Privacy Policy
Pursuant to Regulation (EU) 2016/679 (“GDPR”) and the relevant national legislation, this Privacy Policy has been drawn up to inform Data Subjects of how PIZZATO ELETTRICA SRL handles and processes personal data.
For easier consultation of the document, it has been divided into an initial section providing general indications, followed by specific sections dedicated to the different types of relationships with Data Subjects.
2.1 Data Controller
The Controller of the Data Subjects’ personal data is the company PIZZATO ELETTRICA SRL (VAT ID 01704080249), with registered office in Marostica (VI), Via Torino, 1 (the “Controller”).
2.2 Processing procedures
Processing of the Data Subject’s data may be carried out using either paper or digital and/or electronic means, employing organisational methods and logic strictly tied to the indicated purposes, and fully in line with the principles set out in the GDPR.
The Controller undertakes to comply with specific security measures to prevent loss, unlawful or incorrect use or any unauthorised access to data, in full compliance with the laws and regulations in force.
Data will be processed only for the period of time strictly necessary for pursuit of the purposes for which it has been collected or provided voluntarily by the Data Subject.
Processing operations will be performed by Persons Authorized to Process Personal Data and/or Data Processors appointed by the Controller, working under the direct authority of the latter and complying with all instructions received.
2.3 Rights of the Data Subject
The Data Subject has the right to obtain the following from the Controller, by submitting a request via email to
- access to their personal data and to any information that concerns them and, on request, a copy of the processed personal data (art. 15 GDPR);
- rectification of incorrect personal data and supplementation of incomplete data (art. 16 GDPR);
- erasure of personal data that concerns them (art. 17 GDPR);
- restriction of processing of their personal data (art. 18 GDPR);
- a copy of their personal data in a structured, machine-readable format, also for the purpose of sharing said data with another data controller (art. 20 GDPR).
The Data Subject also has the right:
- to object to processing at any time on grounds relating to their specific situation (art. 21 GDPR);
- to withdraw consent at any time, where this consent constitutes the legal basis for the data processing; this right may also be exercised via the specific instruments indicated in the specific sections (art. 7, para. 3 GDPR).
Finally, the Data Subject has the right, without prejudice to all other forms of legal and judicial recourse, to file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), should they consider that the processing violates Regulation (EU) 2016/679.
2.4 Updates and amendments
The Controller reserves the right to periodically modify, add to or update this Policy in accordance with applicable legislation or provisions adopted by the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Therefore, the Data Subjects are invited to consult the Privacy Policy on a regular basis to check the version currently in force.
3.1 Categories of data and purposes of the processing
The processing concerns the Customer’s general personal data, in their capacity as Data Subject, i.e. all identification and general details such as name, surname, telephone number and standard email address.
The personal data provided by the Data Subject will be processed by the Controller for the following purposes:
- To propose and establish a contract of sale;
- To fulfil obligations arising from the contractual relationship of a commercial nature, along with related activities for performance of the contract;
- To manage legal and fiscal aspects of the commercial relationship;
- To manage the archiving and retention of data, information, communications and documents, also in electronic formats, concerning the commercial relationship.
3.2 Legal basis for the processing
The legal basis for the processing of personal data for the purposes set out in section 3.1 is:
- Honouring the contractual relationship, pursuant to art. 6, para. 1(b) of the GDPR;
- Compliance with a legal obligation to which the Controller is subject, pursuant to art. 6, para. 1(c) of the GDPR.
3.3 Provision or refusal of data
Provision of general personal data for the purposes set out in section 3.1 is mandatory. Failure on the part of the Data Subject to provide their personal data or provision of incomplete data will prevent the processing of said data and consequently prevent the contract from going ahead.
3.4 Disclosure of data
The personal data may be disclosed to:
- Tax consultants or other professionals providing services to the Company relating to the purposes indicated in section 3.1;
- Banks, insurance and transportation companies and other businesses providing services relating to or necessary for the purposes indicated above;
- Employees of the Company or of Companies belonging to Pizzato Elettrica s.r.l.
