PrivacyPrivacy Policy
Data Controller
The Data Controller is Etna Eko S.r.l., registered office at C.da Difesa S.P. 4/II Km. 2,800 — 95032 Belpasso (CT), VAT 04932400874. Contact: info@etnaeko.it — PEC: etnaekosrl@impresapec.it.
Categories of personal data
The website may process: technical browsing data (IP address, server logs, browser and device information, session and language preference cookies — please refer to the Cookie Policy for details), identification and contact data provided voluntarily through forms (first/last name, email, phone), message content, and professional information sent for job applications or operational requests.
Purposes and legal basis (Art. 6 GDPR)
Personal data is processed to: (1) answer requests and manage pre-contractual or contractual relations — basis: performance of contract or pre-contractual measures; (2) comply with legal and regulatory obligations — basis: legal obligation; (3) protect the Controller's rights in or out of court — basis: legitimate interests; (4) ensure website security, integrity and operational continuity — basis: legitimate interests.
Processing methods
Processing is carried out using electronic tools and organizational measures appropriate to the risk, in compliance with GDPR principles: lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity and confidentiality (Regulation (EU) 2016/679).
Data retention
Data is retained only as long as strictly necessary: contact requests for the time needed for management and follow-up; data subject to legal obligations for the periods required by applicable law; server technical logs for periods proportionate to security and audit needs (generally no longer than 12 months).
Recipients and processors (Art. 28 GDPR)
Data may be processed by authorized staff and by service providers acting on behalf of the Controller: hosting/infrastructure providers, email delivery provider, content management platform provider. These parties are appointed as Data Processors under Art. 28 GDPR where applicable. No analytics, advertising or profiling services are used. Data is not publicly disclosed or sold to third parties.
Transfers outside the EEA (Arts. 44 et seq. GDPR)
If any provider involves transfers to countries outside the European Economic Area, such transfers are carried out in compliance with Arts. 44 et seq. GDPR through adequacy decisions, Standard Contractual Clauses or other legally valid safeguards.
Data subject rights (Arts. 15–22 GDPR)
You may exercise rights under Arts. 15–22 GDPR: access, rectification, erasure (right to be forgotten), restriction of processing, objection, portability (where applicable), and withdrawal of consent at any time without affecting the lawfulness of prior processing. Requests can be sent to info@etnaeko.it.
Complaint to supervisory authority
You have the right to lodge a complaint with the competent supervisory authority and/or seek judicial remedy as provided by applicable data protection law.
Whether providing data is mandatory
Providing data requested in forms is optional, but failure to provide it may prevent us from handling your request. No automated decision-making, including profiling under Art. 22 GDPR, is carried out unless specifically stated otherwise.
Changes to this notice
The Controller reserves the right to update this notice in the event of regulatory changes or changes in processing methods. The updated version will be published on this page with the revision date.