Legal notesPrivacy policy
Information on the processing of personal data under Article 13 of Regulation (EU) 2016/679 (GDPR) for the website www.ital-service.it.
Last updated: 31 October 2026 · version 1 · This is a translation of the Italian version, which prevails in case of discrepancy.
In short
- Who processes your data: ITALSERVICE SRL A SOCIO UNICO, Curtarolo (PD), Italy.
- Which data: what you enter in the contact form (first name, last name, email, country, city, type of business, message and, if you wish, company, line of business and province), your answers on consent and technical browsing data. If you accept statistics cookies, also the site usage data collected by Google Analytics.
- Why: to answer your request and follow it up commercially; to send you marketing communications and for profiling only if you answer «yes» to the dedicated questions in the form; to measure site usage statistically, only if you accept it in the banner; to protect the form from spam and the site from abuse.
- Who receives them: authorised Italservice staff; the dealer or agent covering your area, to whom we forward the request so they can follow it up (and we tell you who it has been assigned to); providers who manage on our behalf the form and contacts (HubSpot), statistics (Google), hosting (Amazon Web Services) and form protection (Google reCAPTCHA, Cloudflare). Some providers may process data in the United States, with the safeguards described in section 6.
- What we do not do: the site uses no advertising cookies and loads no third-party services until you open the contact form or accept statistics cookies.
- Your rights: you can request access, rectification, erasure and the other rights in section 7, and withdraw your consent at any time, by writing to dataprivacy@ital-service.it.
1. Data controller
ITALSERVICE SRL A SOCIO UNICO
Via Vanoni 14 – 35010 Curtarolo (PD), Italy
VAT and tax code 03244460287
Phone +39 049 9630654
Privacy contact: dataprivacy@ital-service.it
2. Which data we process, why and for how long
| Processing | Data | Purpose | Legal basis | Provision of data | Retention |
|---|---|---|---|---|---|
| Browsing the site | IP address, browser and device type, page requested, date and time | Running the site and protecting it from abuse | Legitimate interest (Art. 6(1)(f) GDPR) | Necessary to visit the site | Access logs are kept by the hosting provider (Amazon Web Services) for the whole duration of the service: this is a provider setting we cannot shorten. We consult them only for site security and to investigate abuse. |
| Contact request | First name, last name, email, country, city, type of business (dealer, end user, other), message (mandatory); company, line of business, province (optional) | Answering your request; forwarding it to the dealer or agent covering your area, who will contact you, and telling you who it has been assigned to | Pre-contractual measures at your request (Art. 6(1)(b)) if you write as a private individual; legitimate interest in answering (Art. 6(1)(f)) if you write on behalf of a company | Fields marked * are needed to answer | 3 years from collection, then erasure |
| Commercial handling of the request | The same data, plus notes on the negotiation | Following up the request, preparing quotations and organising the further contacts related to that same request. Any later marketing communications are sent only with the consent in the next row. | Legitimate interest (Art. 6(1)(f)) in handling the requests received | — | As in the previous row; if you become a customer, for the duration of the relationship and then as required by law |
| Marketing communications | First name, last name, email, company, country | Sending you news and offers on Italservice products and services | Consent (Art. 6(1)(a) GDPR and Art. 130 of the Italian Privacy Code), given by answering «yes» to the dedicated question in the form | Optional: if you answer «no», we still answer your request | Until you withdraw consent and in any case no longer than 24 months from the last interaction. Our emails contain no tools that record whether you open them or which links you click. |
| Profiling | Only the data you enter in the form: type of business (dealer, end user, other), line of business, company, country, province | Placing you in homogeneous groups (by type of business, sector and area) in order to: 1) send you only the marketing communications on products and sectors relevant to you; 2) decide which contacts our sales office offers tailored proposals to first | Consent (Art. 6(1)(a) GDPR), given by answering «yes» to the dedicated question in the form. We use it only if you have also consented to marketing communications | Optional: if you answer «no», nothing changes for your request or for the communications you accepted, which you will receive in non-personalised form | Until you withdraw consent and in any case no longer than 12 months from the last interaction |
| Visit statistics | Online identifiers assigned by Google Analytics cookies, pages visited, duration and source of the visit, device and browser type, approximate location | Understanding statistically how the site is used in order to improve it | Consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), given with «Accept» in the banner | Optional: if you reject, the site works in the same way | Cookies: 2 years; data in the Google Analytics property: 14 months |
| Protecting the form from spam | Technical device and browsing data collected by Google reCAPTCHA Enterprise (IP address, browser, interactions with the page) and the _GRECAPTCHA cookie | Telling people apart from automated programs | Legitimate interest in the security of the form (Art. 6(1)(f)). Access to device information is strictly necessary to send securely the form you asked to use (Art. 122(1) of the Italian Privacy Code) and therefore does not require consent | Necessary to send the form | Handled by Google as a sub-processor of HubSpot; cookie for 6 months |
| Record of cookie choices | Random code of your choice (also stored in your browser's local storage, see the Cookie policy), choice (statistics accepted or rejected), version of the banner text, page, browser type and operating system (without version), date and time. The record does not store your IP address, and the service receiving the choices keeps no access logs. | Being able to prove the consent you gave or refused | Legal obligation (Art. 6(1)(c) GDPR): proving consent, as required by Articles 7(1) and 5(2) GDPR | Automatic when you choose in the banner | 12 months, then automatic erasure: the 6 months during which the choice remains valid plus 6 months for any disputes. Meanwhile the records cannot be altered. |
| Storing your cookie choice | Your choice (accept or reject) and the date, stored only in your browser | Not asking you again on every page | Technical tool (Art. 122 of the Italian Privacy Code) | — | 6 months, then we ask you again |
3. Legitimate interests
- Security and operation of the site: recording technical visit data lets us run the site and detect abuse.
