Fassa S.r.l., with its registered office in Spresiano (TV), 31027, via Lazzaris 3, tax code and VAT number 02015890268 (hereinafter the “Company”), is committed to protecting the personal data of users (hereinafter a “User” or, collectively, “Users”) of the website https://www.fassabortolo.it and, as data controller, is required under Article 13 of Regulation (EU) 2016/679 (hereinafter the “GDPR”) to provide Users with certain information on the processing of personal data.
This notice also applies to personal data collected through the Website and subsequently processed by the Company to send email communications, including those containing tracking pixels, as described under purposes C) and D).
This Privacy Notice does not apply to other websites owned by third parties that can be accessed via links on the Website. Please read the privacy notices of those third-party websites for information on their processing of personal data.
WHAT PERSONAL DATA MAY BE PROCESSED
The following types of User data (hereinafter collectively referred to as “personal data”) may be processed through the Website.
A) Browsing data and cookies
During normal operation, the IT systems and software procedures used to operate the Website collect certain personal data whose transmission is inherent in the use of Internet communication protocols. This information is not collected for the purpose of linking it to identified individuals, but by its very nature could allow Users to be identified through processing and matching with data held by third parties. This category of data includes the IP addresses of the computers used by Users connecting to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file returned in response, the numerical code indicating the status of the server’s response (success, error, etc.) and other parameters relating to the operating system used. These data are used solely to obtain anonymous statistical information on the use of the Website and to check that it operates correctly, and are deleted immediately after processing. The data may be used to establish liability in the event of cybercrime affecting the Website.
The Website also uses cookies and other tracking tools (including pixels) in accordance with our cookie policy, available at the following link: https://www.fassabortolo.it/privacy-cookies, which also provides information on managing the relevant preferences.
The Website and communications sent by the Company may also use tracking technologies, such as tracking pixels, including those provided by third parties. These tools may collect information about the User’s interaction with the Website or with communications received, including, for example, the IP address, the date and time of the interaction or of the opening of the communication, the type of device and browser, as well as information on the opening and viewing of communications and any interactions with the links they contain.
These tools are used in accordance with the applicable legislation on personal data protection and electronic communications and, where required, with the User’s prior consent. For further information on the tracking tools used on the Website, please refer to the cookie policy and purpose I).
Email communications sent by the Company may contain tracking pixels: for a description of these tools, the data collected, the legal basis and how to withdraw consent, please refer to purpose D).
B) Personal data voluntarily provided by the User
The Company processes certain personal data (first name, surname, occupation, email address, country, region, province, town or city, postcode and telephone number) that Users may provide voluntarily:
- To request information
- To submit speculative applications in the “Work with us” section: please refer to the specific “Privacy policy for job applicants”;
- To request the contact details of one of our local sales agents
- To request technical support
- To access the design tools (DWG, FASSASTRUTTURA) in the “Tools & Downloads” section
- To download calculation spreadsheets, specifically the one for the Gypsotech System in the “Tools and Calculators” section
- To access the documentation for projects published in the “FassArchitettura” section
- To request information or quotations for products in our Lime System https://sistemacalce.fassabortolo.it (first name, surname, email address, telephone number, company or business name and province);
- To subscribe to the newsletter or request promotional communications (first name, surname and email address);
or personal data that may be sent to the Company by email or otherwise using the contact details provided on the Website.
C) Data collected through tracking pixels in email communications
In the circumstances and subject to the conditions described under purpose D), tracking pixels embedded in emails sent by the Company may collect the following data: IP address, type of device and email client used, date and time the message was opened, the number of times the same message is subsequently opened, if any, and interactions with links contained in the message.
PURPOSES FOR WHICH PERSONAL DATA MAY BE USED
A) Handling requests for information and technical support submitted by the User through the relevant section of the Website.
The Company may process the User’s personal data to perform a contract or take pre-contractual steps, and to handle and respond to requests for information and technical support submitted through the relevant section of the Website.
Legal basis for processing: performance of a contractual obligation or taking pre-contractual steps. The provision of personal data is mandatory; otherwise, the Company will be unable to respond to the User’s requests, perform the contract or take the contractual steps requested by the User.
B) Handling the User’s application submitted in the “Work with us” section.
The Company may process the User’s personal data to handle the speculative application submitted in the “Work with us” section of the Website; please refer to the specific “applicant privacy notice” available here.
C) Sending promotional communications by email.
The Company may process personal data for marketing purposes, to publicise promotional activities and events, including through automated means of contact (for example, email). Communications sent for this purpose may contain tracking pixels, as described under purpose D) below.
