Information on the Processing of Personal Data

1. Foreword and regulatory references
This policy explains the processing of personal data collected through this website, including those acquired through cookies, tracking technologies and - where present - contact forms, restricted areas, digital services and economic transactions that take place electronically. .
This notice is addressed to anyone who accesses or uses this site, describing the methods of collection, use and protection of the user's personal data, as well as the rights recognised by law.
These provisions do not apply to other sites, pages or online services accessible via external links that may be present on the site, in respect of which you are invited to consult the relevant privacy notices.
This information is provided in compliance with the main national and international data protection regulations, including:

• Regulation (EU) 2016/679 (GDPR)
• Other regulations that may apply.

2. Who manages your data and how can you contact us?
Your personal data are processed by:
TRULY ITALY SRL
Via Milano, 79 - 37014 Castelnuovo del Garda (VR)
trulyitaly@legalmail.it
VAT No: IT04415960238

For any information on the processing of personal data or to exercise their rights under the legislation, data subjects may contact the Data Protection Officer (DPO) designated by the Data Controller.

The DPO can be reached at the following addresses:
Email: trulyitaly@legalmail.it
Name: TRULY ITALY SRL
Address: Via Milano, 79 - 37014 Castelnuovo del Garda (VR)

The DPO acts as a point of contact for data protection issues, ensuring compliance with the applicable legal provisions and providing support to users and supervisory authorities.

3. On what legal basis do we process your data?
The processing of personal data collected through this site (including through cookies, similar technologies, contact forms, restricted areas, digital services and transactions, where present) is based on one or more of the following legal bases:

1. Performance of a service or pre-contractual activity requested by the user via the contact forms provided;
2. Fulfilment of legal, regulatory or statutory obligations;

A further legal basis, the legitimate interest of the Controller, may be used for specific purposes (e.g. ensuring IT security, preventing fraud, protecting the holder's rights in court).

Not accepting or withdrawing consent may reduce or limit certain personalised features or services.

4. What data do we collect when you visit the site?
When browsing this site, the following data may be collected, including through cookies and similar technologies such as pixel tags, web beacons, local storage and equivalent technologies:

• Browsing and technical data: information such as IP address, device identifiers, operating system and browser data, requested URLs, connection times, technical logs, technical preferences, usage data collected via cookies and tracking technologies (pixel tags, web beacons, local storage and equivalent tools).
• Data communicated via social integrations and third-party platforms: data transmitted through social functionalities (logins, plugins, shares, etc.), processed according to the rules of the relevant platforms in addition to this policy.

5. How do we process your data, how do we protect them and how long do we keep them?
Personal data collected through this site are processed mainly by electronic and digital means according to principles of lawfulness, correctness, data minimisation, integrity and confidentiality.

Data are stored according to the following timeframe:

• Cookie preferences and consensus: stored for 180 days, as per the Cookie Policy on this site.
• Browsing and technical data: retained only for as long as necessary to ensure the security, integrity and functionality of the site and subsequently anonymised or aggregated.
• Data collected for contractual and transactional purposes: retained for as long as required by applicable laws (e.g. tax or accounting regulations).
• Data processed for marketing purposes: retained until consent is revoked or cancellation is requested.
• Data entered via forms or specific requests: retained for the time necessary to reply or fulfil the relevant purpose.

6. Who can receive your data?
They may access personal data collected through this site, within the limits of their respective competences and purposes:

• Internal authorised parties by the Controller, duly trained in privacy and security;
• Suppliers and third parties appointed as data processors (e.g. technical providers, IT companies, customer service companies, consultants, payment service providers and logistic providers, where applicable);
• Business partners, third parties and affiliates, exclusively for promotional/marketing purposes if you have given specific consent or exercised your opt-out where applicable;
• Parties providing plugins, social networks and services for interaction with external platforms, which may process personal data according to their own logic in their capacity as independent data controllers (in this case, please also refer to the individual information notices of these third parties);
• Competent public authorities and supervisory bodies, to the extent required by law or to comply with requests by judicial authorities;

The updated list of external addressees can be made available on request by writing to the Holder's contact details.

7. Where can your data be transferred?
Personal data collected through this site may be processed and transferred - for the purposes indicated - to the following countries:

• to countries belonging to the European Economic Area (EEA), Switzerland or other countries recognised by the competent authorities as “adequate” for the level of protection provided by law;

Updated list of “reliable” countries”:

• EU
• Switzerland

8. What are your rights with regard to the data collected?
The user, according to the applicable legislation, has the right to:

• To obtain confirmation as to whether or not personal data concerning him/her are being processed and, if so, to obtain access to such data and related information (right of access).
• Request the rectification, updating or deletion of inaccurate or no longer required data (right of rectification and deletion).
• Request the restriction or object to the processing of data, including for promotional/profiling purposes, where applicable.
• Request the portability of data in a structured and interoperable format (where technically possible).
• Withdraw consent given to the use of non-technical cookies, to the processing of data collected via tracking tools.
• Report any irregularities or abuses to the competent control authorities.

To exercise these rights, simply send a request to the contact details of the Controller, who will respond within the timeframe provided for in the applicable local regulation.

9. How are children's data processed?
Child protection is a key priority.

The services and contents of this site are not intended for persons under the age of 18.

We do not knowingly collect personal data from minors without the verifiable consent of a parent or guardian.

If a parent or guardian believes that a child has provided personal data without authorisation, he or she may request its removal, update or restriction by writing to the contact details given in this notice.

10. How to make reports or complaints to the authorities?
If you believe that the processing of your personal data through this site does not comply with the applicable legislation, you may lodge a complaint free of charge with the competent supervisory authorities, including:

• The Garante or the Data Protection Authority of your State of citizenship or residence;
• European Data Protection Supervisor

How do we inform you about changes to this policy?
This policy is subject to periodic review for regulatory compliance or changes to the services offered through the site. Any significant changes will be communicated via this page.