contattaci

INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to Article 13 of Regulation (EU) 679/2016 (the “GDPR”)

This page describes the characteristics of the processing of personal data of users (the “Users”) of the website https://legatoriamassarotto.com (the “Site”).

The information found on this page does not apply to third-party sites, apps, and content of any kind, even if accessible from the Site by clicking on links present therein. In such cases, the data protection provisions of those third parties may apply, which may differ from these, and we recommend consulting them before communicating any data.

Data Controller and Contact Information

For the purposes of this notice, the data controller is the company Legatoria Massarotto s.r.l., with registered office at via Boscalto, 39, Resana (VI), 31023, VAT IT04146930260 (hereinafter simply “Legatoria Massarotto,” the “Company,” or the “Controller”). To resolve any doubts about how the Controller processes personal data, you can always contact them:

Methods of Data Collection and Types of Data Processed

Browsing Data Automatically Collected by the Site: access and browsing data. Whenever Users access the Site, the computer systems and software procedures responsible for the operation of the Site acquire, during their normal operation, access and browsing data (e.g., information about the browser used by the User, pages visited, date, time, and duration of each visit, as well as other parameters related to the User’s operating system and computer environment – the “Browsing Data”).

Data Communicated by Users: registration data as a “new user.” Through the section containing contact forms, users can send their data to the Site by entering personal data — e.g., first name, last name, country, city, phone, email — (the “Communicated Data”).

The Browsing Data and Communicated Data are collectively referred to as “Personal Data.”

Purpose and Legal Basis of Processing

The Browsing Data will be used:

  • To monitor the proper functioning of the Site.
  • In anonymous and aggregated form, for statistical purposes related to understanding how the Site is used by Users, to improve ease of access and increase its attractiveness.
  • To detect any technical issues as soon as possible.

These processes are based on the legitimate interest of the Company in improving its products and digital services and are compatible with the position of the data subjects because:

  • Monitoring the functioning of the Site and statistical data related to its use does not involve direct identification;
  • The Company’s interest reasonably appears to be shared by the Users, who can thus enjoy an increasingly efficient and optimized Site.


The Data Voluntarily Transmitted by Users will be used exclusively to:

  • Respond to commercial requests;
  • Send an informational newsletter to users.

The legal basis for this processing is the necessity to respond to Users’ requests, execute pre-contractual and possibly contractual measures adopted at the User’s request, and fulfill related legal obligations; as well as specific consent regarding the sending of the newsletter.

Recipients of the Communication of Personal Data

The Personal Data will be communicated and may be known:

  • By employees and collaborators of the Company, duly instructed and/or designated for processing;
  • By third parties providing ancillary or instrumental services to the Company’s activities, in relation to the development, provision, maintenance, and operational management of the Site, specifically appointed as data processors.

Place of Processing and Transfer Abroad of Personal Data

The processing of the User’s Personal Data will take place at the aforementioned headquarters of the Company, and the Personal Data will be stored on servers located within the European Union. Any further transfers of Personal Data abroad will occur, if to countries that do not benefit from an adequacy decision by the European Commission and therefore do not offer an adequate level of personal data protection, only:

  • After adopting appropriate safeguards such as, for example, the signing of standard clauses approved by the European Commission;
  • In the event of a derogation from the prohibition of transfers outside the European Union and, therefore, always by way of example, after obtaining the explicit and informed consent of the User, or only to the extent necessary for the execution of a contract concluded between the User and the Company, or between the Company and a third party for the benefit of the User, or for the execution of pre-contractual measures adopted at the User’s request.

Methods of Processing, Security Measures, and Retention Period of Personal Data

The Personal Data will be processed both in paper form and with electronic, IT, or automated tools, through systems that ensure their protection, security, and confidentiality. The Company has adopted specific and adequate logical, legal, organizational, and technical security measures to prevent the loss of Personal Data, unlawful or unauthorized use of the same, and unauthorized access.

  • Browsing Data: which do not allow the identification of Users, do not persist for more than 1 week and are immediately deleted after their aggregation (except for any needs for crime detection by the competent Judicial Authority);
  • Communicated Data: will be retained for longer periods where necessary to execute contractual/pre-contractual measures and for the entire duration of any contractual relationship with the Company; fulfill statutory and/or legal obligations; and ensure the judicial protection of the Company’s rights, in compliance with ordinary prescription terms.

User Rights

Users, as data subjects (i.e., individuals to whom the Data refer), are entitled to rights granted by the GDPR. In particular, pursuant to Articles 12-23 of the GDPR, data subjects have the right to request and obtain, at any time, access to their personal data, information on the processing carried out, the rectification and/or updating of personal data, deletion, and restriction of processing. Additionally, they also have the right to object to processing and to request data portability (i.e., receive personal data in a structured, commonly used, machine-readable format). Finally, data subjects, where they have given consent, always have the right to withdraw their consent at any time (this, in any case, will not affect the lawfulness of processing based on consent given before withdrawal) and to lodge a complaint with a supervisory authority (in Italy: the Data Protection Authority).

Contact Information

The above rights can be exercised at any time, by simple request to the Controller, to be sent:

For further information or clarification on the mentioned rights, you can contact the Company at the same addresses.

The Company may modify this notice to adapt it to future expansions or changes to the Site.

Information updated
on: December 23, 2025