Notice on the processing of personal data

1. Data controller

Cardellino Poma Energy Solutions S.r.l. (C+P Energy Solutions S.r.l.), registered office Via Saluzzo 14/A, 12030 Villanova Solaro (CN), Italy, VAT IT04060310044. For any matter concerning personal data: a.cardellino@cardellinopoma.com, or certified email cpes@legalmail.it.

2. Data processed

Data provided voluntarily. When you fill in the form on the Contact page, or write or call the contacts shown: name, email, phone if given, company, topic and content of the message.

Browsing data. The systems hosting the site record, in normal operation, technical data implicit in internet protocols: IP address, date and time, page requested, browser and operating system. They are used only to ensure the operation and security of the service and are kept by the hosting provider for the strictly necessary time.

Cookies. The site stores in the browser the choice made on the cookie banner and, only with consent, uses Google Analytics 4 statistics cookies. Details in section 10. The site does not load fonts, maps or social plugins from third-party servers. Only the Contact page loads Cloudflare Turnstile, the form's anti-spam check described in section 10.

3. Purposes and legal bases

Answering requests and managing the pre-contractual phase: steps taken at the request of the data subject (Art. 6(1)(b) GDPR).

Measuring visits in aggregate form with Google Analytics 4: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which may be withdrawn at any time.

Ensuring the security of the site and preventing abuse: legitimate interest (Art. 6(1)(f)).

Complying with legal obligations, accounting and tax: Art. 6(1)(c).

Data are not used for marketing or to send unsolicited commercial communications.

4. Methods and retention

Data are processed electronically with appropriate technical and organisational measures, by the controller and persons authorised by it. There is no automated decision-making or profiling. Request data are kept for the time needed to reply and no longer than 24 months from the last contact, unless a contract follows, in which case statutory retention periods apply.

5. Recipients

Data may be processed on behalf of the controller, as processors under Art. 28 GDPR, by hosting, email, contact form forwarding and domain providers, and disclosed to advisers bound by professional secrecy and to authorities where required by law. Requests about SolarCleano robots may be shared with the manufacturer, SolarCleano (Luxembourg), when needed for a quotation, a technical check or a warranty intervention. Data are not disseminated or transferred to third parties for their own purposes.

6. Transfers outside the European Union

Data collected by Google Analytics may be processed by Google LLC in the United States, on the basis of the European Commission's adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework. Any other transfer to third countries relies on an adequacy decision (Art. 45 GDPR) or standard contractual clauses (Art. 46 GDPR).

7. Your rights

You may exercise at any time the rights under Articles 15 and following of the GDPR: access, rectification, erasure, restriction, portability, objection. Requests go to the contacts in section 1 and are answered within one month. You may always lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), www.garanteprivacy.it.

8. Minors

The site is aimed at businesses and does not knowingly collect data from persons under 18.

9. External links

The site links to LinkedIn and lydius.it. Following them, you leave this site and are subject to the destination's privacy notice.

10. Cookie notice

Necessary storage, no consent required. The site stores in the browser, via localStorage, the item cp_consent with your banner choice and its date. It lasts six months, after which the choice is asked again. It contains no identifying data and is not sent to third parties.

Third-party statistics cookies, only with consent. Google Analytics 4, provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), sets the cookies _ga and _ga_<ID>, lasting up to 13 months, to distinguish visitors and measure page views. It is configured without Google Signals and without ad personalisation. The script is not loaded until you consent and is disabled, with its cookies deleted, if you withdraw. Google's notice: policies.google.com/privacy.

Managing consent. On your first visit a banner lets you accept, refuse or customise. Refusing does not limit use of the site. Closing the banner or continuing to browse does not count as consent. You can change your choice at any time from "Cookie preferences" at the bottom of every page.

Anti-spam check, no consent required. On the Contact page the form is protected by Cloudflare Turnstile, provided by Cloudflare, Inc., which checks that the submission comes from a person and not from an automated program. Turnstile uses no profiling cookies and has no advertising purpose; it processes technical browser data only for this check, on the basis of the controller's legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Cloudflare's notice: cloudflare.com/turnstile-privacy-policy.

11. Changes

This notice may be updated. The current version, with its date, is always published on this page.