In addition, data stored and held in our archives may also be disclosed to the following parties:
- Suppliers of electronic communication services and IT and other electronic services concerning the storage, processing and management of data;
- Suppliers of IT-systems maintenance services.
The data processed may be transferred outside of the European Union, ensuring the lawfulness of personal data processing as set out in arts 44 et seq. of the GDPR.
3.5 Data storage period
Data provided by the Data Subject will be stored for the full period of time necessary for the Controller to correctly pursue the purposes indicated in section 3.1, i.e. for the entire duration of the commercial relationship and, subsequently, for as long as the Controller is required to store the data for fiscal or other reasons, as laid down by laws or regulations, and therefore for the period of time required to ensure legal protection.
4.1 Categories of data and purposes of the processing
The processing concerns the Supplier’s general personal data, in their capacity as Data Subject, i.e. all identification and general details such as name, surname, telephone number and standard email address.
The personal data provided by the Data Subject will be processed by the Controller for the following purposes:
- To fulfil supply-contract obligations;
- To manage legal and fiscal aspects of the supply contract;
- To manage the archiving and retention of data, information, communications and documents concerning the supply contract.
4.2 Legal basis for the processing
The legal basis for the processing of personal data for the purposes set out in section 4.1 is:
- Honouring the contractual relationship, pursuant to art. 6, para. 1(b) of the GDPR;
- Compliance with a legal obligation to which the Controller is subject, pursuant to art. 6, para. 1(c) of the GDPR.
4.3 Provision or refusal of data
Provision of general personal data for the purposes set out in section 4.1 is mandatory. Failure on the part of the Data Subject to provide their personal data or provision of incomplete data will prevent the processing of said data and consequently prevent the contract from going ahead.
4.4 Disclosure of data
The personal data may be disclosed to:
- Tax consultants or other professionals providing services to the Company relating to the purposes indicated in section 4.1;
- Banks, insurance and transportation companies and other businesses providing services relating to or necessary for the purposes indicated above;
- Employees of the Company or of Companies belonging to Pizzato Elettrica s.r.l.
In addition, data stored and held in our archives may also be disclosed to the following parties:
- Suppliers of electronic communication services and IT and other electronic services concerning the storage, processing and management of data;
- Suppliers of IT-systems maintenance services.
The data processed may be transferred outside of the European Union, ensuring the lawfulness of personal data processing as set out in arts 44 et seq. of the GDPR.
4.5 Data storage period
Data provided by the Data Subject will be stored for the full period of time necessary for the Controller to correctly pursue the purposes indicated in section 4.1, i.e. for the entire duration of the commercial relationship and, subsequently, for the period of time for which the Controller is required to store the data for fiscal or other reasons, as laid down by laws or regulations, and therefore for the period of time required to protect itself legally.
5.1 Categories of data and purposes of the processing
The Company collects the general personal data of users (e.g. name, surname and email address), meaning individuals who visit the website and register in the specific section or who send requests for information using the dedicated contact form.
Please be informed that the personal data you voluntarily provide will be processed by the Controller for the following purposes:
- to enable navigation of the website through the use of cookies;
- to respond to your requests for information;
- to propose or enter into commercial contracts;
- to fulfil obligations arising from the commercial relationship, as well as to perform all connected activities required for its performance;
- to manage legal and fiscal aspects of the commercial relationship;
- to allow you to download Pizzato software by logging in to your user area;
- to allow you to download 3D/CAD files;
- to allow you to sign up to Pizzato Academy webinars.
5.2 Legal basis for the processing
The legal basis for the processing as set out in section 5.1, letters:
- a) is the consent you have provided pursuant to art. 6, para. 1(a) of the GDPR;
- b), c), d), e), f), g), and h) is the performance of the contract or of pre-contractual activity, pursuant to art. 6, para. 1(b) of the GDPR and fulfilment of a legal obligation upon the Controller, pursuant to art. 6, para. 1(c) of the GDPR.
