Privacy & Cookie Policy

Information pursuant to art. 13 of EU Regulation 2016/679 (GDPR)

This policy describes how the personal data of users who interact with the web services of the site of SER.TEC S.r.l., and is made pursuant to Article 13 of the EU Regulation 2016/679 (hereinafter “GDPR”).

---

1. Data controller

The Data Controller for the processing of personal data is:

SER.TEC S.r.l.
Registered office: Via E. Salgari 14/D – 31056 Roncade (TV)
Email: info@ser-tec.org

---

2. Type of data processed

The site deals exclusively with:

• browsing data of a technical nature (e.g., IP address, user agent, browsing parameters), processed in aggregate or otherwise limited to the purposes of site security and operation;
• data voluntarily provided by the user through contact forms, requests for quotes or direct communications.

No profiling or sensitive data is processed through the website.

---

3. Purpose of processing.

Personal data are processed for the following purposes:

• Management of contact and quote requests;
• Performance of contractual and pre-contractual obligations;
• Tax, accounting and administrative compliance;
• Protection of the Holder’s rights in court;
• Anonymous statistical analysis of site traffic;
• Site security and prevention of abusive or automated access.

---

4. Legal basis for processing

Data processing is based on:

• Execution of pre-contractual or contractual measures (Art. 6(1)(b) GDPR);
• fulfillment of legal obligations (art. 6, par. 1, lett. c GDPR);
• legitimate interest of the Owner in the security, proper functioning of the site and protection of its systems (Art. 6, par. 1, lett. f GDPR).

---

5. Methods of processing

Processing is carried out by means of computer and telematic tools, in compliance with the principles of lawfulness, fairness, transparency, minimization and security provided by the GDPR.

Appropriate technical and organizational measures are taken to prevent unauthorized access, loss, or misuse of data.

---

6. Statistical analysis (Analytics)

This site uses Umami Analytics, a self-hosted statistical analysis platform configured in:

• cookie-free;
• Without user profiling;
• With data anonymization;
• Without sharing with third parties.

The data collected are used only for statistical purposes and in aggregate form.

For these features, the use of Umami does not require user consent and does not involve the use of profiling cookies.

---

7. Spam protection and form security

The site uses Google reCAPTCHA v3, a spam protection service provided by Google LLC, in order to prevent automated access and fraudulent submissions of forms on the site.

The operation of reCAPTCHA v3 occurs automatically and invisibly for the user and involves the collection of technical and behavioral information (such as IP address, browsing parameters, site interactions), which is transmitted to Google LLC solely for security purposes.

The legal basis for processing is the legitimate interest of the Data Controller in protecting the website and its information systems from fraudulent and abusive activities (Art. 6(1)(f GDPR).

Use of Google reCAPTCHA implies application of Google’s Privacy Policy and Terms of Service:

• https://policies.google.com/privacy
• https://policies.google.com/terms

---

8. Cookies and similar technologies

The site does not use profiling cookies, either its own or those of third parties.

There may be only technical cookies, which are necessary for the proper functioning of the site or the management of the restricted administrative area.

For such cookies, under current regulations, user consent is not required.

---

9. Communication and dissemination of data

Personal data are not disseminated.

They can be communicated to:

• Appointed consultants and professionals (accounting, tax, legal);
• Technical and IT service providers, to the extent necessary for the provision of services;
• competent authorities, in fulfillment of legal obligations.

---

10. Transfer of data abroad

Personal data processed through the site is not transferred to countries outside the EU, except for technical data collected through the Google reCAPTCHA v3 service, which may be transferred to Google LLC servers also located outside the European Union.

Such transfers take place in compliance with the safeguards provided by the GDPR, based on the Standard Contractual Clauses adopted by Google.

---

11. Retention period

Personal data are retained for as long as necessary to fulfill the stated purposes and, where required, for the period stipulated by current legislation (e.g., tax and accounting obligations).

---

12. Rights of the data subject

The data subject has the right to:

• Access their personal data;
• Obtain the correction or deletion of the same;
• Request restriction of processing;
• To object to the processing in the cases provided;
• Propose a complaint to the Data Protection Authority.

Inquiries can be sent to: info@ser-tec.org

---

13. Updates

This Privacy & Cookie Policy may be subject to change or update. Users are encouraged to consult it periodically.