PRIVACY POLICY AND COOKIE POLICY

Last updated: 14 August 2026

1. DATA CONTROLLER

This Privacy Policy describes how personal data is processed through the website:

https://autofficinapasiniesoprani.com

The Data Controller is:

Autofficina Pasini e Soprani s.n.c.

VAT Number: 01471790335

Registered office:
Via Mentovati, 9 (Loc. Orsina)
29122 Piacenza (PC), Italy

Telephone: +39 0523 618466

Email:info@autofficinapasiniesoprani.com

The Data Controller is responsible for the processing of personal data collected through this website in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.

This Privacy Policy applies only to this website and does not apply to third-party websites or online services that may be accessible through links on this website.

2. TYPES OF PERSONAL DATA PROCESSED

2.1 Browsing and Technical Data

When users visit this website, the IT systems and software used to operate the website may automatically collect certain technical information.

Such information may include:

IP address;
browser type and version;
operating system;
device information;
date and time of access;
requested pages or resources;
referring page;
technical information relating to the connection;
server response status and other technical information.

This information is generally processed to:

ensure the correct operation of the website;
maintain website security;
prevent abuse or malicious activity;
diagnose technical problems;
maintain and improve the website.

Where permitted by applicable law, the legal basis for this processing is the legitimate interest of the Data Controller in operating and securing its website.

3. PERSONAL DATA VOLUNTARILY PROVIDED BY THE USER

If users voluntarily contact the Data Controller by email, telephone, contact form or other communication channel made available on the website, the Data Controller may process the personal data contained in the communication.

This may include:

name and surname;
email address;
telephone number;
vehicle-related information;
company information;
information contained in the user’s request;
any other information voluntarily provided by the user.

Such data is processed exclusively for the purpose of responding to the user’s request, providing information, preparing quotations where requested, arranging appointments or providing the requested services.

The provision of data is generally voluntary. However, failure to provide information that is necessary to respond to a request may make it impossible to provide the requested service.

The legal basis for this processing is, where applicable, the performance of pre-contractual measures taken at the request of the data subject or the performance of a contract.

4. PURPOSES OF PROCESSING

Personal data may be processed for the following purposes:

to operate and maintain the website;
to respond to requests for information;
to respond to requests for quotations;
to communicate with users regarding services offered by the workshop;
to manage appointments or requests submitted by users;
to provide information concerning the services offered by Autofficina Pasini e Soprani;
to comply with legal and regulatory obligations;
to protect the rights and legitimate interests of the Data Controller;
to ensure website security and prevent fraudulent, abusive or unlawful activities;
to manage and display certain third-party services incorporated into or linked from the website;
where applicable, to obtain anonymous or aggregated statistical information concerning website usage.

Personal data will not be processed for purposes incompatible with those described in this Privacy Policy.

5. LEGAL BASES FOR PROCESSING

Depending on the specific processing activity, personal data may be processed on the following legal bases:

Performance of a contract or pre-contractual measures

Where processing is necessary to respond to a request made by the user, prepare a quotation, arrange a service or otherwise take steps at the user’s request before entering into a contract.

Legal obligation

Where processing is necessary to comply with a legal or regulatory obligation applicable to the Data Controller.

Legitimate interests

Where processing is necessary for the legitimate interests of the Data Controller, including website security, prevention of abuse, technical maintenance, protection of legal rights and proper operation of the website.

Consent

Where applicable law requires the user’s consent, including for certain non-essential cookies, tracking technologies or third-party services.

Where processing is based on consent, the user may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6. DATA PROCESSING METHODS AND SECURITY

Personal data is processed using electronic, digital and, where necessary, paper-based systems.

The Data Controller adopts appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access or other unlawful processing.

Access to personal data is limited to persons who are authorised to process such data or to service providers who process data on behalf of the Data Controller where applicable.

7. DATA RECIPIENTS

Personal data may be accessed by or communicated, where necessary, to:

authorised employees and collaborators;
IT service providers;
website maintenance providers;
hosting providers;
technical and security service providers;
professional advisers and consultants;
public authorities where required by law;
other service providers necessary for the proper operation of the website or the provision of requested services.

The Data Controller does not publicly disclose personal data.

8. WEBSITE HOSTING

The website is hosted using services provided by OVHcloud.

Hosting and infrastructure services may involve the processing of technical data, including IP addresses, connection data, server logs and other information necessary for the operation and security of the website.

Depending on the specific service and contractual arrangement, OVHcloud may process personal data on behalf of the Data Controller or act as an independent data controller for certain processing activities.

The processing carried out by OVHcloud is governed by its applicable contractual terms and privacy documentation.

9. THIRD-PARTY SERVICES

The website may use or provide access to certain third-party services.

These services may include:

Google services;
Google Maps;
Google Web Fonts;
Google reCAPTCHA;
Microsoft/Bing Maps;
Facebook/Meta;
WhatsApp/Meta;
YouTube;
Vimeo;
OVHcloud.

