Privacy policy

Privacy notice on the processing of personal data

pursuant to Article 13 of Regulation (EU) 2016/679 (“Privacy Policy”)

This notice is provided pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation” or “GDPR”) and describes the methods of processing personal data of users who consult and use this website, accessible at https://www.ravaiolilegnami.com (hereinafter also “Website”) or who use the services offered through the Website.
Pursuant to the current European Regulation on the protection of personal data No. 679/2016 (“GDPR”), the collection and processing of data will always follow the principles of lawfulness, fairness, and transparency.

As a result of browsing the Website, data relating to the user who accesses the site may be processed (referred to as the “data subject” as an identified or identifiable natural person).

A. Data controller

The Data Controller is Ravaioli Legnami S.r.l., represented by its legal representative pro tempore, VAT No.: 01011400395, with registered office at Via Bandoli 24 – 48012 Villanova di Bagnacavallo (RA), e-mail: , phone: +39 0545 927 309 (hereinafter “Controller”).

B. Types of data collected, purposes, legal basis and retention periods.

1. Browsing data

Personal Data may be collected autonomously by the Controller or through third parties.
In this case, the computer systems and software procedures used to operate this Website automatically acquire certain technical Personal Data of Users (e.g. IP address, type of browser used, operating system, domain name and addresses of websites from which access or exit was made, etc.), the transmission of which is inherent in the normal operation of the internet.
Purpose: such Data may be processed solely for the purpose of obtaining anonymous statistical information on the use of the Website and/or for monitoring its correct functioning.
Retention: such Data will be deleted immediately after processing.
Legal Basis: processing is carried out on the basis of the Controller’s legitimate interest in making the Website usable and ensuring safe navigation (Art. 6(1)(f)). Exclusively for specific profiling activities, on the basis of the data subject’s explicit consent (Art. 6(1)(a)).

2. User contacts via e-mail, telephone, or contact form

The optional, explicit and voluntary sending of communications by e-mail to , by telephone at +39 0545 927 309, or by filling in the contact form on the “Contacts” page of the Website, results in the subsequent acquisition of the data provided by the user, including surname, e-mail address, province, professional category, telephone number and message content, and consent to receive any response messages to their requests.
In this case, the provision of data marked as mandatory (surname, e-mail, province, category) is essential in order to use the service and receive a response to the request. The provision of non-mandatory data (telephone number, message) is optional. Without the mandatory data, we will not be able to process the request.
Purpose: the personal data thus provided are used solely to fulfil or respond to the requests submitted (e.g. requests for technical information, quotations, consultations) and are communicated to third parties only where necessary for this purpose.
Retention: data are retained for the period necessary to fulfil the request and in accordance with applicable regulations.
Legal Basis: processing is carried out for the fulfilment of a contractual and pre-contractual obligation undertaken by the Controller in connection with the service (Art. 6(1)(b)).

3. Newsletters and commercial/promotional communications

In the contact form on the Website, users may express their consent to subscribe to the Controller’s newsletter by selecting the appropriate checkbox. In this case, the user provides their contact details in order to receive commercial and/or informational communications regarding the Controller’s activities, products, news and corporate events.
The provision of such data for these purposes is entirely optional but necessary in order to provide the promotional information service described above.
Purpose: the personal data thus provided are used solely to send commercial and/or informational communications and are communicated to third parties only where necessary for this purpose and only with the explicit consent of the data subject.
Retention: data are retained for the period necessary to carry out the activity for which they were provided and, specifically for the purposes described above, for no more than two years (unless consent is renewed by the data subject or the data are used for other purposes as provided for by applicable regulations).
Legal Basis: processing is carried out on the basis of the data subject’s explicit consent (Art. 6(1)(a)).

4. Download of brochures and technical materials

The Website provides a dedicated section for downloading catalogues, brochures and technical documentation relating to
the Controller’s products. To proceed with the download, users are asked to provide certain personal data (e.g. first name, surname, e-mail address, company/organisation).
Purpose: the personal data thus provided are used to send the requested material and, where the user has given their consent, to send subsequent commercial and/or informational communications.
Retention: data are retained for the period necessary to fulfil the request and in accordance with applicable regulations.
Legal Basis: processing is carried out for the fulfilment of a contractual and pre-contractual obligation (Art. 6(1)(b)) and, for subsequent commercial communications, on the basis of the data subject’s explicit consent (Art. 6(1)(a)).

