Privacy Notice

Privacy Notice – De Rossi Vittoriano Srl

Information on the processing of personal data and free circulation pursuant to
Regulation (EU) 2016/679 of the European Parliament and of the Council


Data controller
Data controller of personal data is: De Rossi Vittoriano srl, Viale dell’Industria 34 – 20037 Paderno Dugnano, tel. 02.9186043, mail:

Purpose and legal basis of the processing
The personal data provided are collected for the performance of the activities defined by the contractual agreements related to the machining of mechanics, equipment and machines, assembly, design and technical advice, including ancillary activities (ie: accounting, administrative, organizational, management) and for the fulfillment of legal obligations. In addition, the data provided are also collected for promotional purposes, marketing and for monitoring and analysis of the degree of customer satisfaction.

Data processed
These are the common personal data acquired by the customer for the management of the contractual relationship (personal data, address, telephone, e-mail, technical data reported on contracts, etc.). There is no provision for the treatment of additional special categories of personal data (Article 9 of the EU regulation).

Categories of recipients of personal data
The data processed may be communicated to: internal manager and designated persons in charge of data processing, to external companies for IT assistance and for fiscal, accounting and administrative assistance. The data, limited to what is within their competence, may also be disclosed to any third party companies and professionals involved in the management of the contractual relationship. We also inform you that De Rossi Vittoriano srl benefits from cloud computing application services in EU countries, web platforms, e-mail providers at data centers located within the European Economic Area (EEA). Data, except for specific legal obligations, are not transferred to other companies and third countries, in particular to countries that do not provide adequate guarantees regarding data processing.

Data retention period
The collected data will be processed using electronic or automated means, computerized and telematic, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee the security of the same . The processing of data will last from the stipulation of the contractual relationship until the contract is exhausted, increased by 10 years (in order to allow the fulfillment of legal and tax obligations). The fundamental rights of the interested party are specified in articles 15 (access), 16 (correction), 17 (right to be forgotten) and 18 (treatment limitation) of EU Regulation 679/2016. To exercise their rights, the interested party can send a specific request to the following addresses: tel. 02.9186043, mail: The holder will inform him of the receipt and will respond to his request within 72 working hours. Pursuant to art. 19, the requests relating to the rights referred to in Articles 16, 17 and 18 will be transmitted by the Owner and / or the Internal Manager.

The right to lodge a complaint with a supervisory authority
The data subject also has the right to lodge a complaint with the competent supervisory authority.

Necessity and Consequences of a refusal to communicate personal data
Failure to provide data for the purposes indicated above will prevent the Owner from managing the contractual relationship and sending the requested information.