- Answering people who write on behalf of a company: if you contact us as a company representative, we use your contact details to answer and follow up the request.
- Forwarding to the area dealer or agent: if you write on behalf of a company, we pass the request to whoever covers your area, so that someone who can serve you locally answers you.
- Commercial handling of requests: we organise requests in our contact management system (CRM) to answer in an orderly way and prepare any quotations.
- Protecting the form from spam: we use Google reCAPTCHA to prevent the automated sending of fake requests.
You can object at any time to processing based on legitimate interest (see the box in section 7).
4. Recipients
Italservice staff. Data are processed by authorised Italservice staff (Art. 29 GDPR and Art. 2-quaterdecies of the Italian Privacy Code), instructed and bound to confidentiality, only as far as their task requires: sales, administration, technical support and IT.
Area dealers and agents. If your request concerns an area covered by one of our dealers or agents, we forward to them the data you gave us (first name, last name, contact details, company, location and message) so that they can contact you and follow up the request, and we tell you who it has been assigned to. Dealers receive the data as independent controllers and process them under their own privacy notice, which they give you when they contact you. Sales agents working for Italservice process them on our behalf, as processors (Art. 28 GDPR) under the agency contract. Forwarding to the dealer or agent serves to follow up your request (Art. 6(1)(b) GDPR or, if you write for a company, our legitimate interest, Art. 6(1)(f)).
Providers. They process data on our behalf, as processors (Art. 28 GDPR):
| Provider | Service | Where the data are |
|---|---|---|
| HubSpot Ireland Ltd. | Contact form and contact management (CRM) | HubSpot data centre in the European Union (eu1 region); possible access from the United States, see section 6 |
| Google Ireland Limited | Google Analytics and Google Tag Manager, only if you accept statistics cookies | European Union and United States (Google LLC), see section 6 |
| Amazon Web Services | Site hosting and content delivery (CloudFront) | European Union (Ireland); content is delivered through the global CloudFront network, see section 6 |
| Cloudflare, Inc. | HubSpot sub-provider: bot protection on the form servers (__cf_bm cookie) | United States and global network, see section 6 |
| IT services provider | Technical management of the site, the contact form and the record of cookie choices | Italy |
Google LLC provides Google reCAPTCHA Enterprise as a sub-processor of HubSpot. Under the terms of the service, Google processes these data only to provide and maintain the service and keep its security functions effective, and does not use them for any other purpose, such as personalised advertising. The up-to-date list of processors is available on request from the contact in section 1. Data are not disseminated or disclosed to others, except where required by law or by the authorities.
5. Automated decisions
We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. The profiling described in section 2 only serves to choose which communications to send you and in which order to offer proposals: it produces no legal effects and does not exclude you from any service.
6. Transfers outside the European Economic Area
| Provider | Country | Safeguard |
|---|---|---|
| Google LLC (Analytics, Tag Manager, reCAPTCHA) | United States | EU-US adequacy decision (Data Privacy Framework, Decision (EU) 2023/1795) |
| HubSpot, Inc. | United States | Data Privacy Framework and standard contractual clauses in the data processing agreement |
| Cloudflare, Inc. | United States | Data Privacy Framework and standard contractual clauses |
| Amazon Web Services | United States and global CloudFront network (support access; delivery of pages to visitors outside the EU) | EU-US adequacy decision (Data Privacy Framework): Amazon Web Services, Inc. is covered by the certification of Amazon.com, Inc.; in addition, the standard contractual clauses of the AWS data processing agreement |
You can ask us for information on the safeguards adopted, or a copy of them, by writing to the contact in section 1.
7. Your rights
You can ask us at any time to:
- access your data and receive a copy (Art. 15 GDPR);
- correct them if they are inaccurate or incomplete (Art. 16);
- erase them when they are no longer needed or you have withdrawn consent (Art. 17);
- restrict their processing (Art. 18);
- receive them in a structured format or have them transmitted to another controller, for data you gave us on the basis of consent or a contract (Art. 20);
- withdraw your consents (marketing communications, profiling, statistics) at any time, without affecting processing already carried out (Art. 7(3)): for emails also through the link in every message, for statistics through «Cookie preferences» at the bottom of every page.
Right to object (Art. 21 GDPR). You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (sections 2 and 3). You can always object, without giving reasons, to the use of your data for marketing communications and profiling.
To exercise your rights write to dataprivacy@ital-service.it or by post to ITALSERVICE SRL A SOCIO UNICO, Via Vanoni 14, 35010 Curtarolo (PD), Italy. We answer within one month, extendable by two months in complex cases, and we tell you the reason for any extension.
8. Complaints
If you believe the processing of your data infringes the GDPR, you can lodge a complaint with the supervisory authority of the State where you live, work or where the infringement took place. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).
9. Minors
The site is aimed at professionals and companies in the food service sector and is not intended for minors.
10. Cookies and similar tools
The site uses technical cookies and, only with your consent, Google Analytics statistics cookies. It uses no advertising cookies. All details are in the Cookie policy; you can change your choice from «Cookie preferences» at the bottom of every page.
11. Changes to this notice
We may update this notice when the processing, providers or rules change. The date at the top shows the latest version. If the changes concern purposes for which you gave consent, we will ask for it again.