5. Links to other websites

The Website may include hyperlinks to other websites. By clicking on one of these links, the user may be redirected to another website or Internet source that may collect information about the user through cookies or other technologies.
The Controller assumes no responsibility or control authority over these other websites or Internet resources, nor over their collection, use and disclosure of the user’s personal data. You should check the privacy statements of these other websites and Internet sources to determine whether they act in compliance with privacy legislation.

6. Cookies and tracking technologies

This Website uses technical (functional), preference, statistical and marketing cookies. The Website uses a consent management system compliant with the Transparency and Consent Framework (TCF), which allows users to granularly select the categories of cookies they wish to authorise.
In particular, the cookie banner on the Website distinguishes between: functional cookies (always active, necessary for the Website to function); preference cookies (to store user settings); statistical cookies (for anonymous analysis of Website usage); marketing cookies (for profiling and sending personalised advertising).
The Website also integrates the Google reCAPTCHA service, provided by Google Ireland Limited / Google LLC, used in contact forms to protect the Website from spam and automated access. This tool may collect user data such as IP address, browser and device information, and page interaction data, which may be transferred to the United States in compliance with the safeguards provided for by the GDPR. For more information, please refer to Google’s privacy policy (https://policies.google.com/privacy).
For full details on the types of cookies used, the specific purposes of each category, and how to manage preferences, please refer to the extended cookie notice available on the Website at https://www.ravaiolilegnami.com/cookie-notice

C. Data recipients

The personal data collected are processed by the Controller’s staff, who act under specific authorisation, on the basis of specific instructions provided regarding the purposes and methods of such processing.
Furthermore, parties designated as data processors pursuant to Art. 28 of the GDPR, or sub-processors, engaged by the Controller for the provision of services and for the performance of activities within its remit, may receive the data collected as a result of browsing the Website or using the services, within the limits of their respective mandate. By way of example and without limitation, data may be communicated to: hosting and website maintenance service providers; whistleblowing report management service providers (BolognaLegale); newsletter delivery service providers; tax, legal and accounting consultants.
The relevant list may be requested from the Controller using the contact details provided in section A.

D. Data transfers

Some of the personal data collected through the Website may be transferred to countries located outside the European Economic Area (EEA), particularly in connection with the use of third-party tools for managing statistical and marketing cookies.
In such cases, the transfer takes place in compliance with the safeguards provided for by the GDPR, including adequacy decisions by the European Commission (where applicable) or the Standard Contractual Clauses (SCC) adopted by the European Commission.

E. Rights of data subjects

Data subjects (the identified or identifiable natural persons to whom the data relate) may exercise specific data protection rights, listed below:
a) right of access: the right to obtain from the Controller confirmation as to whether or not personal data are being processed and, if so, to obtain access to the personal data and detailed information regarding its origin, purposes, categories of data processed, recipients of communication and/or transfer of data, and more;
b) right to rectification: the right to obtain from the Controller the rectification of inaccurate personal data without undue delay, as well as the completion of incomplete personal data, including by providing a supplementary statement;
c) right to erasure (“right to be forgotten”): the right to obtain from the Controller the erasure of personal data without undue delay where: i. the data are no longer necessary in relation to the purposes for which they were collected; ii. the consent on which the processing is based is withdrawn and there is no other legal basis for the processing; iii. the personal data have been processed unlawfully; iv. the personal data must be erased to comply with a legal obligation;
d) right to object to processing: the right to object at any time to the processing of personal data where the legal basis is the Controller’s legitimate interest;
e) right to restriction of processing: the right to obtain from the Controller restriction of processing where the accuracy of the personal data is contested (for the period necessary for the Controller to verify the accuracy of such personal data), where the processing is unlawful and/or the data subject has objected to the processing;
f) right to data portability: the right to receive personal data in a structured, commonly used and machine-readable format and to transmit such data to another controller, where technically feasible, only in cases where processing is based on consent or on a contract and only for data processed by electronic means; g) right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, a data subject who considers that the processing of their data infringes the Regulation has the right to lodge a complaint with the supervisory authority of the Member State in which they habitually reside or work, or of the Member State in which the alleged infringement occurred.

Rights may be exercised by contacting the Controller using the contact details indicated in section A, which are repeated below:

This notice was last updated on 04/03/2026