireland Limited) — Google Tag Manager is a tag management service provided by Google Ireland Limited. Personal data processed: usage data. Place of processing: USA or Ireland — Privacy Policy.
Statistics
Google Analytics with anonymised IP (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. Google uses collected personal data to track and examine use of this website, compile reports and share them with other Google services.
Google Analytics is a statistics service.
For further information, please read the Google Analytics Privacy Policy.
Hosting and backend infrastructure
These services host data and files that enable this website to operate, distribute them and provide a ready-to-use infrastructure for specific website functions.
How and where the hosting provider manages databases containing user data. Encrypted MySQL database: data are collected and stored in MySQL databases provided by our hosting provider through Netsons.com. The provider guarantees a range of privacy security measures compliant with the new GDPR Regulation.
Details of Netsons hosting tracking: Privacy Policy.
Spam protection
These services analyse this website's traffic, potentially containing users' personal data, to filter traffic, messages and content recognised as spam.
Wordfence security — Security and spam protection, Privacy Policy.
Displaying content from external platforms
These services display content hosted on external platforms directly on this website's pages and allow interaction with it. They may still collect web traffic data for pages on which they are installed, even when users do not use them.
Google Fonts — Google Fonts is a typeface display service operated by Google LLC or Google Ireland Limited, depending on where this website is used, allowing this website to incorporate such content into its pages.
Personal data processed: usage data; tracking tools. Place of processing: United States or Ireland — Privacy Policy.
Font Awesome (Fonticons, Inc.) — Font Awesome is a typeface display service operated by Fonticons, Inc., allowing this website to incorporate such content into its pages. Personal data processed: usage data; tracking tools. Place of processing: United States — Privacy Policy.
Security measures
We process visitors' and users' data lawfully and fairly, adopting appropriate security measures to prevent unauthorised access, disclosure, modification or destruction. We undertake to protect personal data during transmission using Secure Sockets Layer (SSL) software, which encrypts information in transit. Processing uses computers and/or telematic tools, with organisational procedures and methods strictly related to the stated purposes. In addition to the Controller, data may in some cases be accessible to staff involved in operating the website or external parties (third-party technical service providers, hosting providers).
Google reCAPTCHA (Google Ireland Limited)
Google reCAPTCHA is a spam protection service provided by Google Ireland Limited.
Personal data processed: clicks; usage data; keypress events; motion sensor events; touch events; mouse movements; relative scroll position; answers to questions; tracking tools.
Place of processing: Ireland — Privacy Policy.
User rights
Users have the right to:
- Withdraw consent at any time. Users may withdraw consent previously given for processing their personal data.
- Verify and seek rectification. Users may check their data's accuracy and request updates or corrections.
- Obtain erasure or removal of personal data. Under certain conditions, users may request that the Controller delete their data.
- Lodge a complaint. Users may complain to the competent data protection authority or bring legal proceedings.
When personal data are processed in the public interest, in the exercise of official authority vested in the Controller, or to pursue the Controller's legitimate interest, users have the right to object on grounds relating to their particular situation.
Where personal data are processed for direct marketing, users may object without giving any justification. Users can refer to the relevant sections of this document to find out whether the Controller processes data for direct marketing.
How to exercise your rights
To exercise their rights, users may send a request to the Controller using the contact details in this document. Requests are handled as quickly as possible and in any event within one month.
Cookie policy
This website uses tracking tools. For further information, users may consult the Cookie Policy.
Last updated: 27 August 2025
