NOTICE PURSUANT TO ARTICLES 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679

TIRRENA S.r.l. – P. Iva 01374420451 email privacy@tirrena.it, Data Controller, informs you that your data will be processed in the manner and for the purposes indicated below.

The Owner is committed to protecting the privacy and confidentiality of Personal Data in accordance with the principles of fairness, lawfulness, transparency and protection of your rights

1) TYPE OF DATA PROCESSED

We process personal data communicated by you (name, email, company name, telephone, etc.) in connection with spontaneously submitted requests and data that are independently collected by the website.

• Data you provide: personal, identifying, and non-sensitive data communicated by you to make requests by email, through the contact form, or by phone about our products/services
• Data we collect automatically: anonymous data collected using cookies or similar technologies: for more information, view the Cookie Policy further below.

Please note: Users under the age of 16 may not provide any personal data without consent from their parents or guardians.

2) PURPOSE AND LEGAL BASIS FOR PROCESSING

We will process your personal data:

A) to fulfill our contractual obligations; to provide you with a response to your inquiries; to calculate a quotation you have requested from us; to execute contracts for the purchase and sale of products or the commissioning of services; to ensure you receive the necessary assistance with respect to the products and services you have purchased.

B) to perform aggregate statistical analysis on an anonymous basis to improve our services;

C) for administrative purposes and to comply with legal obligations such as accounting, tax, or to give effect to requests of judicial authorities.

D) in the case of sending resumes, exclusively for selection purposes.

3) IS THE PROVISION OF DATA MANDATORY?

The provision of your data is always optional, but failure to provide them may make it impossible to proceed with some processing, such as those strictly related to the fulfillment of a contract or the provision of the services you have requested.

4) LOCATION, PROCESSING METHODS AND STORAGE TIMES

The processing of your personal data is carried out by means of the operations indicated in art. 4 Privacy Code and art. 4 no. 2) GDPR and namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking,
communication, deletion and destruction of data.

Your personal data are stored at the headquarters of the Data Controller and are subjected to both paper and electronic and/or automated processing with logic strictly related to the purposes indicated and in any case in such a way as to ensure the security and confidentiality of the data. The data you submit are not saved within our website.

The Data Controller will process personal data for as long as necessary to fulfill the above purposes and in any case for no longer than 10 years from the termination of the relationship for the Purposes in point C and for no longer than 38 months from the collection of the data for the Purposes in point B.

5) ACCESS TO DATA

Your data may be made accessible for the purposes indicated in point 2:

• to employees and collaborators of the Data Controller, in their capacity as persons in charge and/or internal data processors and/or system administrators;
• to third-party companies or other entities (website provider, cloud provider, e-payment service provider, suppliers, hardware and software support technicians, shippers and carriers, credit institutions, professional firms, etc.) that perform outsourcing activities on behalf of the Controller, in their capacity as data processors.

6) DATA TRANSFER

Data will not be disseminated, sold or exchanged with parties other than the Data Controller, data processors and appointed persons without your express and explicit consent.

7) YOUR RIGHTS

You have the right to know which of your personal data are being processed. In particular, you are granted the right of access, rectification, deletion as well as the right to data portability, the right to restrict processing and the right to object to processing if there are grounds for doing so.

Below we provide a brief illustration of the rights you are granted with regard to the processing of your personal data.

• The right of access allows you to obtain confirmation as to whether or not your personal data is being processed by the Controller and, where applicable, access to such data and information relating thereto;
• The right to rectification allows you to obtain the amendment of inaccurate personal data concerning you without undue delay and, taking into account the purposes of the processing, to obtain the integration of incomplete personal data;
• The right to erasure allows you to obtain the deletion of data concerning you without undue delay (e.g., when your personal data are no longer necessary in relation to the purposes for which they were collected), subject to the exceptions provided for in applicable legislation (e.g., when the retention of your data is necessary for compliance with legal obligations applicable to the data controller). Deletion will be carried out within the prescribed technical timeframe;
• The right to data portability allows you, under certain circumstances provided for by applicable law, to receive in a structured, commonly used and machine-readable format the personal data concerning you that you have provided. You will be able to transmit these data to another data controller, provided that you can be granted this right in light of the applicable legislation, and without prejudice to the case where an injury to the rights and freedoms of others may result;
• The right to restriction of processing allows you, under certain circumstances provided for in the applicable legislation, to obtain the restriction of the processing of your personal data. In such cases, the Data Controller may continue to process your data only in certain instances, such as for the exercise of the right of defense or to protect the rights of another natural or legal person;
• The right to object to processing allows you, under certain circumstances provided by applicable law, to object to the processing of your personal data unless there are overriding legitimate grounds, rights or freedoms that allow the Controller to continue processing;

To obtain more information about the processing of your personal data or exercise your rights, you can contact us at privacy@tirrena.it

8) CHANGES TO THE POLICY

This Policy is subject to change. We therefore recommend that you check this Policy regularly and refer to the most up-to-date version.

Last updated: September 2025