Legal basis for processing: the User’s consent, pursuant to Article 6, paragraph 1, point (a), of the GDPR, which may be withdrawn at any time by using the unsubscribe button in promotional emails or the contact details provided below in the “Contacts” section. Withholding consent has no consequences other than preventing the User from receiving promotional communications.
D) Checking whether emails have been read and analysing interactions through tracking pixels.
In email communications sent to the User, the Company may use tracking pixels, i.e. tiny technical markers, generally imperceptible to the recipient, embedded in the body of the email, which allow the Company to detect whether the communication has been opened and collect certain related technical information. These pixels allow the Company to measure the effectiveness of promotional campaigns and adjust their frequency and content. Pixels may be used in:
- direct marketing communications;
- communications sent for other purposes, such as transactional, service, security and corporate communications, and communications required to comply with legal obligations.
Legal basis for processing: the User’s consent, pursuant to Article 6, paragraph 1, point (a), of the GDPR for direct marketing communications, covered by the broader consent given for the purposes referred to in point C) above. For other communications sent by the Company (for example, transactional, service, security and corporate communications, and communications required to comply with legal obligations), an exemption from the consent requirement applies pursuant to Article 122 of the Italian Privacy Code. The User may withdraw consent at any time, including on a granular basis, by choosing either to: (i) withdraw consent in full and stop receiving promotional communications; or (ii) withdraw consent solely to the use of tracking pixels and continue to receive promotional communications without these tools. Consent may be withdrawn via the relevant link in each communication, or by using the contact details provided in the “Contacts” section, without affecting the lawfulness of processing carried out before consent was withdrawn. Refusing or withdrawing consent to tracking pixels does not restrict the receipt of promotional communications in any way.
Giving consent is optional, and refusing or subsequently withdrawing it does not affect the User’s ability to receive promotional communications for which they have validly given consent.
E) Sending communications to promote products and services similar to those previously purchased, pursuant to and within the limits permitted by Article 130, paragraph 4, of the Italian Privacy Code.
The Company may process the User’s email address to send promotional communications and material about products similar to those previously purchased, where the User’s email address was collected in connection with that purchase.
Legal basis for processing: Article 130, paragraph 4, of the Italian Privacy Code, which, subject to the conditions set out here, provides an exemption from the requirement to obtain consent for marketing communications. The User may object at any time by using the unsubscribe button in promotional emails or the contact details provided below in the “Contacts” section.
F) Disclosure of personal data to third parties for marketing activities.
The Company may process the User’s personal data by disclosing them to third parties, such as the Company’s customers, for their own marketing activities.
Legal basis for processing: the User’s consent, pursuant to Article 6, paragraph 1, point (a), of the GDPR, which may be withdrawn at any time using the contact details provided below in the “Contacts” section. Withholding consent has no consequences other than preventing the disclosure of the User’s personal data to third parties for their own marketing activities.
G) Purposes connected with obligations laid down by laws, regulations or EU legislation, or by orders or requests from authorities authorised by law and/or supervisory and oversight bodies.
The Company may process the User’s personal data to comply with its obligations.
Legal basis for processing: compliance with a legal obligation, pursuant to Article 6, paragraph 1, point (c), of the GDPR. The provision of personal data for this purpose is mandatory, as the Company would otherwise be unable to comply with specific legal obligations.
H) Defence of rights in judicial, administrative or out-of-court proceedings, and in disputes arising in connection with the services or activities offered.
The Company may process personal data to defend its rights, take action or bring claims against the User or third parties.
Legal basis for processing: the Company’s legitimate interest in protecting its rights, pursuant to Article 6, paragraph 1, point (f), of the GDPR. In this case, no additional, specific provision of data is required, as the Company will pursue this further purpose, where necessary, by processing data collected for the purposes set out above, which are considered compatible with this further purpose (taking into account, among other factors, the context in which the data were collected, their nature, the appropriate safeguards for processing them and the link between the purposes set out above and this further purpose).
I) Use of tracking pixels and other tracking tools on the Website.
With the User’s prior consent, where required by applicable legislation, the Company may use tracking pixels and other tracking tools on the Website that are not strictly necessary for its operation, including tools provided by third parties, to measure and analyse use of the Website and Users’ interactions with its content and/or for profiling and marketing purposes, as specifically set out in the cookie policy.
Legal basis for processing: the User’s consent, where required, pursuant to Article 6, paragraph 1, point (a), of the GDPR and Article 122 of the Italian Privacy Code. The User may withdraw consent or change their preferences at any time through the preference management tool available on the Website. For further information on the individual tools used, their providers and their respective retention periods, please refer to the cookie policy.
