NOTICE ON THE PROCESSING OF PERSONAL DATA

pursuant to Article 13 of EU Regulation 2016/679 

GGZ S.r.l. attaches particular importance to the protection of your personal data and to safeguarding your privacy.

Through this policy (hereinafter, the “Notice”), GGZ S.r.l., with its registered office in Pozzonovo (PD) – Via Tezzon, No. 6/A – VAT No. 01767000282, wishes to inform visitors (hereinafter, the “Data Subjects”) to the website www.solotre.com (hereinafter, the “Website”) regarding the policy adopted in relation to the protection of personal data. We invite you to read this Notice carefully, as it applies both when you access the Website simply to browse and use our services, without purchasing any products, and when you decide to make a purchase.

Pursuant to Article 13 of EU Regulation 2016/679 (hereinafter, the “GDPR”), GGZ provides you with the following information.

 

1. Data Controller

The Data Controller is GGZ S.r.l., with its registered office in Pozzonovo (PD) – Via Tezzon, No. 6/A – VAT No. 01767000282, and registered with the Padua Companies Register under No. PD-179898.

The Data Controller has not appointed a Data Protection Officer (DPO), as the conditions set out in the GDPR do not apply. For any privacy-related enquiries, you may contact the Data Controller at the following email address info@solotre.com and telephone number 0429773632.

 

2. Types of data processed and purposes

As part of its business activities, the Data Controller processes the following personal data (hereinafter, the “Data”) relating to Data Subjects:

- personal and contact details (e.g. first name, surname, place and date of birth, tax identification number, physical address, email address, telephone number, etc.);

- data relating to orders and transactions (e.g. payment details, information relating to purchases made, orders, returns, etc.);

- browsing data (e.g. location data, device identification number or advertising ID, etc.);

- behavioural profiling data (e.g. socio-demographic data, purchasing preferences, interests and consumption habits, etc.).

The Data is processed, in accordance with the procedures described in paragraph 4, for the purposes listed below:

1. for registration and access to restricted areas of the Website;

2. to respond to enquiries sent by Data Subjects by email;

3. for the purchase of products on the Website and for activities necessary and instrumental to the performance of contractual relationships, as well as for any necessary pre- and post-sales assistance;

4. for marketing activities, including the sending of newsletters for informational and promotional purposes (via traditional and digital channels such as newsletters, emails and text messages), as well as for profiling and retargeting activities, including through third parties (e.g. social networks, etc.);

5. for profiling purposes, namely the analysis of consumer habits and choices, in order to ensure that products, initiatives and individual commercial offers are better tailored to the tastes and needs of its customers;

6. to comply with obligations laid down by law, regulations, EU legislation or an order from the Authority;

7. to exercise the Data Controller’s rights, for example the right of defence in legal proceedings.

3. Legal basis for processing

The legal basis for the processing is:

- for the purposes referred to in points 1, 2 and 3 above, the performance of a contract to which the Data Subjects are party or the implementation of pre-contractual measures pursuant to Article 6(1)(b) of the GDPR;

- for the purpose referred to in point 6 above, compliance with a legal obligation to which the Data Controller is subject pursuant to Article 6(1)(c) of the GDPR;

- for the purpose referred to in point 7 above, the legitimate interests of the Data Controller, pursuant to Article 6(1)(f) of the GDPR;

- for the purposes referred to in points 4 and 5 above, the Data Subjects’ consent pursuant to Article 6(1)(a) of the GDPR.

 

4. Methods and location of processing

The processing of Data is based on the principles of fairness, lawfulness and transparency, as well as the protection of confidentiality, and is carried out using both automated methods, on electronic or magnetic media, and non-automated methods, on paper, in compliance with the confidentiality and security rules laid down by law, by the relevant regulations and by internal provisions.

Data processing takes place at the registered office of GGZ S.r.l., located in Pozzonovo (PD) – Via Tezzon, No. 6/A.

 

5. Disclosure of data

The Data processed by the Data Controller will not be disseminated, i.e. it will not be made known to unspecified parties.

The Data may be disclosed to employees of the Data Controller and to certain external parties with whom it collaborates, within the limits of the purposes set out in this Notice. It may also be disclosed to parties authorised to access it pursuant to legal provisions, regulations and legislation.

The Data may be disclosed, solely for the purposes set out above and to the extent strictly necessary, to the following categories of parties:

a) payment processing companies;

b) product shipping and delivery companies;

c) legal, tax and audit advisers providing services, assistance and advice to GGZ S.r.l.;

d) companies acting on behalf of GGZ S.r.l. as data processors under a specific contract that precisely governs the processing activities entrusted to them and their data protection obligations; an up-to-date list of data processors may be requested from the Data Controller by writing to: info@solotre.com

e) public or private bodies for the fulfilment of legal obligations;

f) service providers and partners involved in marketing and advertising, such as social media websites, advertising agencies or advertising partners.

In relation to profiling and retargeting activities, the Data may be processed by online advertising and social media platforms, including Meta Platforms and Google, as detailed in the Website’s Cookie Policy.

In relation to profiling and retargeting activities, the Data may be processed by online advertising and social media platforms based in the United States, including Meta Platforms and Google. Such transfers outside the EU take place on the basis of an adequate level of data protection, guaranteed by these parties’ adherence to the EU-U.S. Data Privacy Framework and by the adoption of standard contractual clauses approved by the European Commission, as further detailed in the Website’s Cookie Policy.

6. Transfer of data abroad

Data may be transferred to countries within the European Union and/or to third countries outside the EU for which the European Commission has recognised an adequate level of protection pursuant to Article 45 of the GDPR, or where the Data Controller has adopted appropriate safeguards, provided that Data Subjects may in any event rely on enforceable rights and effective remedies pursuant to Article 46 of the GDPR.

