Privacy Policy

This privacy notice is provided pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by D.Lgs. 101/2018.

Data Controller

SPZ Group (P.IVA 02751490026), Viale Rimembranza, 8, 13044 Crescentino (VC) is the Data Controller for personal data collected through this website. Contact: info@spzgroup.it

Data Collected and Purposes

Personal data provided through the contact form (name, surname, email, phone number, company, message content) is processed solely for:

• Responding to information requests and commercial enquiries
• Fulfilling pre-contractual or contractual obligations

Navigation data (server logs, IP addresses) is processed to ensure the security and correct functioning of the website.

Legal Basis for Processing

Processing is based on the data subject's consent (Art. 6(1)(a) GDPR) for commercial communications, and on the Controller's legitimate interest (Art. 6(1)(f) GDPR) for website security purposes.

Data Retention

Data provided through the contact form is retained for a maximum period of 24 months from collection, unless a different retention period is required by legal or contractual obligations. Navigation data is retained for 12 months.

Recipients of Data

Data is not shared with third parties for commercial purposes. It may be disclosed to:

• Technical service providers (hosting, email) acting as Data Processors under Art. 28 GDPR
• Competent authorities when required by law

Transfers Outside the EU

Data may be transferred to third countries (e.g. USA) by technical service providers (Vercel Inc., Sanity Inc.) on the basis of Standard Contractual Clauses approved by the European Commission. The Controller ensures that such providers offer adequate safeguards under Art. 46 GDPR.

Data Subject Rights

The data subject has the right to:

• Access their personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure ("right to be forgotten", Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal

To exercise your rights, please send a written request to: info@spzgroup.it

Right to Lodge a Complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — www.garanteprivacy.it), Piazza Venezia 11, 00187 Rome, if you believe that the processing of your personal data violates the GDPR or applicable national law.

Updates

This privacy notice may be updated from time to time. The most recent version is always available on this page. Last updated: April 2026.