Personal data
Information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). This English version is provided for convenience; the Italian version prevails.
Updated 12 October 2026
The data controller is F.A.R. F.lli Rovelli S.n.c., with its registered office at Via Thomas Alva Edison 22, Brugherio (MB), Italy. For information about the processing of personal data and to exercise your rights, you can write to info@far-rovelli.it or call +39 039 2877886.
When you contact us for information or request a quotation by email, telephone or online form, we may process your name, company, professional role, email address, telephone number and information about your project, the requested manufacturing processes, industry and expected quantities.
Requests may include technical drawings, specifications, photographs and other attachments. These documents may contain personal data. Please provide only information necessary to assess your project and avoid including special categories of personal data or irrelevant information about third parties.
When the online form is used, request details may be recorded in a Cloudflare D1 database and any attachments stored in a private Cloudflare R2 bucket. The system may send a notification about the request to authorised company personnel and a receipt acknowledgement to the person submitting the request through the Resend service. The form is active and accepts public quotation requests.
When you browse the website, technical data may also be processed, including your IP address, the date and time of requests, URLs visited, browser and device information, and data necessary for website operation, abuse prevention and security.
Requesting a quotation does not automatically subscribe you to promotional communications. Any marketing activities will be accompanied by specific information and, where required, separate consent will be obtained.
Providing data is optional, but certain contact and project details are necessary to respond and prepare a quotation. Without them, we may be unable to handle your request. Please avoid submitting information that is not relevant to your project.
Personal data may be accessed by authorised company personnel and, where necessary, by service providers supporting our digital infrastructure and communications. Services used include Cloudflare for website delivery and security, D1 for storing quotation requests, R2 for storing attachments, Turnstile for anti-spam verification and Cloudflare Access for protecting the administrative area. Resend is used for quotation-related notifications. Company email services are also provided by the relevant email service provider.
Where applicable, service providers process data as processors pursuant to Article 28 GDPR. Data may be disclosed to advisers and public authorities where necessary or required by law, and is not intended for public disclosure.
The quotation management area is intended exclusively for authorised personnel. Access controls and data protection measures appropriate to the service are used and must be maintained and reviewed over time.
Quotation requests that do not result in orders, together with their attachments, are retained under the company's adopted retention criterion for a maximum of 24 months from the last business contact relating to the request, unless a different period is necessary to comply with legal obligations or to establish, exercise or defend legal claims.
Where a request leads to a supply arrangement or contract, necessary records may be retained throughout the relationship and for further periods required by applicable law or needed to protect legal rights. Technical and security data are retained for periods proportionate to their purposes and the settings of the service providers involved.
At the end of the applicable period, data must be deleted or anonymised through appropriate procedures, also taking into account attachments and any copies in email communications and backup systems. You may contact the controller for information about retention periods applicable to a specific request.
The website uses Cloudflare infrastructure to deliver pages, provide security, run application features, manage requests through D1, store attachments through R2, prevent spam through Turnstile and control access through Access. Automated quotation-related communications are handled through Resend. Website fonts are hosted locally.
Any links to Google Maps open the external service only when selected by the user; Google's own terms and privacy information apply from that point onwards.
Using international service providers may involve transfers of data outside the European Economic Area. Where such transfers take place, they must rely on an adequacy decision or appropriate safeguards under Articles 44 et seq. GDPR, such as Standard Contractual Clauses. You may contact the controller to request further information about actual transfers and safeguards applied.
Under the currently planned configuration, the website does not use advertising profiling tools or tools for statistical analysis of visitors' behaviour. The quotation form is not designed to store uploaded attachments in the browser.
Cloudflare and the website's protection tools, including Turnstile and Access, may use cookies or other technologies strictly necessary for security, abuse prevention and the authentication of authorised personnel. Such technologies must be limited to their respective technical purposes.
Before introducing tools that are not necessary for the operation of the website, this policy will be updated and, where required by applicable law, user consent will be obtained.
In the cases provided for by the GDPR, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interest and withdraw any consent given without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, write to info@far-rovelli.it. We may request only the information necessary to verify your identity. We will respond within the periods prescribed by Article 12 GDPR, generally within one month, subject to justified extensions.
You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it.
The handling of requests described in this policy does not involve solely automated decisions producing legal or similarly significant effects, nor profiling. This policy may be updated if the services used or processing methods change; the date shown identifies the published version.
