PRIVACY POLICY AND COOKIE POLICY

Last updated: 18 September 2026

1. DATA CONTROLLER

This Privacy Policy describes how personal data is processed through the website:

https://autofficinapasiniesoprani.com

The Data Controller is:

Autofficina Pasini e Soprani s.n.c.

VAT Number: 01471790335

Registered office:
Via Mentovati, 9 (Loc. Orsina)
29122 Piacenza (PC), Italy

Telephone: +39 0523 618466

Email: info@autofficinapasiniesoprani.com

The Data Controller processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.

This Privacy Policy applies only to this website. It does not apply to third-party websites or online services that may be accessed through links on this website.

2. PERSONAL DATA PROCESSED

2.1 Browsing and technical data

When users access the website, the technical systems and hosting infrastructure used to operate the website may process information necessary for the proper functioning and security of the website.

Such information may include:

IP address;
browser type and version;
operating system and device information;
date and time of access;
requested pages or resources;
technical information relating to the connection;
server response status;
technical and security logs.

This information is processed primarily to:

ensure the correct operation of the website;
maintain website and server security;
prevent abuse, fraudulent activity or malicious activity;
diagnose technical problems;
maintain and manage the website.

Where permitted by applicable law, the legal basis for this processing is the legitimate interest of the Data Controller in operating, maintaining and securing the website.

2.2 Data voluntarily provided by users

If users contact the Data Controller by email, telephone, contact form or WhatsApp, the Data Controller may process the personal data contained in the communication.

This may include:

name and surname;
email address;
telephone number;
information concerning the vehicle;
company information, where applicable;
information contained in the user’s request;
any other information voluntarily provided by the user.

Such data is processed in order to respond to requests, provide information, prepare quotations where requested, arrange appointments and provide the services requested by the user.

The provision of personal data is generally voluntary. However, where certain information is necessary to respond to a request, failure to provide it may make it impossible to provide the requested response or service.

The legal basis for this processing is, depending on the circumstances, the performance of pre-contractual measures taken at the request of the data subject or the performance of a contract.

3. PURPOSES OF PROCESSING

Personal data may be processed for the following purposes:

operation and maintenance of the website;
website and server security;
responding to requests submitted by users;
responding to requests for quotations;
arranging appointments;
communicating with users concerning the services of Autofficina Pasini e Soprani;
providing information requested by users;
managing contractual and pre-contractual relationships;
complying with legal and regulatory obligations;
protecting the rights and legitimate interests of the Data Controller;
preventing fraudulent, abusive or unlawful activities.

Personal data will not be processed for purposes incompatible with those described in this Privacy Policy.

4. LEGAL BASES FOR PROCESSING

Depending on the specific processing activity, personal data may be processed on the following legal bases.

Performance of a contract or pre-contractual measures

Where processing is necessary to respond to a request made by the user, prepare a quotation, arrange an appointment or take steps at the user’s request before entering into a contract.

Legal obligation

Where processing is necessary to comply with a legal or regulatory obligation applicable to the Data Controller.

Legitimate interests

Where processing is necessary for the legitimate interests of the Data Controller, including website operation, technical maintenance, website and server security, prevention of abuse and protection of legal rights.

Consent

Consent is used only where it is required by applicable law for a specific processing activity.

Where processing is based on consent, the user may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. PROCESSING METHODS AND SECURITY

Personal data is processed using electronic, digital and, where necessary, paper-based systems.

The Data Controller adopts appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access and other unlawful forms of processing.

Access to personal data is limited to persons authorised to process such data and to service providers who process personal data on behalf of the Data Controller, where applicable.

6. DATA RECIPIENTS

Personal data may be accessed by or communicated, where necessary, to:

authorised employees and collaborators;
IT and website maintenance providers;
hosting and infrastructure providers;
technical and security service providers;
professional advisers and consultants;
public authorities where required by law;
other service providers necessary for the management of the website or the provision of requested services.

The Data Controller does not publicly disclose personal data.

7. WEBSITE HOSTING

The website is hosted using services provided by OVHcloud.

