Website User Notice
This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data (the « General Data Protection Regulation » or « GDPR ») to individuals visiting this website (hereinafter the « Site »), which is owned and managed by TARDITO S.R.L. Its purpose is to describe the processing of personal data of users who browse the Site and/or use the features and services made available through it (e.g., newsletter service, contact forms). This notice applies only to interactions with the Site owned by TARDITO S.R.L. and not to other third-party websites that users may access via links. Users are advised to read this notice carefully before submitting any personal information and/or completing any electronic forms on the Site.
1) Identity of the Data Controller
The Data Controller is TARDITO S.R.L., with its registered and data processing office located at REGIONE LESIO 110/111 – 14050 SAN MARZANO OLIVETO (AT).
You may contact the Data Controller via email at info@tardito.com or by writing to the company address listed above.
2) Types of data processed
The personal data processed through our Site are as follows:
a. Browsing data
Information regarding the processing of browsing data and so-called « cookies » can be found in the cookie policy section.
b. Data voluntarily provided by the data subject
TARDITO S.R.L. collects personal data voluntarily provided by the User when requesting goods or services offered through the Site.
TARDITO S.R.L. will process this data in compliance with applicable regulations, assuming that the data refers to the User or to third parties who have expressly authorized the User to provide it based on a valid legal basis justifying the processing in question. In such cases, the User acts as an independent data controller, assuming all legal obligations and responsibilities, and provides a full indemnity against any disputes, claims, or demands for compensation for damages arising from processing – etc. – that may be brought against TARDITO S.R.L. by third parties whose personal data was processed through the use of the Site’s services in violation of applicable personal data protection laws.
3) Purposes of processing
Except for browsing data and any cookies, personal data provided by Users via the Website and other contact channels may be processed for the following purposes:
a. Responding to (or providing updates regarding) questions and requests for information or quotes; fulfilling requested services and any additional services resulting from the sale of products or other services provided by the Data Controller; and, where applicable, complying with the Data Controller’s legal and tax obligations.
b. Enabling Website registration and allowing the User to manage their personal account, if such features are provided by the Website.
c. Pursuing legitimate interests, such as legal defense, communicating special events related to products/services requested by the User, or direct marketing (and related processing activities, such as profiling, insofar as it is connected to such direct marketing).
d. Fostering customer loyalty, including through newsletters and marketing activities.
The User’s personal data will not be used for purposes other than those described in this Notice without first informing the User and, where necessary, obtaining their consent.
4) Legal bases for processing
The legal bases for the processing activities referred to in points 3a) and 3b) above are the necessity of performing a contract to which the User is a party, or taking pre-contractual measures at the User’s request, or complying with a legal obligation to which the Data Controller is subject. The legal basis for the processing activities referred to in point 3c) above is the necessity of pursuing the Data Controller’s legitimate interests. The legal basis for the processing operations referred to in point 3d) above is the User’s consent.
5) Data recipients
The collected data will not be disseminated and may be disclosed – in addition to parties authorized by law or secondary and/or EU regulations to access the User’s personal data – to the Data Controller’s internal personnel as well as to companies, associations, or professional firms required to provide goods or services to the Data Controller (such as, by way of example, IT or cloud service providers).
6) Data transfer
The Data Controller does not transfer the data subject’s personal data to third countries or international organizations. However, the Data Controller reserves the right to use cloud services; in such cases, service providers will be selected from among those offering adequate safeguards, as required by Art. 46 of GDPR 679/16.
7) Provision of data
Providing the data marked with an asterisk on any forms on the Site is mandatory; failure to provide such data will make it impossible for the Data Controller to fulfill the User’s request. Providing data not marked with an asterisk (or other data voluntarily transmitted by the User via other channels) is optional; however, failure to provide such data may prevent the fulfillment or communication of the request.
