Request a quote

Privacy policy

Last updated

1.1 Data controller

Lamar Marmi srl — Zona Artigianale, Via per Treglio 321/i, 66034 Lanciano (CH), Italy. VAT no. and tax code 02761840699. Email: info@lamarmarmi.it. PEC (certified email): lamarmarmisrl@pec.it. Phone: +39 0872 45178. The Controller has not appointed a Data Protection Officer (DPO), as the conditions set out in art. 37 GDPR do not apply.

1.2 Types of data processed

  • Data provided voluntarily through the contact form: first name and surname, email, phone; optionally studio/company, country of the job site, project type, message and attachments (drawings, floor plans, photographs). Attachments must not contain data of third parties or special categories of data (art. 9 GDPR); otherwise they will be deleted.
  • Direct contact data: when users write to info@lamarmarmi.it or phone the company, the data provided (name, number, content of the messages) are processed in order to respond to the request.
  • Browsing data: IP address, browser type, operating system, pages visited, time, referrer. These are collected by the hosting systems for the technical operation and security of the site and kept for the time strictly necessary (security logs: 30 days at most).
  • Cookies and tracking tools: see the Cookie policy (§2). Statistical cookies are set only with prior consent. The site does not use marketing or profiling cookies.
Purpose Legal basis Data
Responding to requests for information, quotes and projects Performance of pre-contractual measures taken at the request of the data subject (art. 6.1.b GDPR) Form data, direct contacts
Management of the contractual relationship and administrative, accounting and tax obligations Contract (art. 6.1.b) and legal obligation (art. 6.1.c) Identification and contact data
Site security, prevention of abuse and spam, defence of rights Legitimate interest of the Controller (art. 6.1.f) Browsing data, honeypot, form timestamp
Aggregate statistics on use of the site Consent (art. 6.1.a), which may be withdrawn at any time Analytics cookies
Commercial communications by email on products and services similar to those requested Consent, or legitimate interest within the limits of art. 130, para. 4, D.Lgs. 196/2003 (soft spam), with the option to object in every message Email

Providing the data marked as required in the form (name, email, phone) is necessary to respond to the request; if they are not provided, the request cannot be followed up. Providing the other data is optional.

1.4 Processing methods and security

Data are processed with IT and electronic tools, with appropriate technical and organisational measures (art. 32 GDPR): encrypted HTTPS connection, access control, logs, backups. There is no automated decision-making or profiling with legal effects (art. 22 GDPR).

1.5 Recipients of the data

Data may be processed, on behalf of the Controller and as data processors (art. 28 GDPR) or as independent controllers, by:

  • Vercel Inc. (USA) — hosting and delivery of the site. Transfer outside the EU on the basis of the Standard Contractual Clauses and participation in the EU-U.S. Data Privacy Framework.
  • Hostinger International Ltd. (Cyprus/Lithuania, EU servers) — infrastructure for the contact form management system (n8n) on a private server of the provider appointed by the Controller.
  • Hosting Virtuale s.r.l. (Italy) — email service for the info@lamarmarmi.it mailbox.
  • Google Ireland Ltd. — Gmail, email service for the lamarmarmi@gmail.com mailbox, which receives a copy of the requests sent through the contact form.
  • Google Ireland Ltd. — Google Analytics 4 and Google Tag Manager (only with prior consent; anonymised IP).
  • Consultants and suppliers of the Controller (web agency/digital consultant Camillo Bomba, accountant, legal advisers) bound by confidentiality obligations.
  • Public authorities, when required by law. The up-to-date list of data processors can be requested from the Controller. Data are not disclosed to the public.

1.6 Transfers to third countries

Some providers (Vercel, Google) may process data in the United States. Transfers take place on the basis of the European Commission adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework) for participating providers and, alternatively, of the Standard Contractual Clauses (art. 46 GDPR) with supplementary measures. For Swiss clients: processing also complies with the LPD (nLPD 2023), the Swiss Federal Act on Data Protection; Switzerland is recognised as an adequate country by the European Commission, and vice versa.

1.7 Retention period

  • Contact requests and quotes not followed by a contract: 24 months from the last contact, then deletion.
  • Data relating to contracts: 10 years from completion (civil and tax obligations, art. 2220 c.c.).
  • Statistical cookies: durations stated in the Cookie policy; consent is stored for 6 months and then requested again.
  • Security logs: 30 days at most, unless needed to investigate unlawful acts.

1.8 Rights of the data subject

Data subjects may exercise at any time the rights under arts. 15–22 GDPR: access, rectification, erasure, restriction, portability, objection, withdrawal of consent (without affecting the lawfulness of prior processing). Requests should be sent to info@lamarmarmi.it or to the PEC address lamarmarmisrl@pec.it; the Controller replies within one month. Data subjects also have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority; www.garanteprivacy.it, Piazza Venezia 11, 00187 Roma) or with the authority of their Member State of residence.

1.9 Minors

The site is not aimed at children under 14, and the Controller does not knowingly collect their data.

1.10 Changes

This privacy notice may be updated; the date of the last update is shown at the top. Versions in other languages are courtesy translations: in the event of any discrepancy, the Italian text prevails.