5.3 Provision or refusal of data
Provision of data is optional.
Partial or complete failure to provide the data required for the purposes set out under art. 5.1(a) may render certain online services unavailable.
In any case, the Website can be visited anonymously. In this case, the Controller will not be able to recognise the user on their next access, however certain beneficial features of the website may be unavailable.
Partial or complete failure to provide the data on the part of the Website user required for the purposes set out in art. 5.1, sections b), c), d), e), f), g), and h) will lead to the partial or complete inability of successfully pursuing the purposes for which the data is provided to the Controller, including but not limited to, an inability to respond to requests you have sent through the Website or participation in webinars.
5.4 Withdrawing consent
The consent given, limited to processing outside the scope of contractual performance or legal obligations, may be withdrawn at any time, pursuant to art. 7, para. 3 of the GDPR, via the general instrument for exercising the Rights of Data Subjects or by sending an email to
In any case, withdrawal of consent does not affect the legality of processing performed on the basis of the consent given prior to its withdrawal.
5.5 Disclosure of data
Your personal data may be disclosed to:
- Tax consultants or other professionals providing services to the Company relating to the purposes indicated above;
- Banks, insurance and transportation companies and other businesses providing services relating to the purposes indicated above;
In addition, your data stored on our systems may be disclosed to the following parties:
- Suppliers of electronic communication services and IT and other electronic services concerning the storage, processing and management of data;
- Suppliers of IT-systems maintenance services.
The data processed may be transferred outside of the European Union, ensuring the complete lawfulness of personal data processing as set out in arts 44 et seq. of the GDPR.
User profiling is not carried out.
5.6 Data storage period
Data processed pursuant to art. 6, para. 1 b) and c) of the GDPR will be stored for as long as is necessary for the Controller to correctly fulfil all contractual and pre-contractual obligations, as well as for compliance with legal requirements, and in any case for a maximum period of ten (10) years, except in cases where a longer period of storage is required by law.
Data processed pursuant to art. 6, para. 1(a) of the GDPR will be stored until withdrawal of your consent.
5.7 Other websites
The Website may contain links to third-party apps and other websites that can offer useful information and/or services to visitors.
This Privacy Policy does not apply to such apps and websites.
The processing of user data carried out by these third-party websites will be subject to their own privacy policies, which users are encouraged to consult.
6.1 Categories of data and purposes of the processing
For participation in events (whether in person or online via third-party platforms), the Controller may process the following categories of personal data:
- identification data (name and surname)
- contact details (email address and telephone number)
- company data (company and role held)
- information concerning registration and participation
- data concerning the use of content.
The personal data provided by the Data Subject will be processed by the Controller for the following purposes:
- management of registration and participation in events
- organisation and operational management (sending communications, platform access, etc.)
- administrative management and logistics
- sending information or learning materials connected to the event
- issuing participation certificates (where applicable)
- management of event registrations
- sending communications about similar future events (within the limits set by applicable legislation).
6.2 Legal basis for the processing
The legal basis for the processing set out in section 6.1 is the consent provided by the Data Subject in order to participate in the event:
- pursuant to art. 6, para. 1(a) of the GDPR regarding the sending of promotional messages and event registrations;
- pursuant to art. 6, para. 1(b) of the GDPR regarding fulfilment of pre-contractual or contractual activity for registration.
6.3 Provision or refusal of data
Provision of data is:
- mandatory for participation in events
- optional for other purposes (e.g. marketing or registrations).
Failure to provide mandatory data will prevent participation in events.
6.4 Withdrawing consent
The consent given may be withdrawn at any time, pursuant to art. 7, para. 3 of the GDPR, via the general instrument for exercising the Rights of Data Subjects, by sending an email to
In any case, withdrawal of consent does not affect the legality of processing performed on the basis of the consent given prior to its withdrawal.
