Privacy notice

Data controller

PIMADE SRL, Via Gran Sasso 8, 89013 Gioia Tauro (RC), Italy. VAT no. 03020010801. Email info@pimade.it, certified email pimade@pec.it, phone 0966 378325. We have not appointed a Data Protection Officer because we do not fall within the cases where one is mandatory: for any privacy request, write to info@pimade.it.

What data we process

Browsing data: IP address, browser type, pages visited and times, collected by the site’s technical systems to run and protect it. Visit statistics are aggregated and use no cookies, nor do they identify individual visitors.

Data you give us: name, company or organisation if any, email, phone if any and the content of your message when you use the contact form or the data deletion form, or write to us directly.

For the contact form we also keep proof of consent: date and time, the version of this notice and a pseudonymised form of the IP address.

Why we process them and on what legal basis

Answering your requests and, if you ask, sending you an offer: pre-contractual measures at your request (Art. 6(1)(b) GDPR).

Handling requests about your data (access, deletion and similar): legal obligation (Art. 6(1)(c)).

Sending you news and offers by email, only if you ticked the dedicated box: consent (Art. 6(1)(a)), which you can withdraw at any time.

Protecting the site from abuse, spam and cyber attacks: legitimate interest (Art. 6(1)(f)).

How long we keep them

Contact requests: 24 months from the last exchange, then automatically deleted, unless a contract or supply relationship follows, in which case they follow the retention periods set by law for accounting and tax records.

Consent to marketing emails: until withdrawn.

Records of consents and data requests: as long as needed to show compliance with the GDPR.

Technical browsing data: only as long as needed for site security.

Who can see the data

The data is processed by authorised staff of PIMADE SRL and by suppliers that provide technical services and act as processors under Art. 28 GDPR: website hosting (Vercel), database (Supabase, servers in the European Union), notification emails (Resend), DNS and anti-spam protection (Cloudflare), company email (Google Workspace). We do not sell or hand over data to third parties for marketing.

Transfers outside the EU

Some suppliers are based in the United States. When data leaves the European Economic Area, the transfer relies on the European Commission’s adequacy decision on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the Commission.

Your rights

You can ask to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. You can withdraw consent at any time, without affecting processing already carried out. Write to info@pimade.it or pimade@pec.it: we reply within one month.

If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Whether you must provide data

Providing data is optional, but without your name, email and message we cannot answer your request. We do not make decisions based solely on automated processing.