Privacy Policy

1. Data controller

The data controller is CS COSTRUZIONI S.R.L.S., Corso Vittorio Emanuele II 39, 44015 Portomaggiore (FE), Italy, VAT IT02181340387, certified email (PEC) cscostruzionisrls@pecaruba.it, email info@epcsubcontractors.com.

2. Data processed

Browsing data. The systems running the website collect technical data (such as IP address, browser type, access time and requested pages) needed for the operation and security of the site.

Data you provide. When you contact us through the form, by email or via WhatsApp, we process the data you share with us: name, company, contact details and the content of your request, including attached documents. Messages sent via WhatsApp are also processed by the provider of that service under its own terms.

Cookies. For cookies and similar technologies, please see our Cookie Policy.

3. Purposes and legal bases

a) Replying to information and quote requests and managing negotiations: pre-contractual measures taken at the data subject’s request (Art. 6(1)(b) GDPR).

b) Managing contracts with clients and suppliers: performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).

c) Ensuring the operation and security of the website: legitimate interest of the controller (Art. 6(1)(f) GDPR).

d) Complying with legal obligations or requests from authorities: Art. 6(1)(c) GDPR.

4. Provision of data

Providing the data requested in the contact form is optional but necessary to reply to your request.

5. Methods and retention

Data are processed electronically and on paper, with appropriate technical and organisational measures. They are kept for as long as necessary for the purposes for which they were collected: requests with no contractual follow-up for the time needed to handle them; contract-related data for the duration of the relationship and afterwards for the periods required by civil and tax law.

6. Recipients

Data may be processed by providers of technical and organisational services to the controller (such as website hosting, email, IT maintenance and administrative advice), appointed as processors, and disclosed to authorities where required by law. Data are not made public.

7. Transfers outside the European Union

As a rule the controller does not transfer data outside the European Economic Area. Where service providers operate outside the EEA, transfers take place in compliance with Articles 44 et seq. GDPR.

8. Your rights

You may request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing (Articles 15-22 GDPR), by writing to info@epcsubcontractors.com or to the certified email address above. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country.

9. Automated decision-making

No automated decision-making or profiling takes place.

10. Updates

This notice may be updated. The version in force is always the one published on this page.