6.5 Disclosure of data
The Data Subject’s personal data may be disclosed to:
- External companies that manage online platforms for running videoconference events, which the Controller may decide to collaborate with;
- Employees of the Company or of Companies belonging to Pizzato Elettrica s.r.l.
In addition, data stored and held in our archives may also be disclosed to the following parties:
- Suppliers of electronic communication services and IT and other electronic services concerning the storage, processing and management of data;
- Suppliers of IT-systems maintenance services.
The data processed may be transferred outside of the European Union, ensuring the lawfulness of personal data processing as set out in arts 44 et seq. of the GDPR.
6.6 Data storage period
The Data Subject’s personal data will be stored by the Controller solely for the purposes set out in section 6.1, for the entire duration of the event and until withdrawal of consent.
6.7 Other websites
The Website may contain links to third-party apps and other websites that can offer useful information and/or services to visitors.
This Privacy Policy does not apply to such apps and websites.
The processing of user data carried out by these third-party websites will be subject to their own privacy policies, which users are encouraged to consult.
7.1 Categories of data and purposes of the processing
In the context of assessing the possibility of entering into an employment relationship, the Controller may process general personal data (e.g. identification and general details including name, surname, telephone number, mobile number, standard email address, tax ID and residence address) and special categories of personal data (e.g. gender or being a member of a protected category) of potential candidates for employment.
The personal data provided by the Data Subject will be processed by the Controller for the following purposes:
- To plan and carry out personnel recruitment and selection activity;
- To verify aptitude for work;
- To manage the archiving and retention of data, information, communications and documents relating to the Data Subject’s application.
7.2 Legal basis for the processing
The legal basis for the processing set out in section 7.1 is the consent provided by the candidate:
- pursuant to art. 6, para. 1(a) of the GDPR regarding general personal data;
- pursuant to art. 9, para. 2(a) of the GDPR regarding special categories of personal data.
7.3 Provision or refusal of data
Provision of data for the purposes set out in section 7.1 is optional.
However, the refusal of the Data Subject to provide their personal data will lead to the Data Controller being unable to process the same and, consequently, to assess the application and therefore proceed, if applicable, in selecting and hiring the candidate.
7.4 Withdrawing consent
The consent given may be withdrawn at any time, pursuant to art. 7, para. 3 of the GDPR, via the general instrument for exercising the Rights of Data Subjects, by sending an email to
In any case, withdrawal of consent does not affect the legality of processing performed on the basis of the consent given prior to its withdrawal.
7.5 Disclosure of data
The Data Subject’s personal data may be disclosed to:
- External recruitment companies, which the Controller may decide to collaborate with;
- Employees of the Company or of Companies belonging to Pizzato Elettrica s.r.l.
In addition, data stored and held in our archives may also be disclosed to the following parties:
- Suppliers of electronic communication services and IT and other electronic services concerning the storage, processing and management of data;
- Suppliers of IT-systems maintenance services.
The data processed may be transferred outside of the European Union, ensuring the lawfulness of personal data processing as set out in arts 44 et seq. of the GDPR.
7.6 Data storage period
The Data Subject’s personal data will be stored by the Controller solely for the purposes set out in section 7.1, until the Data Subject withdraws their consent.
In any case, special categories of personal data concerning the Data Subject will be stored for a maximum period of eight (8) years from when it is collected, except where longer periods of storage are required by law or by order of judicial authorities.
7.7 Consent to processing
Should the Data Subject wish to submit an application to the Controller, in order to permit the Controller to perform the processing as set out in section 7.1, the Data Subject will be asked to provide their consent to the processing in the following ways:
- If the application is submitted by the Data Subject via the online form on the Controller’s website, the Data Subject will be asked to tick the consent box;
- If a CV is spontaneously sent to the address
This email address is being protected from spambots. You need JavaScript enabled to view it. orThis email address is being protected from spambots. You need JavaScript enabled to view it. , the Data Subject should add the following wording in their accompanying email “I hereby expressly provide my consent pursuant to arts 6, para. 1(a) and 9, para. 2(a) of the GDPR allowing PIZZATO ELETTRICA S.R.L. to process my data for the purposes of this application for employment”; - In the event of interaction via the LinkedIn platform, following confirmation that this privacy policy has been reviewed upon first contact.
