PRIVACY & COOKIES POLICY

DATA CONTROLLER

CANTALUPI LIGHTING S.R.L., with registered office at Via Fosso Legnami n. 217, 55040 Massarosa (LU), Italy, VAT/Tax Code 01793930460, represented by its legal representative pro tempore, acts as the Data Controller for personal data processing.

LEGAL BASIS AND REFERENCES

This policy is provided in accordance with EU Regulation 2016/679 (GDPR) and Legislative Decree no. 196/2003, as amended.

1. SECURITY MEASURES

Appropriate technical and organizational measures are implemented to ensure secure access to the website and to protect data from unauthorized destruction, loss, or disclosure. Credentials for restricted areas are assigned and do not contain personal identifiers. Passwords must be kept confidential by the user.

2. CHANGES TO THIS POLICY

The Data Controller reserves the right to update this privacy policy at any time, publishing changes on this page. Users are encouraged to review it regularly, noting the date of the last revision.

3. LEGAL REFERENCES

This privacy notice is drafted in compliance with the GDPR (EU Regulation 2016/679), Directive 95/46/EC (Art. 10), and Directive 2002/58/EC as updated by Directive 2009/136/EC on cookies.

4. PURPOSES AND LEGAL GROUNDS FOR PROCESSING

Personal data are processed for:

Execution of pre-contractual or contractual measures (Art. 6(1)(b) GDPR);
Sending promotional communications (newsletter, marketing) only with explicit consent (Art. 6(1)(a) GDPR);
Anonymous statistical purposes and website security (legitimate interest, Art. 6(1)(f) GDPR);
Access to the reserved area (contractual execution).

5. CATEGORIES OF DATA PROCESSED

Identity and contact data (e.g., name, email, phone);
Technical and browsing data (IP address, logs, cookies);
Voluntarily submitted content (CVs, photos/videos);
Any special category data (e.g., health or judicial) only if necessary and with explicit consent. Users are responsible for any third-party data they submit through the site.

6. PROCESSING METHODS AND SECURITY

Data are processed using both automated and manual means, complying with Article 32 GDPR. Measures are in place to prevent unauthorized access, loss, or alteration.

7. DATA RECIPIENTS

 Data may be disclosed to:
Authorized internal staff;
Service providers (hosting, IT, newsletter);
Consultants and professionals;
Authorities when legally required. All recipients operate as Processors or independent Controllers.

8. TRANSFER TO THIRD COUNTRIES

Data may be transferred outside the EU, e.g., via Google Analytics or social platforms. Transfers occur with Standard Contractual Clauses or equivalent safeguards.

9. RETENTION PERIODS

Contractual/request data: retained as long as necessary or until deletion is requested;
Marketing/newsletter data: up to 24 months or until consent is withdrawn;
Technical/log data: up to 6 months, unless required by law or for investigation.

10. DATA SUBJECT RIGHTS

Under Articles 15–22 GDPR, the data subject may request: access, rectification, deletion, restriction, portability, objection, and withdrawal of consent without affecting prior lawful processing. The right to lodge a complaint with the Data Protection Authority is also recognized.

11. EXERCISING RIGHTS

To exercise rights, contact:

CANTALUPI LIGHTING S.R.L., Via Fosso Legnami 217, 55040 Massarosa (LU);
Email: info@cantalupilighting.it

12. MINORS

No intentional data collection from minors under 14. If collected accidentally, data will be deleted upon request.

13. COOKIES

The website uses:

Essential technical cookies;
Anonymous analytics cookies (Google Analytics with IP anonymization);
Profiling/remarketing cookies only with explicit consent. A consent management banner is active, compliant with the Italian DPA’s 10 June 2021 guidelines. Cookies can be managed via browser settings.

14. ADDITIONAL INFORMATION

The list of Data Processors is available at the registered office;
Data may be used for legal defense;
Specific notices may appear for certain services;
System logs may collect usage data for operational purposes;
The Controller is not liable for third-party websites linked from this site.

Last updated: July 2025