The hosting infrastructure may process technical information necessary for the operation and security of the website, including IP addresses, connection data, server logs and related technical information.

The processing carried out by the hosting provider is governed by the applicable contractual arrangements and privacy documentation.

8. THIRD-PARTY SERVICES AND LINKS

The website contains links to or integrations with certain third-party services, including:

Facebook, through an external link to the relevant social network;
WhatsApp, through a contact link or button;
Google, through a link (map) or button;
email contact functionality.

Third-party services are operated by their respective providers and are subject to their own terms and privacy policies.

Where a third-party service is accessed through an external link, the processing carried out after the user leaves this website is governed by the privacy policy of the relevant third-party provider.

The Data Controller does not control the processing carried out by third-party providers on their own platforms.

9. FACEBOOK

The website provides a link to Facebook.

The link itself does not install Facebook cookies on the user’s device merely because the link is displayed on the website.

When the user clicks the link and accesses Facebook, the processing of personal data is governed by Meta’s applicable privacy policy and terms.

The Data Controller does not control the processing carried out by Meta after the user accesses Facebook.

9.1 WHATSAPP

The website provides a link or contact button that allows users to contact Autofficina Pasini e Soprani through WhatsApp.

The WhatsApp service is operated by Meta Platforms.

The WhatsApp link does not by itself install WhatsApp cookies on the user’s device merely because the link is displayed on this website.

When the user chooses to contact the Data Controller through WhatsApp, the user accesses or interacts with the WhatsApp service and any subsequent processing of personal data is governed by WhatsApp’s and Meta’s applicable privacy policies and terms.

The Data Controller does not control the processing carried out by WhatsApp or Meta after the user accesses that service.

9.2 GOOGLE

The website provides a link that allows users to view Autofficina Pasini e Soprani through Google Maps.

The Google Maps service is operated by Google INC.

The Google Maps link does not by itself install Google Maps cookies on the user’s device merely because the link is displayed on this website.

When the user chooses to contact the Data Controller through Google Maps, the user accesses or interacts with the Google service and any subsequent processing of personal data is governed by Google Maps and Google applicable privacy policies and terms.

The Data Controller does not control the processing carried out by Google Maps or Google after the user accesses that service.

9.3 EMAIL CONTACT

The website provides an email address through which users may contact the Data Controller.

If a user sends an email, the Data Controller processes the email address and any personal information contained in the message for the purpose of responding to the request and managing the communication.

The information voluntarily provided by the user may also be used where necessary to prepare a quotation, arrange an appointment or provide the requested service.

10. COOKIES

Cookies are small text files or similar technologies that may be stored on a user’s device when visiting a website.

Based on the current technical configuration of the website, the website uses a strictly necessary technical cookie associated with WordPress:

Cookie: wpEmojiSettingsSupports
Provider/domain: autofficinapasiniesoprani.com
Purpose: technical functionality relating to WordPress emoji support and browser compatibility
Duration: session
Category: strictly necessary / technical

This cookie is used for technical purposes and is not used for advertising or user profiling.

10.1 Technical and necessary cookies

Strictly necessary technical cookies are used only to provide or support functions necessary for the operation of the website.

Under applicable Italian data protection rules, such cookies do not require the user’s prior consent.

10.2 Analytics and advertising cookies

The website does not currently use advertising cookies or analytics cookies for tracking or profiling users.

The website does not use Google Analytics, Meta Pixel or other advertising or behavioural profiling technologies.

11. COOKIE CONSENT

Since the website currently uses only strictly necessary technical cookies, no prior consent is required for the use of those cookies.

Accordingly, the website does not require a consent mechanism for non-essential cookies as long as its technical configuration remains limited to strictly necessary cookies and no additional tracking technologies are introduced.

If the website is subsequently modified to introduce analytics, advertising, profiling or other non-essential tracking technologies for which consent is required, the Data Controller will update this Privacy Policy and implement the appropriate consent mechanism before activating such technologies, where required by law.

12. DATA TRANSFERS OUTSIDE THE EEA

Certain third-party providers may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, the Data Controller will rely on an appropriate legal mechanism under the GDPR, where applicable, such as an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

The applicable safeguards may vary depending on the provider and the specific service involved.