In the absence of consent, it will not be possible to process the request and the Data Subject’s data will not be entered into the Controller’s database.
8.1 Categories of data and purposes of the processing
The processing concerns the general personal data of the user signing up for the newsletter published by the Controller, i.e. all identification and general details such as name, surname, telephone number and standard email address.
The personal data provided by the Data Subject will be processed by the Controller for the following purposes:
- to provide periodic updates through newsletters, promotional material, commercial and/or advertising messages regarding products, conferences and training events organised by Pizzato Elettrica or in which Pizzato Elettrica is participating.
8.2 Legal basis for the processing
The legal basis for the Processing for the purposes set out in section 8.1 is the consent given by the Data Subject pursuant to art. 6, para. 1(a) of the GDPR.
8.3 Provision or refusal of data
Provision of data for the purposes set out in section 8.1 is optional.
However, the data subject’s refusal to provide their personal data will prevent the Controller from sending the user the newsletter or other marketing and promotional communications, making it impossible for the data subject to receive the information described in art. 8.1.
8.4 Withdrawing consent
The consent given may be withdrawn at any time, pursuant to art. 7, para. 3, via the general instrument for exercising the Rights of Data Subjects or by sending an email to
In any case, withdrawal of consent does not affect the legality of processing performed on the basis of the consent given prior to its withdrawal.
8.5 Disclosure of data
The Data Subject’s personal data may be disclosed to:
- Parties within Pizzato Elettrica with special authorisation to carry out activity connected to or required for management of the requested services;
- Parties who provide services for management of the IT system and telecommunications networks, including email, the newsletter and management of websites;
- Parties collaborating with the Controller on direct-marketing operations.
In addition, data stored and held in our archives may also be disclosed to the following parties:
- Suppliers of electronic communication services and IT and other electronic services concerning the storage, processing and management of data;
- Suppliers of IT-systems maintenance services.
The data processed may be transferred outside of the European Union, ensuring the lawfulness of personal data processing as set out in arts 44 et seq. of the GDPR.
Processed data will not be used for profiling.
8.6 Data storage period
The Data Subject’s personal data will be stored by the Controller solely for the purposes set out in section 8.1, until the Data Subject withdraws the consent given.
9.1 What are “cookies”?
Cookies are small text files that the websites visited by a user send to the user’s device (computer/smartphone/tablet), where they are stored and resent to the same websites on the next visit.
Cookies allow a website to recognise the user’s device and improve their browsing experience, enabling certain functionality, analysis of website usage and personalisation of content and services.
This website uses its own cookies (first-party cookies) and third-party cookies.
9.2 Types of cookies used, purposes of processing and legal basis
9.2.1 Essential technical cookies
These cookies are required for the proper functioning of the website and do not require consent from the user.
They enable, for example:
- navigation between webpages;
- access to user areas;
- language preferences;
- management of cookie consent;
- protection of the website against fraudulent and automated activity.
The legal basis for the processing is the provision of the service requested by the user and the legitimate interest of the Controller in ensuring the security and functionality of the website.
9.1.2 Preference cookies
These allow the website to save information that influences the behaviour or look of the website itself, including:
- the selected language;
- the country or region;
- preferences concerning content viewed.
The legal basis is the user’s consent, where required by applicable legislation.
9.1.3 Statistics and analytics cookies
These cookies allow the Controller to understand how users browse the website, gathering aggregate or pseudonymised information on how it is used.
The tools used may include:
- Google Analytics 4;
- Matomo Analytics;
- similar statistical-analysis tools.
The legal basis is the user’s consent.