8) Data retention
The collected data will be retained, from the time of receipt or update, for the period strictly necessary to achieve the purposes indicated above and, in any event, in compliance with statutory timeframes. If Personal Data are processed for two different purposes, they will be retained until the purpose with the longer retention period expires; however, the Personal Data will no longer be used for the purpose for which the retention period has elapsed. Once this period has expired, the data will be deleted and/or anonymized in such a way as to make it impossible – whether directly or indirectly, or by linking to other databases – to identify the data subjects, without prejudice to the need to retain data in order to comply with obligations under applicable law even after processing operations have ceased.
9) Rights of the data subject
At any time, the User may exercise the following rights against TARDITO S.R.L. pursuant to Articles 15 and 22 of the GDPR:
a. access their Personal Data held by the Data Controller;
b. request their rectification and/or erasure (“right to be forgotten”);
c. request the restriction of processing;
d. request data portability;
e. object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Article 6, paragraph 1, letters (e) or (f), including profiling based on those provisions;
f. object at any time, where personal data are processed for direct marketing purposes, to the processing of personal data concerning them for such purposes, including profiling to the extent that it is related to such direct marketing.
The User also has the right to freely withdraw any consent previously given at any time. Processing carried out while consent was in effect, and the related legal effects, shall remain valid even after the withdrawal of consent. To exercise these rights, report issues, or request clarification regarding the processing of their personal data, the User may send an email to info@tardito.com, specifying the subject of the request. In any case, the User has the right to lodge a complaint with the competent Supervisory Authority – which in Italy is the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) – if they believe that the processing of their personal data violates applicable law.
10) Amendments and updates
This notice may be subject to amendments and/or additions, including as a result of updates to applicable regulations. The updated notice will be available for consultation on the website www.tardito.com, in the Privacy section. TARDITO S.R.L. therefore encourages the User to visit this section regularly to stay informed of the latest version of the Privacy Policy.
Customer Notice
Dear Customer,
With this document, we intend to provide you with the information required under Article 13 of Regulation (EU) 2016/679 on the protection of personal data (the « General Data Protection Regulation, » hereinafter the « GDPR »).
Identity of the Data Controller
The Data Controller is TARDITO S.R.L., represented by its pro tempore legal representative, with its registered and data processing office located at REGIONE LESIO 110/111 – 14050 SAN MARZANO OLIVETO (AT). You may contact the Data Controller via email at info@tardito.com or by writing to the company’s registered office address listed above.
The Data Controller guarantees the security, confidentiality, and protection of the personal data in its possession throughout every stage of the processing. The personal data collected are used in compliance with the principles of lawfulness, fairness, transparency, and relevance, and in accordance with the GDPR.
Purposes of processing
Your personal data will be processed for the following purposes:
a. performance of obligations arising from a contract to which you are a party, or to fulfill your specific requests prior to or following the execution of the contract;
b. organizational, administrative, accounting, and commercial management of the contract;
c. fulfillment of obligations established by law, regulations, EU legislation, or orders issued by an Authority;
d. internal statistical analysis;
e. « soft spam » (marketing communications sent to existing customers regarding similar products/services);
f. We also remind you that, pursuant to applicable regulations, TARDITO S.R.L. may use the email address details you provided when purchasing one of our services and/or products to offer you products and services similar to those you purchased. However, should you not wish to receive such communications, you may notify us at any time by sending a request to the email address info@tardito.com or by using the link included in the emails you receive. In such an event, TARDITO S.R.L. will immediately cease the aforementioned activity;
Legal basis for processing
The legal basis for processing data for the purposes indicated above consists of the performance of a contract to which you are a party, the implementation of pre-contractual measures taken at your request, compliance with a legal obligation, or the pursuit of our legitimate interests pursuant to Art. 6 of the GDPR, provided that such interests do not override the interests or fundamental rights and freedoms of the data subject. Providing data for obligations required and mandated by law is mandatory; otherwise, the provision of data is optional yet necessary; consequently, any refusal on your part would make it impossible for the Data Controller to proceed with establishing the relationship, ensuring its proper performance, or providing assistance services.
Processing methods
Your personal data is processed using both paper-based and electronic/digital/telematics tools and media, through the operations specified in Art. 4(2) of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, retrieval, comparison, use, interconnection, restriction, disclosure, erasure, and destruction of data.