The actual processing carried out by each provider depends on the specific functionality and technical configuration used on the website.

Where a third-party service requires consent under applicable law, the service will be activated only after the relevant consent has been obtained.

10. GOOGLE SERVICES

The website may use certain services provided by Google, including Google Maps, Google Web Fonts and Google reCAPTCHA.

Depending on how these services are technically integrated, Google may receive technical information such as IP address, browser information, device information and information relating to the user’s interaction with the relevant service.

Where a Google service requires consent under applicable law, it will be blocked until the user provides the relevant consent.

Google may process information in accordance with its own privacy policies and applicable terms.

Users are encouraged to consult Google’s privacy documentation for further information about its processing activities.

11. GOOGLE MAPS

The website may use Google Maps to display the location of Autofficina Pasini e Soprani and provide map-related functionality.

Depending on the technical implementation, Google Maps may process technical information concerning the user’s device and connection.

Where required by applicable law, Google Maps will only be loaded after the user’s consent.

12. GOOGLE reCAPTCHA

The website may use Google reCAPTCHA to protect forms and other website functions against spam, automated submissions and abusive activity.

reCAPTCHA may collect technical information relating to the user’s device, browser and interaction with the website.

Where applicable law requires consent for the relevant processing, reCAPTCHA will be activated only after the user’s consent.

13. GOOGLE WEB FONTS

The website may use Google Web Fonts to display fonts correctly.

Depending on the technical configuration, the browser may establish a connection with Google’s servers to retrieve the required font resources.

Such a connection may involve the transmission of technical information, including the user’s IP address.

Where required by applicable law, Google Web Fonts will be loaded only after the relevant consent has been obtained.

14. YOUTUBE AND VIMEO

The website may contain videos or embedded video content provided through third-party platforms such as YouTube and Vimeo.

When an embedded video is loaded or interacted with, the relevant provider may process technical information concerning the user’s device and interaction with the video.

Where required by applicable law, embedded video content that involves non-essential tracking technologies will not be activated until the user has provided the relevant consent.

Once a user accesses or interacts with a third-party video service, the processing of personal data is also governed by the privacy policy of the relevant provider.

15. FACEBOOK AND META

The website may contain links or other references to Facebook or other services operated by Meta Platforms.

If the website only provides a link to Facebook, clicking the link will take the user to an external service.

The processing of personal data carried out after leaving this website is governed by Meta’s own privacy policy and terms.

Where Meta technologies are directly embedded into the website and involve cookies or tracking technologies requiring consent, they will be managed in accordance with applicable consent requirements.

16. WHATSAPP

The website may provide a link or contact button allowing users to contact Autofficina Pasini e Soprani through WhatsApp.

WhatsApp is operated by Meta Platforms.

When a user chooses to contact the Data Controller through WhatsApp, the user is redirected to or interacts with the WhatsApp service.

Any subsequent processing of personal data by WhatsApp or Meta is governed by their applicable privacy policy and terms.

The Data Controller does not control the processing activities carried out by WhatsApp after the user accesses that service.

17. BING / MICROSOFT MAPS

Where applicable, the website may use Microsoft/Bing Maps to provide map-related functionality.

Microsoft may process technical information relating to the user’s device, connection and interaction with the map.

Where required by applicable law, such functionality will only be activated after the user’s consent.

18. COOKIES

Cookies are small text files or similar technologies that may be stored on the user’s device when visiting a website.

The website may use the following categories of cookies and similar technologies.

18.1 Strictly Necessary Cookies

These cookies are necessary for the correct operation and security of the website.

They may be used, for example, to:

maintain technical functionality;
remember cookie preferences;
provide security features;
enable essential website functions.

Where permitted by applicable law, strictly necessary cookies do not require the user’s prior consent.

18.2 Third-Party Cookies and Technologies

The website may use third-party technologies associated with services such as:

Google;
Google Maps;
Google reCAPTCHA;
Google Web Fonts;
YouTube;
Vimeo;
Microsoft/Bing Maps;
other third-party services incorporated into the website.

The precise cookies and technologies used may depend on the current technical configuration of the website.

19. COOKIE CONSENT AND USER PREFERENCES

Where consent is required for cookies or other tracking technologies, the website provides users with a mechanism through which they can manage their preferences.

Users may be able, depending on the available configuration:

accept non-essential cookies;
reject non-essential cookies;
manage individual categories or third-party services;
change or withdraw their consent at a later time.

The website should not interpret mere browsing, scrolling or inactivity as consent where applicable law requires an affirmative consent action.

The Italian Data Protection Authority’s guidelines provide that non-technical cookies and tracking technologies requiring consent should not be activated before valid consent has been obtained.

Users should be able to access the cookie preference mechanism again after their initial choice in order to modify or withdraw their preferences.

