Privacy policy
This notice explains how Filomatica Maros S.r.l. processes the personal data of those who visit this website or contact us, pursuant to Arts. 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree No. 196/2003 (Italian Personal Data Protection Code), as amended by Legislative Decree No. 101/2018.
Last updated: 26 October 2026
01Data controller
Filomatica Maros S.r.l.
Via Molinello 35, 21048 Solbiate Arno (VA)
VAT no. and tax code 00227640125
PEC: [email protected]
Phone: +39 0331 994025
For any question about this notice or about your data, you can write to us at the certified email (PEC) address shown above.
02What data we process
- Browsing data. As with any website, the systems that run the site record certain technical data: IP address, browser type and operating system, date and time of the request, the page requested and the outcome of the request. We do not use this data to identify you.
- Data you provide to us. If you contact us through the website form, by telephone, PEC (certified email) or email (for example to request a quotation), we process the data you give us: name, company, contact details, the content of your request and any attached files, such as technical drawings, together with the date and time of sending and your acknowledgement of this notice.
- Form draft. While you fill in the contact form, what you type is saved only in your browser (local storage), so you do not lose it if you close the page. The draft stays on your device, is not sent to us until you press “Send request”, and is deleted after sending or in any case after 30 days.
- Cookies. The site uses only technical cookies; full details are in the cookie policy.
We do not collect special categories of personal data (Art. 9 GDPR) or data relating to minors.
03Why we process it and on what legal basis
- Operating the site and protecting it from misuse and cyber attacks: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
- Responding to your requests for information or quotations: performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
- Complying with legal obligations, for example tax and accounting obligations, if your request leads to a business relationship: legal obligation (Art. 6(1)(c) GDPR).
- Defending our rights in legal proceedings, where necessary: legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for profiling or for automated decision-making, and we do not use it to send you marketing communications without your consent.
04Are you required to provide your data?
Browsing data is necessary for the technical operation of the site. Providing your contact details is optional, but without them we cannot respond to your request.
05How we process it and for how long
We process data using electronic and paper-based means, adopting appropriate technical and organisational measures to protect it against unauthorised access, loss or disclosure (Art. 32 GDPR).
Requests sent through the form and the attached drawings are kept in private storage that is not accessible from the web: the drawings can only be downloaded through signed links reserved for our staff. Communications between your browser, the site and our suppliers are encrypted (HTTPS).
- Browsing data: for the time strictly necessary to ensure the security of the site, unless it is needed to establish a criminal offence.
- Requests sent through the form and attached drawings: for 12 months from sending, after which they are automatically deleted from all our archives.
- If your request leads to a business relationship: the necessary data and documents (for example the quotation and the drawings of the part ordered) are kept for the duration of the relationship and then for 10 years, as required by civil-law and tax obligations.
06Who we disclose it to
- Our authorised staff, who process it in accordance with our instructions.
- The suppliers who support us, appointed as data processors pursuant to Art. 28 GDPR:
- Vercel Inc. (United States), which hosts the site and processes browsing data and the requests sent through the form;
- Cloudflare, Inc., which stores requests and attached drawings in its R2 service, in storage configured to keep the data in the European Union;
- Resend (United States), which sends the notification emails to us and the confirmation email to you: the emails contain the details of the request and, in the one addressed to us, links to the drawings, not the drawings themselves;
- the provider of the server on which we keep an archive copy of the requests;
- our email and IT support providers.
- Authorities and public administrations, where required by law.
Your data is not disseminated or sold to third parties.
07Transfers outside the European Union
Some of our suppliers are based in the United States: Vercel, which hosts the site, and Resend, which sends the emails; Cloudflare is also a US company, although the files are stored in the European Union. For this reason browsing data and the data you enter in the form may also be processed outside the European Economic Area. Attached drawings remain stored in the European Union: only a download link is added to the emails.
These transfers take place with the safeguards provided for by Arts. 44–49 GDPR: the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework for the suppliers that participate in it and, in any case, the standard contractual clauses approved by the Commission, included in the data processing agreements we have entered into with them. You can ask us for a copy of these safeguards by writing to the PEC address shown above.
The site’s fonts are served from the site itself: browsing sends no request to services such as Google Fonts.
08Your rights
At any time you can ask us to:
- access your data and receive a copy of it (Art. 15);
- rectify or complete it (Art. 16);
- erase it (Art. 17);
- restrict its processing (Art. 18);
- receive it in a structured format and transmit it to another controller (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw any consent given, without affecting the lawfulness of processing carried out before.
To exercise these rights, write to [email protected] or send a registered letter to our registered office. We will reply within one month.
If you believe that the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the country where you live or work.
09Changes to this notice
We may update this notice, for example if the services used by the site change. The date of the last update is shown at the top of the page.