GDPR · Art. 13–14

Privacy Notice

1. Data controller

The Data Controller is RETESI SRL, with registered office at Via Toti, 9 — 23100 Sondrio (SO), Italy. Single point of contact: privacy@retesi.it.

2. Types of data collected

The website collects and processes the following categories of data:

Data provided voluntarily: name, email, phone, company and message content entered in the contact form, or data included in a spontaneous application sent by email.
Navigation data (automatic): IP address, date and time of access, browser type and operating-system parameters, collected from server logs for security purposes.
Cookies: the website uses only technical cookies required for correct operation. There are no profiling cookies and no third-party analytics.

3. Purposes of processing

Data is processed for the following purposes:

Response to enquiries: handling requests submitted through the contact form and spontaneous job applications.
Communications: replying to commercial contact or support requests, exclusively upon the user’s initiative.
Security and prevention: protecting the website from abuse and ensuring business continuity.

4. Legal basis and requirement to provide data

Processing is based on the data subject’s consent (for requests submitted through the contact form) and the Controller’s legitimate interest (security and abuse prevention). Providing data is optional, but without it the request cannot be answered.

5. Processing methods and security

Data is processed electronically using appropriate measures to ensure maximum confidentiality.

Cloud: services use Amazon AWS infrastructure, which is declared fully GDPR-compliant.
Business continuity: Retesí adopts ISO 9001 procedures to safeguard data.

6. Disclosure to third parties and data transfers

Data is not sold or disclosed to third parties for commercial purposes. It is processed exclusively by authorised Retesí personnel, within the Amazon AWS infrastructure. Sending a spontaneous application results in the CV being shared only with internal staff involved in the selection process.

7. Data subject rights

Users may exercise their rights under Articles 15–22 of the GDPR at any time:

Access their data and verify its existence.
Update, rectify or erase their data.
Object to processing for legitimate reasons and withdraw consent previously given. To exercise these rights, email privacy@retesi.it. Optional preferences (theme and language) can be reset by clearing the browser’s site data.