20. DATA TRANSFERS OUTSIDE THE EEA

Some third-party providers used by the website may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, the Data Controller will rely on an appropriate legal mechanism provided by the GDPR, where applicable, including an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

The applicable safeguards may vary depending on the service provider and the technical configuration of the relevant service.

21. DATA RETENTION

Personal data is retained only for as long as necessary for the purposes for which it was collected.

Different retention periods may apply depending on the type of data and the applicable legal requirements.

In particular:

data relating to information requests will generally be retained for the time necessary to respond to and manage the request;
data relating to contractual or commercial relationships will be retained for the duration of the relationship and for any additional period required by law;
accounting and tax records will be retained for the periods required by applicable legislation;
technical and security data may be retained for the period necessary to ensure the security and proper operation of the website;
consent records may be retained for the period necessary to demonstrate compliance with applicable legal requirements.

Once the applicable retention period has expired, personal data will be deleted or anonymised, unless further retention is required or permitted by law.

22. RIGHTS OF DATA SUBJECTS

Under Articles 15 to 22 of the GDPR, data subjects may have the right to:

obtain confirmation as to whether personal data concerning them is being processed;
obtain access to their personal data;
obtain information about the purposes of processing;
obtain information about the categories of personal data processed;
obtain information about the recipients or categories of recipients;
request the rectification of inaccurate data;
request the completion of incomplete data;
request the erasure of personal data where the applicable conditions are met;
request restriction of processing where the applicable conditions are met;
receive their personal data in a structured, commonly used and machine-readable format where the right to data portability applies;
object to processing where the applicable conditions are met;
withdraw consent where processing is based on consent;
lodge a complaint with the competent data protection authority.

The exercise of these rights is subject to the conditions and limitations established by applicable law.

23. HOW TO EXERCISE YOUR RIGHTS

Requests concerning the processing of personal data and the exercise of data subject rights may be sent to:

Autofficina Pasini e Soprani s.n.c.

Via Mentovati, 9 (Loc. Orsina)
29122 Piacenza (PC)
Italy

Email:info@autofficinapasiniesoprani.com

Telephone: +39 0523 618466

The Data Controller will handle requests within the time limits established by applicable law.

24. RIGHT TO LODGE A COMPLAINT

If a user believes that their personal data has been processed in violation of applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.

In Italy, the competent authority is:

Garante per la protezione dei dati personali

The official website of the Italian Data Protection Authority is available at:

Garante per la protezione dei dati personali

25. IMAGES, PHOTOGRAPHS, LOGOS, TRADEMARKS AND THIRD-PARTY CONTENT

The website contains photographs, images, texts and other visual or editorial materials.

Unless otherwise stated, photographs and original materials created specifically by Autofficina Pasini e Soprani or supplied to the company for use on the website are used on the basis of the rights or permissions available to the company.

The website may also display logos, trademarks, trade names, company names, product names, vehicle manufacturer names and other distinctive signs belonging to third parties.

All third-party trademarks, logos, trade names, product names and other distinctive signs remain the property of their respective owners.

Their presence on this website is intended for informational, descriptive, identification or commercial reference purposes and does not, unless expressly stated otherwise, imply:

ownership by Autofficina Pasini e Soprani;
sponsorship;
endorsement;
affiliation;
partnership;
agency;
representation;
or any other commercial relationship with the respective trademark or rights holder.

The use of third-party trademarks, logos and names is not intended to infringe any intellectual property rights.

All rights relating to third-party trademarks, logos, photographs, product names, trade names and other protected materials remain with their respective owners.

If a rights holder believes that an image, logo, trademark or other material published on this website has been used without the appropriate authorisation or otherwise infringes their rights, they may contact Autofficina Pasini e Soprani using the contact details provided in this Privacy Policy.

The Data Controller will review any legitimate request and, where appropriate, take the necessary corrective action.

26. COPYRIGHT AND WEBSITE CONTENT

Unless otherwise stated, the original text, photographs, graphics and other content created specifically for this website may not be reproduced, copied, modified, distributed or commercially exploited without the prior written permission of the relevant rights holder.

Third-party materials remain subject to the intellectual property rights of their respective owners.

27. THIRD-PARTY LINKS

This website may contain links to external websites, social networks and other online services.

The Data Controller has no control over and assumes no responsibility for:

the content of third-party websites;
their privacy policies;
their cookie policies;
their security measures;
their processing of personal data;
their availability or functionality.

Users are encouraged to review the privacy and cookie policies of third-party websites before using their services or providing personal information.

28. CHANGES TO THIS PRIVACY POLICY

The Data Controller may update this Privacy Policy from time to time to reflect:

changes in applicable legislation;
changes to the website;
changes to the services used by the website;
changes to the processing of personal data;
technical or organisational changes.

The latest version will always be published on this page.

Last updated: 14 August 2026