Privacy Policy
Version: 3 - Policy date: 07/01/2026
Information notice regarding the processing of personal data of users browsing the website, provided pursuant to Regulation (EU) 2016/679 (“GDPR”).
1. DATA CONTROLLER
KUPRAL S.P.A.
Registered office: Via Calvisano no. 30, 25024 Leno (BS), Italy
VAT No.: 00580520989
Tel. +39 030 9038794 – Fax +39 030 9038394
Email: privacy@kupral.com
2. PERSONAL DATA PROCESSED
First name, last name, place and date of birth, tax code / VAT number, residence, telephone contacts, profession and any additional personal data provided by the user.
3. PURPOSES OF PROCESSING, LEGAL BASIS AND DATA RETENTION
| Purpose of processing | Legal basis | Data retention period |
|---|---|---|
| Allow users to register and use the Services. | Performance of a contract to which the data subject is a party. | Duration of the contractual relationship and, after termination, 10 years. In the event of legal disputes, for the entire duration thereof until the expiry of the terms for filing appeals. |
| Fulfil obligations provided for by applicable national and supranational laws and regulations. | Compliance with a legal obligation. | |
| If necessary, to ascertain, exercise or defend the rights of the Data Controller in legal proceedings. | Legitimate interest. | |
| Out-of-court debt recovery. | Legitimate interest. | |
| Control of logical access to company information systems in order to ensure the security of people and assets. | Legitimate interest. | 6 months |
Once the above-mentioned retention periods have elapsed, the data will be destroyed, deleted or anonymised, in accordance with technical data erasure and backup procedures.
4. COMPULSORINESS OF DATA PROVISION
5. DATA RECIPIENTS
Personal data may be disclosed, in addition to employees and collaborators of KUPRAL S.P.A., to external parties acting as independent data controllers, such as supervisory and control authorities, as well as public or private entities legally entitled to request such data.
Data may also be processed, on behalf of the Company, by external entities appointed as data processors, who are provided with appropriate operating instructions. These entities mainly fall into the following categories:
- companies providing email delivery services;
- companies providing website maintenance services;
- companies providing support for market research activities.
6. AUTHORISED PERSONS TO PROCESS DATA
The data may be processed by employees of the Company’s departments authorised to pursue the purposes indicated above, who operate under the authority of the Data Controller and in compliance with the instructions received.
7. DATA SUBJECTS’ RIGHTS AND COMPLAINT TO THE SUPERVISORY AUTHORITY
By contacting KUPRAL S.P.A. at privacy@kupral.com, data subjects may exercise the rights provided for under Articles 15–22 of the GDPR, including the right to access their personal data, request rectification or erasure, restriction of processing, or object to processing.
Data subjects also have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which they habitually reside or work, or in the place where the alleged infringement occurred.