Privacy policy

Last updated: 10 August 2026.

Data controller

Castelnuovo Impianti Termoidraulici Srl — Strada Statale 95-95/A, 23826 Mandello del Lario (LC), Italy. VAT no. 03321320131.
For any request concerning personal data: alessandra@castelnuovoimpianti.it — tel. +39 339 487 5349.

What data we collect

This website does not collect personal data directly through contact forms, user accounts, analytics tools or profiling systems. It consists of static pages. The contact buttons simply open your email program or phone app: you are the one who sends the message or makes the call, and the site keeps no copy of it.

We therefore process only:

• the data contained in the email you send us: your name (or company and contact person), email address, telephone number if given, and whatever you choose to tell us about the work;
• the data you give us over the telephone: name, contact details and a description of the work;
• the hosting provider's technical logs (server logs): IP address, date and time of the request, page requested, browser type. These are generated automatically by the hosting provider for the operation and security of the server; we do not use them to identify visitors or for statistical purposes.

We neither request nor intend to collect special categories of data (Art. 9 GDPR). Please do not include in your email any information that is not needed to assess the work.

Why we process it and on what legal basis

• To reply to your enquiry, prepare a quotation and arrange the site visit — performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• To carry out the work and comply with the related legal obligations (invoicing, technical documentation, declarations of conformity) — performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR).
• To manage the correspondence received by email or telephone and keep a record of it in the company mailbox — legitimate interest of the controller (Art. 6(1)(f) GDPR).
• To ensure the operation and security of the server through the hosting provider's technical logs — legitimate interest of the controller (Art. 6(1)(f) GDPR).

You decide what to put in the email: no data is mandatory. However, to be able to get back to you we need at least one contact detail (email or telephone) and a general description of the work: without them we cannot follow up your enquiry.

How long we keep it

• Enquiries that do not lead to work: up to 24 months from the last contact.
• Data relating to work carried out: for the duration of the relationship and thereafter for the periods required by tax, accounting and liability law (normally 10 years).
• Hosting technical logs: for the periods set by the provider, normally no longer than 12 months.

Who it may be disclosed to

The data is processed by the controller and by persons authorised to process it. It may be disclosed, to the extent necessary, to:

• the hosting and email provider that hosts the website and the company mailbox, acting as data processor;
• our tax and accounting adviser and other professionals we use;
• contractors and associates involved in carrying out the work, where the job requires it;
• public authorities, where required by law.

The data is not disseminated or sold to third parties for their own commercial purposes. No transfers outside the EU are envisaged; should a provider entail such a transfer, it will take place in accordance with Articles 44 et seq. GDPR.

Automated decision-making

We do not carry out profiling or fully automated decision-making.

Your rights

At any time you may request access to your data, its rectification or erasure, restriction of processing, data portability, and you may object to processing based on legitimate interest (Arts. 15-22 GDPR). To exercise these rights, write to alessandra@castelnuovoimpianti.it: we reply within one month.

If you believe the processing infringes the law you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or bring the matter before the courts.

Cookies

The website uses only the technical means necessary for it to work. The details are in the cookie policy.

Changes

This policy may be updated. The version published on this page, with the date shown at the top, is the one in force.