The processing of your data,
explained clearly

1. Data controller

The data controller is Araldi S.r.l., with registered office at Via V. Alfieri 71, 26036 Villanova di Rivarolo del Re (CR), VAT no. 01256020197, telephone +39 0375 534379, email info@eridano.info. Requests relating to personal data may be addressed to the same contact details. Given the nature of the activity carried out, the company is not required to appoint a Data Protection Officer (DPO) pursuant to Article 37 of the GDPR.

2. Which personal data we process

Data provided voluntarily by the data subject. If you contact us via the contact details published on the website (telephone, fax, email), we process the data you choose to communicate to us: name, email address, telephone number, company name (if applicable) and the content of your request.

Navigation data. The computer systems and software procedures that run the website automatically acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (IP addresses, browser type, operating system, domain and visit times). Such data are processed exclusively for technical, aggregated statistical and security purposes.

Cookies. This website does not install cookies or other tracking tools: see our Cookie Policy.

Functions that remain on your device. The answers you select in the product selection guide are processed by your browser and are not sent to the data controller or to third parties.

3. Purposes and legal bases of processing

Data are processed for the following purposes:

• to respond to requests received (information, quotes, commercial and administrative contacts): the legal basis is the performance of pre-contractual or contractual measures at the request of the data subject, Article 6, paragraph 1, letter b) of the GDPR;
• to comply with legal obligations (administrative, accounting and tax obligations connected to a possible business relationship): the legal basis is legal obligation, Article 6, paragraph 1, letter c) of the GDPR;
• security of information systems and protection of the data controller's rights in legal proceedings: the legal basis is the legitimate interest of the data controller, Article 6, paragraph 1, letter f) of the GDPR.

Data are not disclosed to third parties for marketing purposes and are not used for any profiling activity. No automated individual decisions are made pursuant to Article 22 of the GDPR.

4. Nature of the provision of data

The provision of contact data is optional and arises from the data subject's own initiative; failure to provide it has the sole consequence that we cannot reply. Navigation data are instead acquired automatically, as they are necessary for the functioning of computer systems.

5. Processing methods and retention periods

Processing is carried out with computer tools and, for certain obligations, on paper, in compliance with Article 32 of the GDPR (appropriate technical and organisational measures) and in accordance with the principles of lawfulness, fairness, transparency and data minimisation (Articles 5 and 25 of the GDPR). Data are retained for the time necessary to pursue the purposes set out above and in any case for the period required by applicable legal obligations, including the retention of accounting documents for the period provided by civil and tax law and defence in legal proceedings.

6. Scope of data communication

Data may be processed by authorised company personnel (Article 29 of the GDPR and Article 2-quaterdecies of the Code) and be disclosed to external parties who provide services functional to the activity (hosting and email providers, IT assistance, professionals), who operate as data processors pursuant to Article 28 of the GDPR. An updated list of processors is available upon request from the data controller. Data are not disseminated.

7. Transfer of data to third countries

The website does not embed third-party resources: typefaces, images and scripts are served by the website's own server, without requests to external providers during navigation. Personal data are not transferred to countries outside the European Union or the European Economic Area; should a service provider result in such a transfer, it shall only occur in the presence of an adequacy decision by the European Commission or other appropriate safeguards (Articles 45 and 46 of the GDPR).

8. Rights of the data subject

In relation to the processing described, the data subject may exercise at any time the rights provided for in Articles 15–22 of the GDPR:

• access to data and rectification of inaccurate data (Articles 15 and 16);
• erasure, in the cases provided for by the regulation (Article 17);
• restriction of processing (Article 18);
• portability of the data provided (Article 20);
• objection to processing (Article 21);
• withdrawal of consent given, if applicable, without prejudice to the lawfulness of processing previously carried out.

Requests should be addressed to the data controller via the contact details referred to in point 1. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it, email protocollo@gpdp.it, PEC protocollo@pec.gpdp.it) if they believe that the processing violates data protection regulations.

9. Updates to this notice

This notice may be subject to changes over time, including in relation to regulatory updates or developments to the website; we invite you to consult this page periodically.

Notice last updated on 1 November 2026.