Privacy Policy

INFORMATION PURSUANT TO ART. 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679

DATA CONTROLLER AND DPO

Welcome To La Spezia – Via Fontevivo 19, La Spezia – IT01308750114
info@welcomelaspezia.it

The Data Controller informs you that your data will be processed in the manner and for the purposes indicated below. Furthermore, the Data Controller commits to protecting the privacy and confidentiality of Personal Data in compliance with the principles of fairness, legality, transparency, and protection of your rights.

1) TYPES OF DATA PROCESSED

We process personal data communicated by you (name, email, company name, phone number, etc.) during spontaneous requests and data that are autonomously collected by the website.

  • Data provided by you: personal, identification, and non-sensitive data communicated by you to make requests via email, through the contact form, or by phone about our products/services.
  • Data we collect automatically: data collected using cookies or similar technologies: for more information, view the Cookie Policy .

Note: Users under the age of 16 cannot provide any personal data without the consent of their parents or guardians.

2) PURPOSES AND LEGAL BASES OF PROCESSING

We will process your personal data:

A) to fulfill our contractual obligations; provide a response to your information requests; calculate a quote you requested; execute purchase contracts for products or services; provide necessary assistance for purchased products and services.

B) to perform aggregate statistical analysis to improve our services;

C) for administrative purposes and to comply with legal obligations such as accounting, tax, or to respond to requests from judicial authorities.

D) in the case of sending resumes, exclusively for selection purposes.

3) IS PROVIDING DATA MANDATORY?

Providing your data is always optional, but failure to provide it could make it impossible to proceed with some processes, such as those strictly connected to fulfilling a contract or providing the services you requested.

4) LOCATION, METHODS OF PROCESSING, AND RETENTION PERIOD

The processing of your personal data is carried out through the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2) of the GDPR, specifically: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data.

Your personal data are stored at the Controller’s premises and are processed both in paper and electronic and/or automated formats with logic strictly related to the purposes indicated and in a way that guarantees the security and confidentiality of the data. The data you send are not saved within our website.

The Controller will process personal data for the time necessary to fulfill the above purposes and in any case for no more than 10 years from the end of the relationship for the purposes under point C and for no more than 38 months from the collection of the data for the purposes under point B.

5) ACCESS TO DATA

Your data may be made accessible for the purposes indicated in point 2:

  • to employees and collaborators of the Controller, in their capacity as persons in charge and/or internal data processors and/or system administrators;
  • to third-party companies or other entities (website providers, cloud providers, e-payment service providers, suppliers, hardware and software assistance technicians, shippers and carriers, credit institutions, professional firms, etc.) that perform activities outsourced by the Controller, in their capacity as data processors.

6) DATA TRANSFER

Data will not be disseminated, sold, or exchanged with entities other than the Controller, processors, and appointed personnel without your express and explicit consent.

7) YOUR RIGHTS

You have the right to know what personal data are being processed. In particular, you are entitled to the right of access, rectification, erasure, data portability, restriction of processing, and the right to object to the processing, if applicable.

Below is a brief explanation of your rights regarding the processing of your personal data.

  • The right of access allows you to obtain confirmation as to whether or not personal data concerning you are being processed by the Controller and, if so, to access such data and related information;
  • The right to rectification allows you to obtain the correction of inaccurate personal data concerning you without undue delay and, considering the purposes of the processing, to have incomplete personal data completed;
  • The right to erasure allows you to obtain the deletion of data concerning you without undue delay (e.g., when your personal data are no longer necessary in relation to the purposes for which they were collected), subject to the exceptions provided by applicable law (e.g., when the retention of your data is necessary to comply with legal obligations applicable to the data controller). Deletion will be carried out within the technical times provided;
  • The right to data portability allows you, in certain circumstances provided by applicable law, to receive in a structured, commonly used, and machine-readable format the personal data concerning you that you have provided. You may transmit these data to another data controller, provided that this right can be recognized under applicable law and except where this may result in harm to the rights and freedoms of others;
  • The right to restriction of processing allows you, in certain circumstances provided by applicable law, to obtain the restriction of the processing of your personal data. In such cases, the Controller may continue to process your data only in certain cases, such as for the exercise of the right of defense or to protect the rights of another natural or legal person;
  • The right to object to processing allows you, in certain circumstances provided by applicable law, to object to the processing of your personal data unless there are legitimate prevailing reasons, rights, or freedoms that allow the Controller to continue the processing;

For more information on the processing of your personal data or to exercise your rights, please contact us.

8) CHANGES TO THE INFORMATION

This Information may be subject to changes. Therefore, it is advisable to regularly check this Information and refer to the most updated version.

Last updated: June 2025