HOW WE KEEP PERSONAL DATA SECURE AND WHERE WE STORE THEM
The Company adopts appropriate security measures to ensure the protection, security, integrity and accessibility of Users’ personal data. These security measures are designed to prevent unauthorised access to, disclosure, alteration or destruction of personal data.
All personal data are stored on the Company’s secure IT equipment or that of our suppliers, and may be accessed and used in accordance with our security standards and policies (or equivalent standards for our suppliers).
To carry out certain processing activities involving the User’s personal data, the Company discloses those data to external parties located in countries outside the European Union (EU) or the European Economic Area (EEA) (hereinafter “Third Countries”).
The lawfulness of such transfers is in all cases ensured through the mechanisms provided for in Chapter V of the GDPR.
These external parties will process personal data either as independent data controllers or as data processors duly appointed by the Company in accordance with personal data protection legislation (depending on their role in the processing).
You may write to the Company at any time, using the contact details provided below, to request information on the recipients of personal data and a copy of the safeguards adopted for the transfer.
HOW LONG WE RETAIN PERSONAL DATA
We retain personal data only for as long as necessary to fulfil the purposes for which they were collected or any other related legitimate purpose. Therefore, if personal data are processed for two different purposes, we will retain them until the purpose with the longer retention period has been fulfilled. However, we will no longer process personal data for a purpose once the relevant retention period has expired.
Personal data that are no longer required, or for which there is no longer a legal basis for retention, are securely destroyed.
Browsing data are not retained by the portal, except where required by the judicial authorities to investigate criminal offences.
Data processed to fulfil contractual obligations relating to the handling of the User’s requests for information and technical support may be retained for 6 months from the date of the response provided to the User.
Data processed in connection with the User’s application through the “Work with us” section may be retained for the period specified in the “Privacy policy for job applicants” available here.
Data processed for the purpose of sending promotional emails may be retained for 24 months from the date on which we last obtained your consent for this purpose.
Data processed for so-called “soft spam” purposes may be retained until the User objects.
Data processed for the purpose of disclosure to third parties for their own marketing purposes may be retained for 24 months from the date on which we last obtained your consent for this purpose.
Data collected through tracking pixels embedded in promotional communications will be retained for 24 months from collection and, in any event, no later than the withdrawal of the relevant consent. After that period, they will be deleted or retained solely in aggregated and anonymous form, unless further retention is necessary to comply with legal obligations or protect the Company’s rights.
Where data need to be processed for litigation purposes, they will be retained for as long as any claims may be pursued by law.
WHO CAN ACCESS PERSONAL DATA
Users’ personal data may be accessed by duly authorised employees of the Company and, where applicable, external suppliers (including consultants and providers of platforms used to send email communications), appointed as data processors where necessary.
You may contact the Company using the details provided in the “Contacts” section to request access to the list of data processors and other parties to whom the data are disclosed.
PERSONAL DATA PROTECTION RIGHTS
Each User has the right to obtain the following from the Company, provided that the legal requirements for the request are met:
- access to their personal data, pursuant to Article 15 of the GDPR;
- erasure of personal data, pursuant to Article 17 of the GDPR;
- rectification of their personal data held by the Company, pursuant to Article 16 of the GDPR;
- withdrawal of consent where processing is based on consent, pursuant to Article 7 of the GDPR;
- restriction of the processing of their personal data, pursuant to Article 18 of the GDPR;
- a copy of the personal data they have provided to the Company in a structured, commonly used and machine-readable format (known as data portability), and the transmission of those personal data to another data controller, pursuant to Article 20 of the GDPR.
Right to object: Users have the right to object, in whole or in part, to the use of personal data processed by the Company where the conditions laid down by personal data protection legislation are met (Article 21 of the GDPR), for example where personal data are processed for direct marketing purposes.
If the User exercises any of the above rights, the Company will verify that they are entitled to do so and will generally respond within one month.
If the User believes that their personal data are being processed in breach of applicable personal data protection legislation, they have the right to lodge a complaint with the Italian Data Protection Authority, using the contact details available on its website https://www.garanteprivacy.it, or to bring proceedings before the appropriate courts.
CONTACTS
The Company’s contact details for queries and for exercising rights relating to the processing of personal data are as follows: email data.protection@fassabortolo.com;
For further information about our services, please email data.protection@fassabortolo.com.
The Company has a Data Protection Officer (“DPO”) appointed pursuant to Article 37 of the GDPR, who can be contacted at the following email address: dpo@fassabortolo.com
Last updated: October 2026