Recipients of the data
Your personal data will not be disclosed or disseminated, nor will they be made known to unspecified parties in any form whatsoever, including by making them available or allowing them to be consulted. However, such data may be processed by persons acting under the authority of the Data Controller and/or by expressly authorized collaborators who have received appropriate operational instructions, always for the purposes indicated above. Without prejudice to disclosures made in compliance with legal and contractual obligations, your data may be communicated to parties entitled to access them pursuant to laws, regulations, or EU legislation, as well as – where necessary to pursue the specific purposes mentioned above and within strictly necessary limits – to parties required to provide goods, services, or performance to the Data Controller, such as (by way of example): credit institutions; insurance companies; legal, administrative, tax, or marketing consultants assisting the company in its operations; IT or cloud service providers; any agents, sub-suppliers, and/or subcontractors engaged in activities related to the performance of the Contract with the Data Controller; and subsidiaries, investee companies, or affiliates; in all cases, in compliance with the GDPR and for the pursuit of the purposes indicated above.
Data Transfer
The Data Controller does not transfer your personal data to third countries or international organizations.
However, the Controller reserves the right to use cloud services; in such cases, service providers will be selected from among those offering adequate safeguards, as required by Art. 46 of the GDPR.
Data Retention
The collected data will be retained, from the time of receipt or update, for the period strictly necessary to achieve the purposes indicated above and, in any event, in compliance with statutory timeframes.
Upon expiry of this period, the data will be deleted and/or anonymized so as to make it impossible to identify the data subjects – whether directly or indirectly, or by linking the data to other databases – subject to the requirement to retain data in order to comply with obligations under applicable law even after the cessation of processing operations. In cases where processing is based on consent, your data will be retained until you withdraw your consent, as well as for the time strictly necessary to fulfill applicable legal or regulatory obligations and to ensure the exercise of the company’s rights, including in legal proceedings. The retention period will be determined based on an assessment of the specific operation and will, in any case, adhere to the GDPR principles of necessity, purpose limitation, relevance, data minimization, and non-excessiveness.
Rights of the Data Subject
At any time, you may exercise the following rights against TARDITO S.R.L. pursuant to Articles 15 and 22 of the GDPR:
a. right of access to your personal data;
b. right to rectification or erasure;
c. right to restriction of processing;
d. right to data portability;
e. right to object.
You also have the right to freely withdraw your consent at any time. Processing carried out while consent was in effect, and the related legal consequences, shall remain valid even after any withdrawal of consent. To exercise these rights, report issues, or request clarification regarding the processing of your personal data, you may send an email to info@tardito.com, specifying the subject of your request. In any event, you have the right to lodge a complaint with the competent supervisory authority – which in Italy is the Italian Data Protection Authority (*Garante per la Protezione dei Dati Personali*) – if you believe that the processing of your personal data violates applicable law.
Amendments and Updates
This notice may be subject to amendments and/or additions, including as a result of updates to applicable regulations. The updated notice will be available for consultation on the website www.tardito.com , in the privacy section.
Supplier Notice
Dear Supplier,
With this document, we intend to provide you with the information required under Article 13 of Regulation (EU) 2016/679on the protection of personal data (the “General Data Protection Regulation,” hereinafter “GDPR”).
Identity of the Data Controller
The Data Controller is TARDITO S.R.L., represented by its pro tempore legal representative, with its registered and processing office located at REGIONE LESIO 110/111 – 14050 SAN MARZANO OLIVETO (AT). You may contact the Data Controller via email at info@tardito.com or by writing to the company’s address indicated above.
The Data Controller guarantees the security, confidentiality, and protection of the personal data in its possession throughout every stage of the processing. The personal data collected are used in compliance with the principles of lawfulness, fairness, transparency, and relevance, and in accordance with the GDPR.
Purposes of processing
Your personal data will be processed for the following purposes:
a. performance of obligations arising from a contract to which you are a party, or to fulfill your specific requests prior to or following the execution of the contract;
b. administrative and accounting tasks, such as accounting and treasury management and invoicing (e.g., verification and recording of invoices), in compliance with applicable regulations;
c. fulfillment of obligations required by law, regulations, EU legislation, or orders issued by an authority.
