Privacy Policy (GDPR-Compliant)

Last updated: 1 December 2025

1. Introduction

This Privacy Policy explains how ITA.MACH. SRL collects, uses, and protects personal data when you visit itamach.it or contact us.

We comply with the EU General Data Protection Regulation (GDPR), the Italian Data Protection Code (D.lgs. 196/2003), and all applicable privacy laws.

2. Data Controller

ITA.MACH. SRL
Address: Via, Mario Franza, 1, Lessolo (TO) 10010

Email: info@itamach.it
P.IVA: 12862100018

3. What Personal Data We Collect

We collect only the data necessary to operate our website and respond to your requests.

3.1 Data Collected Automatically

When you visit our website, Wix (our hosting provider) may automatically process:

IP address (anonymized where possible)

Device type and browser

Website navigation and access logs

Security data (firewall and anti-abuse detection)


These are used exclusively for security, site operation, and performance.

3.2 Data You Provide Voluntarily

If you contact us via email, form, or phone, we may collect:

Name

Email address

Phone number

Company details

Any other information voluntarily provided


3.3 Cookies

Our site uses only necessary and functional cookies from Wix.
See our Cookie Policy for full details.

4. Legal Bases for Processing

We process data based on the following legal bases:

Legitimate interest (Art. 6(1)(f)) – ensuring website functionality and security

Pre-contractual or contractual necessity (Art. 6(1)(b)) – responding to inquiries

Compliance with legal obligations (Art. 6(1)(c))


We do not use your data for marketing or profiling.

5. How We Use Personal Data

We use your data only to:

Operate and secure the website

Respond to inquiries

Manage professional or commercial relationships

Fulfill legal obligations

Improve service reliability and performance


We do not sell, share, or exchange data with third parties for marketing.

6. Who Can Access Your Data

Your data may be accessible only to:

Our internal staff

Wix.com Ltd (our hosting provider)

IT/security partners strictly for operational reasons

Authorities if legally required


All providers comply with GDPR or equivalent standards.

7. Data Retention

We retain personal data only as long as necessary:

Contact inquiries: up to 24 months

Technical logs: typically 30–180 days

Legal compliance documents: according to statutory retention periods


8. Data Transfers Outside the EU

Because our site is hosted by Wix.com, data may be processed in:

EU

Israel (recognized by the EU as adequate)

USA (with safeguards)


Wix applies GDPR-compliant protections including SCCs.

9. Your Rights

You have the right to:

Access your data

Correct inaccurate data

Request deletion (“right to be forgotten”)

Restrict processing

Object to processing

Data portability

File a complaint with the Italian Data Protection Authority (Garante)


Requests can be sent to: info@itamach.it

10. Changes to This Policy

We may update this policy periodically. Updates will be posted on this page.