9.1.4 Marketing and profiling cookies
These cookies make it possible to:
- track the user’s browsing;
- measure the effectiveness of advertising campaigns;
- personalise content and ads;
- show adverts based on the interests expressed by the user.
They may be installed by third parties, including:
- Google;
- YouTube;
- LinkedIn;
- Vimeo;
- other providers of marketing and multimedia services used on the website.
These cookies are installed solely with user consent.
9.3 Third-party cookies
The website incorporates services provided by third parties that may install cookies on the user’s device.
For detailed information on the methods of processing carried out by these parties, please consult the corresponding Privacy Policies.
A complete and up-to-date list of the cookies used is available in the Cookie Notice generated automatically by the consent management platform used by the website.
9.4 Consent to processing and withdrawal
The first time a user visits the website, a banner appears enabling them to:
- accept all cookies;
- refuse all non-essential cookies;
- select the authorised categories on a granular basis.
No profiling, marketing or analytics cookies requiring consent are installed prior to the user expressing their choice.
Failure to provide consent does not prevent users from browsing public areas of the website.
The user may alter or withdraw consent previously given at any time.
9.5 Disclosure of data
Some suppliers of services used by the website may process personal data in countries located outside the European Economic Area (EEA).
- In such cases, data is transferred in accordance with arts 44 et seq. of the GDPR, on the basis of:
- adequacy decisions made by the European Commission;
- having signed up to the EU-U.S. Data Privacy Framework (where applicable);
- Standard Contractual Clauses - SCC;
- other safeguards provided for by applicable law.
The user can request further information by contacting the Controller.
9.6 Data storage period
Cookies may have:
- a duration limited to the individual browser session (session cookies);
- a predetermined duration that continues after the browser is closed (persistent cookies)
The specific duration of each cookie is indicated in the Cookie Notice, which is updated automatically by the consent management platform.
10.1 Categories of processed data and purposes of the processing
In the context of promotional activity carried out on social-media and professional platforms, such as LinkedIn, Facebook, Instagram, YouTube and other similar platforms, the Company may collect and process the personal data of users who express interest in products, services or company initiatives.
The data processed may include:
- name and surname;
- email address;
- employer;
- job role;
- country of origin;
- telephone number (if provided);
- further information voluntarily entered by the Data Subject in contact or lead-generation forms.
This data may be acquired directly from the Data Subject via:
- LinkedIn Lead Gen Forms;
- forms integrated into social-media campaigns;
- contact requests submitted via messaging services on social media;
- sign-up to webinars, events, newsletters or promotional initiatives.
Personal data is processed in order to:
- respond to the Data Subject following a request for information on social media;
- send information on products, services, events, webinars and other initiatives run by Pizzato Elettrica;
- carry out business development activities and manage business opportunities;
- perform aggregate statistical analysis on the efficacy of marketing campaigns;
- enter data in company CRM systems for the management of commercial relationships.
10.2 Legal basis for the processing
The legal basis is:
- performance of pre-contractual activity requested by the Data Subject pursuant to art. 6, para. 1(b) of the GDPR, where the user has requested information or commercial contact;
- the Data Subject’s consent pursuant to art. 6, para. 1(a) GDPR, for the sending of promotional communications, newsletters and direct marketing materials, as required by applicable legislation.
10.3 Provision and storage of data
Provision of data is optional but necessary to enable the Company to handle the requests of the Data Subject and provide the required information.
Data collected in the context of lead-generation activity will be stored:
- until withdrawal of consent for marketing purposes;or for as long as necessary for management of the contact request and any commercial negotiations;
data may be stored for longer where necessary to exercise rights or for defence in judicial proceedings.
10.4 Disclosure of data
The personal data may be disclosed to:
- companies of the Pizzato Group;
- providers of CRM, marketing-automation, newsletter and advertising services;
- IT consultants and suppliers duly appointed as Processors pursuant to art. 28 of the GDPR.
If the social-media platforms used require the transfer of data to countries outside the EEA, such transfers will be carried out in compliance with arts 44 et seq. of the GDPR.
