1. Data Controller
The Data Controller is:
A.S. & C. di Mariano Stucchi
(MI) – Italy
VAT No. 05985510964
Email: 
2. Personal Data Processed
Through the contact form available on the website, personal data voluntarily provided by the user may be collected, including:
- email address;
- telephone number, if provided;
- the content of the message and any information included in the enquiry.
The website and the IT systems that enable its operation may also process certain technical browsing data, such as the IP address and information relating to requests made to the server, which are normally recorded in technical logs necessary for the operation and security of the website.
3. Purposes of Processing
Data provided through the contact form is used exclusively to receive, manage and respond to information requests submitted by the user and for any subsequent communications directly related to the enquiry.
Technical browsing data may be processed to ensure the proper operation and security of the website and its related IT systems.
4. Legal Basis for Processing
The processing of data provided by the user when requesting information is necessary in order to respond to the data subject's request and to take any pre-contractual measures requested by the data subject.
The processing of technical data necessary for the operation and security of the website may be carried out on the basis of the Data Controller's legitimate interest in ensuring the security and proper operation of its systems.
5. Methods of Processing
Personal data is processed using IT systems and, where necessary, appropriate organisational procedures in accordance with the purposes described in this Privacy Policy, with reasonable measures adopted to protect it against unauthorised access, loss, disclosure or misuse.
6. Data Retention
Data submitted through the contact form is retained for the time necessary to manage and respond to the enquiry and, where the enquiry results in a commercial or contractual relationship, for any additional periods required to comply with applicable administrative, accounting and legal obligations.
Technical data and server logs are retained according to the periods established by the technical configurations and security requirements of the hosting service.
7. Disclosure of Data
Personal data is not publicly disclosed or transferred to third parties for advertising or marketing purposes.
Data may be processed by parties providing technical services necessary for the operation of the website, IT systems or email services, to the extent necessary for the provision of their respective services, and may also be disclosed where required by law.
8. Data Transfers
Where technical service providers used for the operation of the website or related services involve the processing of data outside the European Economic Area, such processing will be carried out in accordance with the safeguards provided for by applicable personal data protection legislation.
9. Rights of the Data Subject
Where provided for by applicable legislation, the data subject may exercise their rights regarding the protection of personal data, including the rights of access, rectification, erasure, restriction of processing, objection and data portability.
To exercise these rights, the Data Controller may be contacted at the email address indicated in this Privacy Policy.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), in accordance with the procedures established by applicable legislation.
10. Cookies
Information regarding the possible use of cookies and similar technologies is available in the website's Cookie Policy.
11. Changes to this Privacy Policy
This Privacy Policy may be updated in the event of changes to the website, the services provided or applicable legislation. Users are therefore advised to review this page periodically.
Last updated: September 2026