Your data will not be used for purposes other than those described in this notice without first informing you and, where necessary, obtaining your consent.
Legal basis for processing
The legal basis for processing data for the purposes indicated above lies in the performance of a contract to which you are a party, the implementation of pre-contractual measures taken at your request, compliance with a legal obligation, or the protection of our legitimate interests (e.g., pursuing statutory objectives or, if necessary, exercising and/or defending the Company’s rights in legal proceedings). Providing data for obligations required by law is mandatory; otherwise, providing data is optional but necessary, and any refusal on your part would make it impossible for the Data Controller to proceed with establishing the relationship, ensuring its proper execution, and providing assistance services.
Processing methods
Your personal data is processed using both paper-based and electronic/digital/telematics tools and media, through the operations indicated in Art. 4(2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, retrieval, comparison, use, interconnection, blocking, communication, erasure, and destruction of data. The Data Controller does not carry out processing activities involving automated decision-making processes regarding the data of individual customers or individuals acting in the name and on behalf of corporate customers.
Recipients of the data
Your personal data will not be disclosed or disseminated to unspecified parties in any form, including making them available for access or simple consultation.
However, such data may be processed by individuals acting under the authority of the Data Controller and/or by expressly authorized collaborators who have received appropriate operational instructions, strictly for the purposes indicated above.
Without prejudice to disclosures made in compliance with legal and contractual obligations, your data may be communicated to parties entitled to access them pursuant to laws, regulations, or EU legislation, as well as – where necessary to pursue the aforementioned purposes and within strictly necessary limits – to parties providing goods, services, or performance to the Data Controller, such as (by way of example): credit institutions and insurance companies; legal, administrative, tax, or marketing consultants assisting the company in its operations; IT or cloud service providers; agents, sub-suppliers, and/or subcontractors involved in activities related to the performance of the Contract with the Data Controller; and subsidiaries, investee companies, or affiliates; in all cases, in compliance with the GDPR and for the pursuit of the purposes indicated above.
Data Transfer
The Data Controller does not transfer your personal data to third countries or international organizations.
However, the Controller reserves the right to use cloud services; in such cases, service providers will be selected from among those offering adequate safeguards, as required by Art. 46 of GDPR 679/16.
Data Retention
Your collected data will be retained, from the time of receipt or update, for the period strictly necessary to achieve the purposes indicated above and, in any event, in compliance with statutory timeframes. Upon expiry of this period, the data will be deleted and/or anonymized so as to prevent the identification of the data subjects – whether directly or indirectly, or through linkage with other databases – subject to the need to retain data to comply with obligations under applicable law even after the cessation of processing operations.
In cases where processing is based on consent, your data will be retained until you withdraw your consent and, subsequently, for the time strictly necessary to fulfill applicable legal or regulatory obligations and, in any event, for the time necessary to ensure the exercise of the company’s rights, including in legal proceedings. The retention period will be determined based on an assessment of the specific operation and will, in any case, adhere to the GDPR principles of necessity, purpose limitation, relevance, data minimization, and non-excessiveness.
Rights of the Data Subject
At any time, you may exercise the following rights against TARDITO S.R.L. pursuant to Articles 15 and 22 of the GDPR:
a. right of access to your personal data;
b. right to rectification or erasure;
c. right to restriction of processing;
d. right to data portability;
e. right to object.
You also have the right to freely withdraw any consent previously given at any time. Processing carried out while consent was in effect, and the related legal consequences, shall remain valid even after any withdrawal of consent. To exercise these rights, report issues, or request clarification regarding the processing of your personal data, you may send an email to info@tardito.com, specifying the subject of your request. In any event, you have the right to lodge a complaint with the competent supervisory authority – which in Italy is the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) – if you believe that the processing of your personal data violates applicable law.
Amendments and Updates
This notice may be subject to amendments and/or additions, including as a result of updates to the applicable regulations. The updated notice will be available for consultation on the website www.tardito.com, in the privacy section.