13. DATA RETENTION

Personal data is retained only for as long as necessary for the purposes for which it was collected and for any additional period required by applicable law.

In particular:

data contained in requests for information is generally retained for the time necessary to manage and respond to the request;
data relating to contractual or commercial relationships is retained for the duration of the relationship and for any additional period required by law;
accounting and tax documentation is retained for the periods required by applicable legislation;
technical and security logs may be retained for the period necessary to ensure the security and proper operation of the website and its infrastructure.

Once the applicable retention period has expired, personal data will be deleted or anonymised, unless further retention is required or permitted by law.

14. RIGHTS OF DATA SUBJECTS

Under Articles 15 to 22 of the GDPR, data subjects may have the right to:

obtain confirmation as to whether personal data concerning them is being processed;
obtain access to their personal data;
obtain information concerning the purposes of processing;
obtain information concerning the categories of personal data processed;
obtain information concerning recipients or categories of recipients;
request rectification of inaccurate personal data;
request completion of incomplete personal data;
request erasure of personal data where the applicable conditions are met;
request restriction of processing where the applicable conditions are met;
receive personal data in a structured, commonly used and machine-readable format where the right to data portability applies;
object to processing where the applicable conditions are met;
withdraw consent where processing is based on consent;
lodge a complaint with the competent supervisory authority.

The exercise of these rights is subject to the conditions and limitations established by applicable law.

15. HOW TO EXERCISE YOUR RIGHTS

Requests concerning the processing of personal data or the exercise of data subject rights may be sent to:

Autofficina Pasini e Soprani s.n.c.

Via Mentovati, 9 (Loc. Orsina)
29122 Piacenza (PC)
Italy

Email: info@autofficinapasiniesoprani.com

Telephone: +39 0523 618466

The Data Controller will handle requests within the time limits established by applicable law.

16. RIGHT TO LODGE A COMPLAINT

If a user believes that their personal data has been processed in violation of applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.

In Italy, the competent supervisory authority is:

Garante per la protezione dei dati personali

Further information and contact details are available on the official website of the Italian Data Protection Authority.

17. IMAGES, PHOTOGRAPHS, LOGOS, TRADEMARKS AND THIRD-PARTY CONTENT

The website may contain photographs, images, texts, logos, trademarks, trade names, product names, vehicle manufacturer names and other visual or editorial materials.

Unless otherwise stated, photographs and original materials created by Autofficina Pasini e Soprani or supplied to the company for use on the website are used on the basis of the rights or permissions available to the company.

Third-party trademarks, logos, trade names, product names and other distinctive signs remain the property of their respective owners.

Their presence on this website is intended for informational, descriptive, identification or commercial reference purposes and does not, unless expressly stated otherwise, imply ownership, sponsorship, endorsement, affiliation, partnership, agency or representation.

If a rights holder believes that an image, logo, trademark or other material published on this website has been used without appropriate authorisation or otherwise infringes their rights, they may contact the Data Controller using the contact details provided in this Privacy Policy.

18. COPYRIGHT AND WEBSITE CONTENT

Unless otherwise stated, original texts, photographs, graphics and other content created specifically for this website may not be reproduced, copied, modified, distributed or commercially exploited without the prior written permission of the relevant rights holder.

Third-party materials remain subject to the intellectual property rights of their respective owners.

19. THIRD-PARTY LINKS

This website may contain links to external websites, social networks and online services, including Facebook and WhatsApp.

The Data Controller has no control over and assumes no responsibility for:

the content of third-party websites;
their privacy policies;
their cookie policies;
their security measures;
their processing of personal data;
their availability or functionality.

Users are encouraged to review the privacy policies and terms of third-party services before using those services or providing personal information.

20. CHANGES TO THIS PRIVACY POLICY

The Data Controller may update this Privacy Policy from time to time to reflect:

changes in applicable legislation;
changes to the website;
changes to the services used by the website;
changes to the processing of personal data;
technical or organisational changes.

The latest version will always be published on this page.

Last updated: 18 September 2026