 

7. Mandatory or optional nature of data provision

The provision of Data is generally optional. However, in certain specific cases, failure to provide such Data may make it impossible to access certain services, preventing the Data Controller from guaranteeing access to the Website’s services or from responding to requests from Data Subjects.

The Data required in each case is indicated and marked with an asterisk (*) in the various data collection forms on the Website.

 

8. Links to other websites

This Notice applies exclusively to the website www.solotre.com and does not extend to other websites that the user may access via links; consequently, GGZ S.r.l. cannot be held liable for any Data provided by users to external parties or to any websites linked to this Website.

 

9. Data retention period

Data is retained in accordance with the following retention periods:

- Browsing data: this is retained for a maximum period of 12 months from the date of collection, unless there is a need to investigate cybercrimes or in response to requests from the judicial authorities;

- Data relating to orders and purchase transactions (including personal, contact, delivery and billing details): this is retained for 10 years from the conclusion of the contract, in accordance with the civil and tax obligations set out in current legislation;

- Registered user account data: this is retained for the entire duration of the account and, in the event of account inactivity for a period exceeding 24 months, the account is deactivated and the associated personal data is deleted or anonymised, except for the retention of any further data necessary to comply with legal obligations;

- Data processed for marketing and newsletter purposes: this is retained for up to 24 months from the date consent is given or from the user’s last active contact, unless the data subject withdraws their consent earlier;

- Data used for profiling and retargeting activities: this is retained for a maximum period of 12 months from the date of collection, unless consent is renewed;

- Data relating to support requests and contacts with Customer Service: this is retained for a maximum period of 24 months from the closure of the request, unless further retention is necessary for the management of disputes or litigation.

Once the retention periods indicated above have elapsed, personal data will in any event be deleted, anonymised or aggregated, unless further retention is necessary to comply with legal obligations or to protect the rights of the Data Controller in legal proceedings.

Data Subjects may at any time exercise the rights provided for under the GDPR, including the right to request the erasure of personal data, in accordance with the procedures set out in this Notice.

 

10. Rights of data subjects

Data Subjects have the right, at any time, to exercise the rights set out in Articles 15 et seq. of the GDPR. In particular, they have the right to:

- Access: Data Subjects have the right to obtain from the Data Controller confirmation as to whether or not Data concerning them is being processed and to obtain access to the Data and information referred to in Article 15 of the GDPR; in such cases, the Data Controller shall provide a copy of the Data being processed. Where Data Subjects request further copies, the Data Controller reserves the right to charge a reasonable fee based on administrative costs. 

- Rectification and completion (Article 16 of the GDPR): Data Subjects have the right to obtain from the Data Controller the rectification of inaccurate Data concerning them without undue delay. Taking into account the purposes of the processing, Data Subjects have the right to have incomplete Data completed, including by providing a supplementary statement.

- Erasure: Data Subjects have the right to obtain from the Data Controller the erasure of Data concerning them without undue delay, and the Data Controller is obliged to erase the Data without undue delay if one of the grounds set out in Article 17 of the GDPR applies.

- Restriction: Data Subjects have the right to obtain from the Data Controller the restriction of processing where one of the circumstances set out in Article 18 of the GDPR applies. If processing is restricted, the Data shall be processed, except for storage, only with the consent of the Data Subjects or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

- Data portability (Article 20 of the GDPR).

- Objection to processing (Article 21 of the GDPR): Data Subjects have the right to object at any time, on grounds relating to their particular situation, to the processing of Data concerning them pursuant to Article 6(1)(f) of the GDPR; in such cases, the Data Controller shall cease further processing of the Data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. Where Data is processed for direct marketing purposes, Data Subjects have the right to object at any time to the processing of Data concerning them carried out for such purposes, including profiling insofar as it is related to such direct marketing. Furthermore, where the processing of Data is based on consent (for example, for marketing purposes, sending newsletters or profiling), Data Subjects have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent given prior to withdrawal.

Consent may be withdrawn via the unsubscribe link included in every marketing communication and/or by contacting the Data Controller at the contact details provided in this Notice.

The Data Controller shall provide Data Subjects with information regarding the actions taken in response to a request submitted by the Data Subjects without undue delay and, in any event, no later than one month from receipt of the request. If Data Subjects submit the request by electronic means, the information shall be provided, where possible, by electronic means, unless otherwise indicated by the Data Subjects.

With specific reference to retargeting activities and the use of profiling cookies, Data Subjects may withdraw their consent at any time, including via the cookie management panel accessible from the Website, without affecting the lawfulness of the processing carried out prior to the withdrawal.

 

11. How to exercise your rights

Data Subjects may exercise their rights at any time by sending:  

- a registered letter with acknowledgement of receipt to GGZ S.r.l., with its registered office in Pozzonovo (PD) – Via Tezzon, No. 6/A, Tel. 0429773232;  

- an email to: info@solotre.com

12. Complaints

Data Subjects also have the right to lodge a complaint with a supervisory authority. In Italy, the competent authority is the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), whose contact details are available on the website www.garanteprivacy.it.

 

13. Cookies and other tracking tools

The Website uses technical cookies and, subject to the user’s express consent, profiling cookies and other tracking tools, including those from third parties, designed to improve the browsing experience and to offer personalised content and recommendations.

For further information on the types of cookies used, as well as to give, withhold or withdraw consent, you may consult the Cookie Policy available at the following link and manage your preferences via the dedicated panel accessible from the Website.

14. Changes to this notice 

Any future changes to this Notice will be published on the Website and, where necessary, communicated to Data Subjects by email. Data Subjects are invited to consult this Notice periodically to check for any updates or changes.

Last updated 21/10/2026